Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/7yuHW4lN28CQlNiEWYkmuYvy9os.roa
File: 7yuHW4lN28CQlNiEWYkmuYvy9os.roa (raw, json)
Hash identifier: yzke5bkw4jCewDHn5oZX+h8uB+fNzu4e6EziT/l9nzw=
Subject key identifier: EF:2B:87:5B:89:4D:DB:C0:90:94:D8:84:59:89:26:B9:8B:F2:F6:8B
Certificate issuer: /CN=26c1e9efb4a1a693661a1e780374a715a0255e3c
Certificate serial: 0185703983D2EE8FAF4EAE673913EC3CDE48
Authority key identifier: 26:C1:E9:EF:B4:A1:A6:93:66:1A:1E:78:03:74:A7:15:A0:25:5E:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsHp77ShppNmGh54A3SnFaAlXjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/7yuHW4lN28CQlNiEWYkmuYvy9os.roa
Signing time: Mon 02 Jan 2023 02:04:55 +0000
ROA not before: Mon 02 Jan 2023 02:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51595
IP address blocks: 194.0.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:83:d2:ee:8f:af:4e:ae:67:39:13:ec:3c:de:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26c1e9efb4a1a693661a1e780374a715a0255e3c
Validity
Not Before: Jan 2 02:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef2b875b894ddbc09094d884598926b98bf2f68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8c:35:03:2c:66:de:f1:e7:e2:45:fd:7d:6e:
1d:e2:5d:1f:e2:b8:a6:bd:61:5d:75:ae:3c:1f:97:
2d:6d:ec:21:fa:1f:96:ed:10:91:7b:0d:d4:a8:46:
9e:e4:a0:55:e8:72:dc:a6:f2:94:5c:d1:cc:e6:a6:
94:47:cd:ad:ad:49:4f:70:31:e6:6b:e8:4d:7d:af:
4f:68:3c:a1:97:c6:80:b5:2b:c9:a3:17:8b:a9:9a:
26:6d:35:11:70:a6:0d:77:87:1b:58:db:84:16:a0:
b1:e9:f2:58:3b:e4:c9:28:c4:66:80:14:7a:df:a0:
cd:fe:6c:a5:f4:ab:ea:14:41:ab:69:0c:6e:3b:f7:
8b:4f:93:11:cb:71:d1:c6:89:4a:39:ab:74:42:24:
48:e1:dc:5c:db:4f:40:16:40:68:fe:7d:f4:1a:c3:
5d:c4:59:f2:56:a0:5b:07:65:33:35:cf:1a:22:8a:
f7:a0:85:90:27:33:97:7a:0b:d6:c2:2a:90:04:6d:
e1:df:5c:4e:4f:71:c6:8a:1f:2e:c3:97:2c:04:bc:
85:f6:e7:ec:1a:b7:c4:6b:fd:e3:a0:89:7f:ce:b4:
b6:17:ab:1e:21:85:93:a3:19:c8:ab:16:c6:4d:d5:
5f:ef:f2:b1:c0:9f:ad:30:58:05:2a:7e:6e:4c:cb:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2B:87:5B:89:4D:DB:C0:90:94:D8:84:59:89:26:B9:8B:F2:F6:8B
X509v3 Authority Key Identifier:
keyid:26:C1:E9:EF:B4:A1:A6:93:66:1A:1E:78:03:74:A7:15:A0:25:5E:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsHp77ShppNmGh54A3SnFaAlXjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/7yuHW4lN28CQlNiEWYkmuYvy9os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/eda287-fc68-4a95-a296-43fa67aa9c80/1/JsHp77ShppNmGh54A3SnFaAlXjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4e:51:5b:15:66:74:44:40:8f:f6:04:ec:e5:3b:61:7b:2c:
21:45:b9:bd:23:31:24:1c:9e:a4:36:98:9f:32:b3:f3:db:f3:
aa:12:98:f4:a8:31:bc:4b:5b:d4:fe:8e:38:a0:b2:3a:36:2e:
06:47:52:57:d3:e9:96:03:f3:08:1f:d6:4b:c2:07:79:ae:57:
b9:95:8d:70:9f:7b:3d:6c:11:41:95:a7:df:b5:32:c6:d5:63:
a0:d2:f3:8a:a0:2e:26:0a:7c:03:c2:1d:18:65:48:4b:52:38:
8a:9c:2b:95:07:4e:81:58:38:e6:9b:45:7b:7d:b7:32:8a:9f:
7c:b0:1e:b0:e0:f7:37:fe:ec:ae:5b:77:45:c4:e7:67:16:37:
53:30:9b:b6:f9:05:15:3e:d0:e2:e6:e6:b1:02:db:d5:db:d1:
78:f7:cf:2a:cc:11:9e:b1:c3:1d:f5:7f:bb:87:31:72:41:4a:
83:c4:a8:4f:38:c4:80:33:9c:d3:4f:64:e9:d7:92:f6:c3:95:
25:cb:cf:94:01:3c:95:ba:85:bc:24:bc:10:85:b4:f0:b3:90:
1b:af:b2:90:73:53:cb:e3:65:f0:d1:b7:e0:d4:80:fa:ec:17:
ad:31:64:c6:be:70:3e:55:99:05:74:57:9b:3b:64:05:f9:7c:
26:71:d5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:54 2025 by rpki-client