Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8f0c68-b22f-4d7e-90eb-e8244e36a9ec/1/7ZaSZcnkUVZ7nv5JM5yBLMtx-Gs.roa
File: 7ZaSZcnkUVZ7nv5JM5yBLMtx-Gs.roa (raw, json)
Hash identifier: l23ro488wLkvMDaSOsOr6OLMd4QBHUPusgUWmd03TSU=
Subject key identifier: ED:96:92:65:C9:E4:51:56:7B:9E:FE:49:33:9C:81:2C:CB:71:F8:6B
Certificate issuer: /CN=a184eb07bbc0cc6f3301986f8392e489f7554b2a
Certificate serial: 019306C73F507303BE85A9A9B234354A40EA
Authority key identifier: A1:84:EB:07:BB:C0:CC:6F:33:01:98:6F:83:92:E4:89:F7:55:4B:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYTrB7vAzG8zAZhvg5LkifdVSyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8f0c68-b22f-4d7e-90eb-e8244e36a9ec/1/7ZaSZcnkUVZ7nv5JM5yBLMtx-Gs.roa
Signing time: Thu 07 Nov 2024 13:19:01 +0000
ROA not before: Thu 07 Nov 2024 13:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197248
IP address blocks: 185.229.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:06:c7:3f:50:73:03:be:85:a9:a9:b2:34:35:4a:40:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184eb07bbc0cc6f3301986f8392e489f7554b2a
Validity
Not Before: Nov 7 13:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed969265c9e451567b9efe49339c812ccb71f86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:a2:3e:10:25:4a:d6:9a:e7:c0:80:ed:96:
a0:7a:0e:84:8f:fe:ce:bf:7f:8b:0b:12:e7:fc:29:
3e:7e:1c:30:09:56:21:b7:34:bf:4c:49:c9:2c:35:
a3:0d:dd:4e:fd:bc:5a:2f:cd:8c:ee:f8:48:d0:96:
b0:21:aa:e2:43:af:da:72:04:02:4e:85:b0:bb:64:
d7:c3:23:ad:5e:35:1c:af:d6:63:25:f0:39:29:34:
5a:eb:3d:dc:ff:96:54:5c:31:61:35:5d:c3:cb:33:
42:39:06:8c:cc:c2:2b:e5:b6:f9:f2:dd:91:a1:a8:
aa:2e:8b:53:03:b4:6b:ca:fe:50:c7:f9:6a:5a:b8:
7b:55:f8:6b:c5:1d:67:e5:83:54:6b:26:af:6f:dc:
3e:3b:fa:a7:d6:f3:8f:c0:bc:f8:ff:d7:3c:e8:f0:
ff:21:df:04:a5:7f:69:72:17:0b:34:07:c9:64:d6:
b2:3c:f4:08:26:34:5f:b4:61:5c:5a:6a:74:3f:b4:
88:1e:43:83:31:ec:12:24:0a:59:39:0c:56:4e:9c:
cc:13:e9:4d:4d:74:5d:1e:8a:30:b8:bf:7d:50:ad:
cc:3c:3f:07:13:23:4e:dd:11:b3:b6:ec:b1:24:3e:
63:83:33:4e:15:9a:90:45:a9:db:5f:4e:ac:88:6d:
d2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:92:65:C9:E4:51:56:7B:9E:FE:49:33:9C:81:2C:CB:71:F8:6B
X509v3 Authority Key Identifier:
keyid:A1:84:EB:07:BB:C0:CC:6F:33:01:98:6F:83:92:E4:89:F7:55:4B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYTrB7vAzG8zAZhvg5LkifdVSyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8f0c68-b22f-4d7e-90eb-e8244e36a9ec/1/7ZaSZcnkUVZ7nv5JM5yBLMtx-Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8f0c68-b22f-4d7e-90eb-e8244e36a9ec/1/oYTrB7vAzG8zAZhvg5LkifdVSyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.249.0/24
Signature Algorithm: sha256WithRSAEncryption
04:fc:f4:57:78:3c:c2:d2:7e:d7:ef:f1:6e:66:15:08:b8:27:
15:36:64:3c:1c:c6:72:c5:00:dd:d1:08:cd:09:c9:8a:8c:44:
e8:d9:8e:e8:15:3f:36:ac:8b:ec:a8:0f:b2:ca:33:d1:b6:73:
65:b6:dd:9c:b8:1c:d2:db:02:b9:1a:ad:ee:90:81:40:0c:40:
ab:58:cc:46:ec:54:98:96:d5:e9:5d:a7:59:32:c4:5b:e4:2c:
48:9c:c6:c5:26:fb:d9:91:cb:91:da:9d:4f:79:1c:19:be:ac:
d0:48:94:41:c2:b8:f6:2b:8f:3a:2d:c5:51:ab:78:5d:f1:2b:
a7:ca:75:a7:38:61:be:5e:09:72:73:57:b8:9b:33:81:52:f5:
b1:5e:5d:6f:07:29:99:cf:42:e3:2a:48:40:42:bb:43:02:05:
21:44:88:8c:bb:0a:87:f4:8e:5d:4d:2d:9c:09:a0:d7:de:28:
09:bc:2e:53:0a:46:6d:55:7a:d6:27:6d:9a:f7:47:61:ea:7a:
09:b5:08:56:48:fa:52:7e:c3:af:fa:64:c6:9c:ca:a8:06:e8:
67:a7:d4:a3:6f:80:d0:77:17:95:59:70:30:74:52:f5:86:63:
9a:f5:90:33:fb:3e:c3:85:2c:c2:ab:39:ed:3b:58:0a:a6:cb:
df:c0:c8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:25:16 2025 by rpki-client