Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/7rE8D92UQ99LKpEVOGTg63zQgMU.roa
File: 7rE8D92UQ99LKpEVOGTg63zQgMU.roa (raw, json)
Hash identifier: LYsx9X9Z+Yfj94AGa8MDWiV0I8tTDuncAOKwLUJ3i40=
Subject key identifier: EE:B1:3C:0F:DD:94:43:DF:4B:2A:91:15:38:64:E0:EB:7C:D0:80:C5
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF1022E62193F4153FF093846A2C0
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/7rE8D92UQ99LKpEVOGTg63zQgMU.roa
Signing time: Thu 02 Jan 2025 09:49:55 +0000
ROA not before: Thu 02 Jan 2025 09:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204885
IP address blocks: 85.31.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f1:02:2e:62:19:3f:41:53:ff:09:38:46:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeb13c0fdd9443df4b2a91153864e0eb7cd080c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:4f:e4:47:a8:ab:13:a5:f8:57:10:f3:c8:
e5:2e:ea:c9:ca:89:86:c8:19:1e:b3:38:ad:3b:2c:
f1:f8:41:30:88:b1:06:f7:54:7a:84:90:5c:11:94:
30:d1:ac:97:bc:c3:4b:71:a5:98:1c:8a:ce:91:83:
c5:cf:74:79:a0:54:82:6b:76:fc:c0:2e:cd:1c:05:
a0:b4:bc:0b:7b:79:13:c7:8c:8a:24:4a:19:a6:b4:
21:a8:18:ef:92:2d:52:40:9e:90:df:e7:cc:ac:f4:
62:d2:b2:4f:41:ca:c3:86:aa:64:2d:95:bc:b9:0a:
3c:2b:bb:2f:7f:a3:0a:ee:c5:ae:a9:15:b7:d6:62:
fc:25:00:a7:61:94:12:42:da:5f:c1:46:84:92:3e:
4e:57:0f:b5:a1:52:7f:a2:19:c2:33:a5:2d:57:16:
5c:21:bc:f2:52:a6:fe:c7:90:f9:7f:31:45:2b:09:
c5:3d:3b:1c:f7:4e:c4:79:56:cd:5c:90:c6:e0:fc:
f1:2a:1c:19:20:85:37:3e:a5:7a:3c:d9:ac:51:ac:
0a:58:4a:a5:be:2a:31:15:b0:4b:66:f1:cb:44:5d:
cc:d4:3e:23:c4:c9:cd:31:0c:af:cc:e2:dc:1e:e6:
32:7c:22:f2:44:bb:41:8e:eb:c7:68:c3:c1:8f:6e:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B1:3C:0F:DD:94:43:DF:4B:2A:91:15:38:64:E0:EB:7C:D0:80:C5
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/7rE8D92UQ99LKpEVOGTg63zQgMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.241.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4b:10:67:61:a7:d3:56:6b:18:a1:4e:65:da:71:16:6c:fe:
f8:81:15:bd:1d:e2:f2:a2:26:7d:6a:77:07:cd:4e:11:e8:0f:
a2:2f:f8:33:29:93:3a:4b:aa:c4:d2:43:fd:c6:56:00:3b:d6:
3a:10:de:39:a2:b6:d8:4f:b7:04:a1:2c:60:65:de:ae:f9:b2:
24:be:1a:15:25:53:39:c3:7d:ac:2f:f1:91:d4:5f:58:cf:ec:
6f:49:12:f4:d8:85:b6:d5:37:5e:29:f0:40:48:50:85:86:d1:
7f:90:b6:92:eb:cf:25:f3:44:6c:dd:e0:89:f4:f9:50:a9:81:
8a:05:d3:71:d9:a6:72:6a:d0:9d:96:e3:b4:a9:31:17:55:13:
5a:a8:52:90:04:0a:1d:5f:c7:d0:4e:df:ce:1c:ce:9c:6a:3b:
35:6a:17:e5:65:40:e8:66:62:e9:c8:79:43:7b:73:6d:9a:f7:
63:45:86:11:17:21:51:bb:f5:b9:65:f2:bf:f2:07:c8:2c:63:
64:84:bf:97:cf:ef:df:7b:0d:e7:63:e9:f2:26:e5:01:eb:e9:
2e:1b:6c:72:06:be:cc:38:e3:b5:34:22:36:14:b1:8a:fe:51:
85:cf:0b:8d:e6:40:d1:75:b7:43:4f:6f:af:55:c4:2b:9c:23:
83:de:c7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:12 2025 by rpki-client