Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/7BXDP2MXXtjiuKfCj7kGQbobaJg.roa
File: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (raw, json)
Hash identifier: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=
Subject key identifier: EC:15:C3:3F:63:17:5E:D8:E2:B8:A7:C2:8F:B9:06:41:BA:1B:68:98
Certificate issuer: /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial: 019420D5D286E8FE10F2A66ABD3F0153A92A
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/7BXDP2MXXtjiuKfCj7kGQbobaJg.roa
Signing time: Wed 01 Jan 2025 07:47:51 +0000
ROA not before: Wed 01 Jan 2025 07:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64482
IP address blocks: 185.189.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d2:86:e8:fe:10:f2:a6:6a:bd:3f:01:53:a9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Validity
Not Before: Jan 1 07:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec15c33f63175ed8e2b8a7c28fb90641ba1b6898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:b4:38:c6:64:bb:fd:ba:9e:14:5e:0c:5e:
ef:f0:76:71:1c:3f:c9:97:d0:b4:17:ab:6e:cd:bd:
37:28:67:17:4a:f2:04:51:2c:db:b8:c8:dd:34:4a:
16:03:a1:07:2d:2d:46:03:99:27:51:ef:62:40:13:
97:18:54:a1:84:64:d9:e8:eb:f3:32:af:0a:e9:fa:
8d:1b:cb:9c:8e:b3:06:1f:db:6c:4a:be:52:ec:72:
9a:71:c4:11:77:91:b8:fe:20:24:8d:63:ff:68:d9:
79:c1:f5:0c:96:1e:a0:13:e4:a8:b1:2a:32:b3:1c:
66:9e:00:ad:83:d3:ec:30:a7:5d:72:72:3e:e6:58:
e2:c1:b1:07:7e:06:31:e9:13:45:db:34:18:72:82:
73:27:0b:e2:c9:8d:6f:6c:3b:f6:e8:b9:0b:71:cf:
63:7b:14:91:9b:87:06:08:4c:28:4e:0c:32:3c:e7:
f7:10:cc:12:eb:05:98:9a:14:09:0a:61:86:86:4a:
35:62:6d:78:80:1a:b9:09:50:50:d4:85:a7:39:ed:
fd:b8:dd:d2:f9:2f:a6:a4:df:f5:ff:de:02:6d:9a:
48:cb:cf:08:54:ae:7b:37:08:88:cf:7d:7d:e9:3b:
ef:16:43:70:c7:d2:8a:34:70:bb:c7:e7:63:8b:3d:
a1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:15:C3:3F:63:17:5E:D8:E2:B8:A7:C2:8F:B9:06:41:BA:1B:68:98
X509v3 Authority Key Identifier:
keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/7BXDP2MXXtjiuKfCj7kGQbobaJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.74.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:9e:07:d3:aa:56:cd:7c:29:94:f1:db:8f:5e:5a:b9:23:08:
52:94:4f:ad:9a:cd:4e:cb:8c:bc:4c:9b:98:1a:d5:aa:25:0e:
61:49:2d:ff:14:39:27:fe:2a:10:af:82:07:d3:af:55:0b:8f:
2a:ca:73:02:c7:0e:e1:7e:79:54:02:7b:6a:f3:37:e7:b3:db:
3c:c6:05:f7:15:c4:17:d7:7e:39:30:64:40:5a:48:4c:26:80:
50:89:d2:24:75:0b:a0:a9:03:7a:f2:7c:48:58:60:64:b6:5c:
16:37:d1:91:5c:35:f6:b2:ef:a7:c0:e1:83:bc:78:df:a7:97:
9a:f3:8f:01:ad:6e:2f:1c:7c:d8:0e:2b:97:0e:23:c5:e6:b3:
a9:76:33:64:83:14:55:b9:42:e0:e6:05:1b:c2:39:9e:2f:ed:
74:c4:eb:dd:f7:23:fb:4f:4c:5c:a1:71:f6:25:c0:56:40:e3:
6d:11:2b:f9:5d:f6:ae:8d:99:48:21:d7:21:6c:88:0f:0a:95:
94:35:bf:0d:35:1e:2d:11:14:2d:6f:4a:1d:4f:d5:94:fa:bb:
40:a5:95:cd:02:90:a2:73:30:8c:47:22:f3:06:49:7f:58:6b:
61:f6:d7:16:2d:42:ee:08:49:ba:4f:76:fa:24:a7:8c:93:fa:
b0:da:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:10 2025 by rpki-client