Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/L7EXeGqVkG12C3wJVuwyzMf9Lhg.roa
File: L7EXeGqVkG12C3wJVuwyzMf9Lhg.roa (raw, json)
Hash identifier: 4vnA58vgzlm8e5m5ZU11lfNSji1IS25QD/nj9LRYhm8=
Subject key identifier: 2F:B1:17:78:6A:95:90:6D:76:0B:7C:09:56:EC:32:CC:C7:FD:2E:18
Certificate issuer: /CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Certificate serial: 018CC94E445D41C9AC51C560D9A1B9105304
Authority key identifier: 3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/L7EXeGqVkG12C3wJVuwyzMf9Lhg.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8298
IP address blocks: 194.126.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:44:5d:41:c9:ac:51:c5:60:d9:a1:b9:10:53:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae145fe3b79b2bf68aadbe007def6d72aef2ac3
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fb117786a95906d760b7c0956ec32ccc7fd2e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7f:7d:5d:4d:9b:6e:9b:b9:29:46:c4:c0:34:
5e:90:49:ed:38:3e:3e:98:90:5f:4c:a2:d1:4b:ef:
cc:11:b3:d0:fb:ac:f8:0a:04:65:9f:25:cb:75:e4:
dd:c2:88:ed:30:4c:4c:a8:65:2c:1d:12:49:75:d0:
9f:92:4f:7c:84:9d:22:40:ba:e8:80:9c:15:d3:e2:
9d:37:50:cd:8d:42:55:05:f6:85:02:d5:44:25:1f:
07:80:25:76:1d:91:a2:48:10:f6:c4:9e:b8:da:ca:
ef:15:e1:27:20:98:7b:f5:78:0f:52:2f:b3:9c:18:
b3:ef:4b:a0:ed:db:48:a6:17:3a:0f:cd:5d:b7:3e:
34:28:37:93:69:76:63:70:68:73:a3:5e:ba:7c:ab:
82:6f:56:3f:0a:a7:58:00:5c:3f:dc:f1:0a:ac:ec:
5c:d6:a2:4a:28:88:05:a2:d7:b7:ea:0e:5d:79:03:
d1:a8:af:db:5c:7f:66:59:8f:86:4e:5f:8b:36:19:
39:64:bc:5f:ea:c2:12:8c:b5:d0:97:3b:e4:bb:44:
61:76:de:31:ff:b8:f8:08:e0:7d:ff:f5:b1:e8:b8:
5d:d9:82:40:9d:08:59:79:77:2e:89:06:17:7b:29:
40:da:ac:fd:7d:4c:cd:60:a0:da:b3:eb:91:ce:c6:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B1:17:78:6A:95:90:6D:76:0B:7C:09:56:EC:32:CC:C7:FD:2E:18
X509v3 Authority Key Identifier:
keyid:3A:E1:45:FE:3B:79:B2:BF:68:AA:DB:E0:07:DE:F6:D7:2A:EF:2A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuFF_jt5sr9oqtvgB9721yrvKsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/L7EXeGqVkG12C3wJVuwyzMf9Lhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/82f0f1-2147-49fd-a4d6-b7b574eedc33/1/OuFF_jt5sr9oqtvgB9721yrvKsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.235.0/24
Signature Algorithm: sha256WithRSAEncryption
d9:ad:23:68:4c:22:9b:d0:a1:cb:e5:bb:c2:a9:5f:57:c4:c6:
e3:46:08:f2:d4:dc:3a:5c:0c:bb:36:74:ff:d7:26:cb:82:51:
25:50:ff:9c:26:89:54:92:59:83:bf:45:22:14:16:6d:24:2c:
af:23:19:34:5f:16:6b:ac:a1:fc:9e:fd:d9:0d:a2:55:d5:de:
9f:73:cd:fe:82:7a:34:5b:1c:66:af:ee:8a:d6:bc:a7:89:37:
ea:2e:83:b6:ce:2f:61:3d:ea:65:6d:02:9c:d8:21:14:28:08:
64:4b:13:d3:56:48:39:0a:a4:24:2e:8b:08:11:df:6a:9e:8f:
ee:77:ce:16:4f:01:0c:6f:44:bb:43:95:76:37:38:e0:af:10:
8d:2f:4a:cb:03:6c:37:23:64:c5:d5:c5:c1:66:5b:21:f6:4b:
5d:46:1e:2e:42:9a:0d:b1:7e:10:a8:06:ff:9f:92:23:c9:ef:
ec:96:e1:be:6d:a3:07:15:53:9c:6a:9e:b9:53:64:dd:0d:6f:
8f:e0:c0:df:c7:8c:52:b5:3a:54:da:fe:e7:d6:74:d6:82:0f:
90:e7:0f:98:24:68:06:e0:9f:16:02:5b:01:d0:ae:1f:8b:0f:
f7:a3:4f:29:ef:f9:c2:7e:84:14:2b:0c:fa:ea:7a:fe:35:c6:
e5:df:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:17:09 2025 by rpki-client