Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/7QqVIV8LUR5c1jRBC94m2154ry8.roa
File: 7QqVIV8LUR5c1jRBC94m2154ry8.roa (raw, json)
Hash identifier: TrmmIYdBlXXb3FxJhiLUTMljo4lEhT6KOCibHbFmEAg=
Subject key identifier: ED:0A:95:21:5F:0B:51:1E:5C:D6:34:41:0B:DE:26:DB:5E:78:AF:2F
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 0194228D71072B76B1224A9B3874CFFEA74E
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/7QqVIV8LUR5c1jRBC94m2154ry8.roa
Signing time: Wed 01 Jan 2025 15:48:02 +0000
ROA not before: Wed 01 Jan 2025 15:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 193.10.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:71:07:2b:76:b1:22:4a:9b:38:74:cf:fe:a7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 15:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed0a95215f0b511e5cd634410bde26db5e78af2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:55:62:64:1c:0d:6d:a1:0c:5f:79:f0:b3:49:
e5:d3:b6:04:3f:ae:a4:8d:26:77:c6:fa:7c:ba:59:
75:34:fd:93:c4:8f:ef:12:96:01:9d:e4:ec:05:70:
99:35:49:87:f6:97:02:04:6c:47:43:68:d0:db:69:
68:c2:fe:7e:d3:32:19:ca:16:11:a6:27:53:dc:84:
a3:fd:16:35:19:54:10:da:8e:35:45:69:f9:cb:e8:
9a:d9:e8:98:31:8f:d5:b1:e6:fb:9f:22:12:e8:e6:
6c:bc:93:14:b1:1a:68:48:53:8a:34:81:b5:2c:0a:
5a:1f:2d:96:2a:1d:21:89:0b:56:ce:22:b2:f1:85:
83:61:e5:52:81:be:fb:e0:2e:dc:c8:0f:21:21:7a:
06:6b:c9:48:db:14:af:0e:59:0e:34:41:9b:3a:fb:
51:2a:cb:5c:de:8c:66:fc:f0:5a:74:06:cf:35:8f:
ef:fd:b1:f0:af:1b:05:fa:48:14:07:43:79:32:a2:
c2:b8:af:fa:75:33:1d:98:91:5e:01:69:5e:f1:6b:
6d:dc:f4:f1:d7:b6:cc:4e:c2:bb:1f:96:a0:58:f7:
69:0e:65:84:54:98:4d:31:68:68:9c:a6:bf:fd:28:
79:e1:5c:e2:71:94:97:64:e4:29:7b:73:9c:9d:02:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0A:95:21:5F:0B:51:1E:5C:D6:34:41:0B:DE:26:DB:5E:78:AF:2F
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/7QqVIV8LUR5c1jRBC94m2154ry8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.144.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:62:64:dc:35:bc:45:1d:ad:a2:53:5b:49:d8:30:4f:83:a7:
3c:49:c4:28:a9:99:d6:0b:f3:d2:bb:ed:37:24:51:60:87:6e:
b7:8f:d0:b8:c1:8a:37:95:e4:da:11:da:01:24:ca:87:f8:9d:
8f:16:a0:58:41:77:d8:9e:ad:4e:28:6c:a7:68:17:fa:ab:dc:
6f:83:b2:53:81:8f:e3:ee:cb:81:6c:b6:4e:59:e6:99:41:da:
54:d6:10:33:3b:f8:31:1c:a8:c2:18:bb:1d:f4:44:6c:12:e9:
a4:64:34:e5:5f:21:25:b2:ae:a8:fb:33:fe:ee:c6:6c:a0:5b:
59:e9:51:1e:e6:40:be:ec:65:a1:d7:bd:f6:be:9b:a1:1f:9a:
88:34:47:3f:69:54:14:2e:71:1a:93:c1:70:de:6c:95:7e:45:
8e:a7:64:e6:d5:79:2e:57:4a:00:7a:03:c7:d0:50:65:c5:e9:
ce:b1:a2:7a:60:b4:e4:cd:69:02:5f:75:b3:ea:0e:47:52:6f:
cb:75:3c:9e:09:b0:4f:7f:c8:5b:a7:68:62:26:ff:2b:7b:4e:
ae:92:9f:b0:90:2a:7c:3d:cd:49:53:d2:f1:25:ad:42:5f:67:
f1:31:93:f3:41:70:f2:5b:d6:00:4e:c1:0d:fe:7b:73:99:25:
c4:18:d1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 08:10:20 2025 by rpki-client