Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/L07o_vv656M9OEJjc4BFj7rpTc8.roa
File: L07o_vv656M9OEJjc4BFj7rpTc8.roa (raw, json)
Hash identifier: RSQDee8PToqw8SZNKDk+n8QFVV+DzoM0xmaXuyUh35A=
Subject key identifier: 2F:4E:E8:FE:FB:FA:E7:A3:3D:38:42:63:73:80:45:8F:BA:E9:4D:CF
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 0194258E24A1C3D2543A7692F97F467144F8
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/L07o_vv656M9OEJjc4BFj7rpTc8.roa
Signing time: Thu 02 Jan 2025 05:47:39 +0000
ROA not before: Thu 02 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 185.163.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:24:a1:c3:d2:54:3a:76:92:f9:7f:46:71:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Jan 2 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f4ee8fefbfae7a33d3842637380458fbae94dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:c0:f0:18:6c:a9:84:d7:c5:e4:11:4d:51:
98:eb:10:19:62:51:3a:0a:43:7a:11:44:98:9a:f7:
9e:e9:62:d1:90:d9:f7:7f:69:5a:99:c3:e5:ee:a0:
6d:a1:c4:3c:06:e0:37:eb:98:44:2c:b1:c1:cc:44:
48:64:95:5a:18:d5:17:29:50:61:b7:af:6e:cb:a3:
2d:35:93:52:14:2b:eb:7b:8b:fe:88:c1:81:c6:c5:
dd:74:a4:7a:09:f6:6f:7d:da:a6:ad:aa:84:c4:fc:
86:b3:5a:10:82:7a:d6:a0:ee:ad:b9:d6:2d:16:c8:
ee:7a:ae:d4:de:a3:c5:89:50:3f:c7:ff:62:93:c9:
49:ce:45:4f:4b:26:fc:62:23:d5:f1:50:35:fa:0f:
35:ae:df:e0:68:04:52:ee:42:96:02:ec:7f:46:71:
6c:c9:5c:99:43:c1:d0:f3:72:fe:37:d3:2b:62:f6:
a7:f8:41:ad:55:b4:05:38:7c:c1:13:6e:a5:a6:66:
3b:4a:8c:02:0e:e1:d2:d2:63:cf:8a:1f:2b:09:ed:
b0:d8:cb:f8:ff:3a:84:9e:9a:b2:9a:eb:ec:be:f2:
e0:91:8a:39:cd:96:1e:ff:b9:0d:a0:42:8b:88:00:
60:1e:bc:1d:6f:81:fd:44:cf:73:f5:b6:4b:63:97:
e7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4E:E8:FE:FB:FA:E7:A3:3D:38:42:63:73:80:45:8F:BA:E9:4D:CF
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/L07o_vv656M9OEJjc4BFj7rpTc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.196.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e2:07:a5:39:a2:b5:a3:1b:d6:83:63:af:64:d9:4e:0d:f4:
53:d8:20:26:cb:16:f9:e9:33:87:fd:9f:d6:a5:88:4c:c6:0d:
49:8a:48:c3:73:36:2c:84:9a:b5:18:7d:9a:ba:9e:eb:d0:a2:
d6:32:12:cd:c1:b2:f3:b9:27:3f:c1:ad:0c:f2:0e:1f:9e:57:
fa:f5:f7:ec:13:a0:76:7b:4a:04:1e:4e:96:e8:1e:df:b4:18:
4e:2c:f5:76:2c:a4:e2:45:b2:3d:0c:3f:a2:f5:ac:a5:e0:67:
b8:5c:bf:33:dc:bd:26:3b:91:3c:2e:22:aa:01:46:f6:e2:13:
5b:82:76:95:72:0f:9b:05:a9:35:16:3b:c7:e4:93:84:3a:06:
f1:0a:90:4b:21:56:42:d8:df:df:0b:8c:62:36:bf:c3:16:83:
d1:f0:7c:fa:86:2d:7c:0d:3d:62:29:01:30:26:21:47:b0:e1:
d9:6f:2c:fe:e4:7d:2d:88:43:38:cc:cd:20:01:7b:ba:2c:ee:
e2:20:f2:13:72:9e:ae:de:e5:2b:9e:40:cc:0f:d6:e6:af:23:
1f:55:23:c7:25:13:d9:fc:de:2b:8a:82:89:18:b4:7f:4c:cf:
7c:45:4c:f2:bd:66:9a:e2:9a:ee:01:ca:d3:c2:36:1f:68:27:
d5:aa:a9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:42 2025 by rpki-client