Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cb36cd-cf38-4e1a-8e1e-41ec4c047141/1/t7eyyvMahOhqtIpz8wiJYVEVVFM.roa
File: t7eyyvMahOhqtIpz8wiJYVEVVFM.roa (raw, json)
Hash identifier: +Og6QGcpkm892UO6dxLdE218hEAh6vEiv+QX4RrmVgI=
Subject key identifier: B7:B7:B2:CA:F3:1A:84:E8:6A:B4:8A:73:F3:08:89:61:51:15:54:53
Certificate issuer: /CN=7f19218711e08955eee519f9fbf9f436192d74e8
Certificate serial: 018CFE8B23D6F9F2985E5BDCEC12A3B9348A
Authority key identifier: 7F:19:21:87:11:E0:89:55:EE:E5:19:F9:FB:F9:F4:36:19:2D:74:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxkhhxHgiVXu5Rn5-_n0NhktdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cb36cd-cf38-4e1a-8e1e-41ec4c047141/1/t7eyyvMahOhqtIpz8wiJYVEVVFM.roa
Signing time: Fri 12 Jan 2024 16:39:40 +0000
ROA not before: Fri 12 Jan 2024 16:39:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 185.206.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:8b:23:d6:f9:f2:98:5e:5b:dc:ec:12:a3:b9:34:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f19218711e08955eee519f9fbf9f436192d74e8
Validity
Not Before: Jan 12 16:39:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7b7b2caf31a84e86ab48a73f308896151155453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:f4:cb:3a:30:8c:7f:d2:e8:ee:18:b0:a4:
cb:64:b0:14:10:4f:3c:9c:ad:cf:1d:54:98:03:ca:
b7:f1:48:c1:62:de:a6:c6:a5:dd:c1:02:9d:b0:17:
b5:df:e7:ed:d1:e9:32:ad:f5:22:84:33:dc:3b:50:
90:57:59:83:1e:94:f9:c5:a1:42:c6:1b:28:03:3f:
d0:3e:93:6c:50:2a:00:8e:6e:43:01:3e:bd:e9:38:
26:c7:7b:b9:2f:5b:55:62:85:15:14:55:ed:14:5d:
8e:65:fd:8e:eb:d7:ac:66:d0:f7:1f:6a:ab:24:fc:
ee:c5:e0:1b:77:4e:da:b0:2d:cc:80:b6:88:ad:66:
ad:b6:7b:1a:92:be:a6:fc:dd:c8:9a:0d:b2:86:20:
2e:b5:f8:04:d3:17:af:bc:13:49:94:b7:dd:f7:08:
d4:d6:12:62:c5:64:40:cc:95:d9:3f:cb:41:6f:f5:
29:13:e2:32:8a:30:b2:07:5a:48:9a:c2:80:64:9f:
d3:96:e7:f2:68:53:02:60:12:a7:6a:db:3f:98:72:
02:de:50:34:2a:12:22:3d:d3:3b:e5:98:2c:c3:6a:
94:fa:2e:a5:44:04:b9:64:66:ad:18:3d:87:02:71:
09:9d:20:f3:57:62:fb:ff:bf:48:8e:99:33:74:01:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B7:B2:CA:F3:1A:84:E8:6A:B4:8A:73:F3:08:89:61:51:15:54:53
X509v3 Authority Key Identifier:
keyid:7F:19:21:87:11:E0:89:55:EE:E5:19:F9:FB:F9:F4:36:19:2D:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxkhhxHgiVXu5Rn5-_n0NhktdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cb36cd-cf38-4e1a-8e1e-41ec4c047141/1/t7eyyvMahOhqtIpz8wiJYVEVVFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cb36cd-cf38-4e1a-8e1e-41ec4c047141/1/fxkhhxHgiVXu5Rn5-_n0NhktdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.253.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8e:ec:16:bd:82:a3:b8:99:33:0c:37:68:4c:8f:77:a8:da:
e2:17:a5:60:52:1d:b1:33:da:9b:41:8f:c7:a3:98:8a:54:c3:
18:fd:48:7d:1b:e2:3b:ee:ab:31:2d:ab:d2:53:53:18:c5:29:
2a:db:f2:19:8a:34:e1:68:0c:be:0d:7c:0d:a1:77:0a:b1:7e:
3c:27:7a:ff:8e:bf:5d:5b:1f:2d:77:f0:2f:f0:e9:90:5f:00:
bb:0c:9e:1c:62:56:76:db:d8:77:01:23:ec:0a:70:4a:bc:fd:
e5:4d:8d:97:b3:8c:bb:6e:0c:53:f7:7c:16:bc:31:de:10:db:
29:b7:37:66:09:9c:e6:b5:ef:98:9a:1f:ef:09:b7:c3:65:ab:
ea:5b:ed:a4:fd:6f:08:d1:77:ad:8a:13:58:c5:db:bd:e1:a5:
67:0f:0b:10:d6:38:cb:d2:c1:35:a9:8f:4f:8c:e9:6a:d6:c2:
c1:65:52:ef:97:3a:75:ad:29:03:df:86:f2:22:66:32:c5:27:
91:d2:eb:71:d5:40:5a:d9:00:42:15:0b:1a:0a:f8:95:04:8f:
4f:b5:a3:a7:33:92:1d:54:4e:52:df:d5:9b:e7:21:8d:12:d2:
33:f5:e2:f1:ba:b4:0a:75:25:e9:f7:3c:5b:ee:45:4d:4f:52:
1c:0f:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:10 2025 by rpki-client