Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/e7hV_3upnswdR_7tMQpKeBcp_ak.roa
File: e7hV_3upnswdR_7tMQpKeBcp_ak.roa (raw, json)
Hash identifier: NT1PauBaARsBxSP1yPDwu/ZmGE1jxZSoC8NJF/OP+mU=
Subject key identifier: 7B:B8:55:FF:7B:A9:9E:CC:1D:47:FE:ED:31:0A:4A:78:17:29:FD:A9
Certificate issuer: /CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
Certificate serial: 018CC7272EAD92B652ABD2C0B50CF8D0AFE6
Authority key identifier: B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/e7hV_3upnswdR_7tMQpKeBcp_ak.roa
Signing time: Mon 01 Jan 2024 22:31:22 +0000
ROA not before: Mon 01 Jan 2024 22:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212030
IP address blocks: 176.53.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2e:ad:92:b6:52:ab:d2:c0:b5:0c:f8:d0:af:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520449d4455cf789c64ea63cbf48fc3bb2c766a
Validity
Not Before: Jan 1 22:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bb855ff7ba99ecc1d47feed310a4a781729fda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:81:72:29:6e:d2:98:46:b5:d6:13:ba:9a:
60:e6:a0:bf:60:82:d3:d6:ee:3a:fe:5b:2e:56:e1:
9e:97:14:50:03:2d:62:9d:0a:bd:9a:9c:bb:d6:2f:
82:3c:22:44:22:49:2d:db:da:14:da:3c:90:00:05:
4d:15:a5:5e:f4:fc:2e:8b:72:a1:72:75:9b:bf:19:
77:53:d5:27:38:38:2e:d5:52:00:87:6a:67:a1:a4:
e4:50:07:8e:4c:28:3b:f4:ed:94:99:05:32:71:ee:
32:ec:1a:48:09:7b:ef:43:25:82:08:2b:ea:b9:94:
42:94:09:ce:b8:da:bf:25:f4:6e:3f:a0:95:c7:59:
b2:a6:b1:dc:5a:39:97:92:44:36:04:2a:7b:e6:21:
47:58:a8:6a:f0:1d:25:02:bd:46:5d:71:2a:6d:1f:
a8:00:d9:dc:c1:c3:8b:87:8d:f0:8e:9c:13:f0:65:
84:25:65:3a:a3:7c:50:83:e9:fe:02:7b:1f:a1:43:
4d:e5:bb:46:4c:45:b2:d9:ae:14:68:cd:9e:c1:58:
bc:6b:a7:e4:18:85:7f:ef:25:8c:79:cb:2d:89:55:
86:dc:39:fa:9c:f2:a2:c7:91:a5:f2:1f:19:e1:62:
23:8e:c9:82:5a:10:5d:e3:d9:45:e0:05:45:e9:ec:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B8:55:FF:7B:A9:9E:CC:1D:47:FE:ED:31:0A:4A:78:17:29:FD:A9
X509v3 Authority Key Identifier:
keyid:B5:20:44:9D:44:55:CF:78:9C:64:EA:63:CB:F4:8F:C3:BB:2C:76:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSBEnURVz3icZOpjy_SPw7ssdmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/e7hV_3upnswdR_7tMQpKeBcp_ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f0d5e7-edb6-42ad-8482-a14d85f995cb/1/tSBEnURVz3icZOpjy_SPw7ssdmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.53.146.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f6:a3:06:96:83:16:a1:0c:8f:bb:35:ae:4c:f8:04:d1:c8:
25:8e:8a:26:0f:f5:8e:7c:75:6a:ee:7a:62:89:3d:aa:53:44:
41:23:2c:9b:cd:b0:e8:c5:0e:1d:2b:67:e4:fd:92:4d:27:50:
80:ba:0c:5d:ec:3c:a8:40:a8:f6:7f:11:26:d4:42:ea:77:47:
f0:83:92:61:f5:bd:f5:13:4d:38:46:8e:26:56:51:17:fd:22:
60:16:cc:e0:54:26:46:30:59:99:5b:df:13:ca:19:ab:a9:68:
fb:cf:c6:3f:79:4b:c5:c9:00:04:46:91:94:9c:43:ed:d2:55:
80:c2:3c:42:ad:ea:b1:28:20:5e:27:fa:55:7e:10:be:c2:45:
41:c2:3b:2d:12:13:84:17:85:c2:40:01:e6:6c:97:51:cd:cf:
af:6c:59:13:fc:f2:fe:e3:5f:34:aa:6b:70:55:8d:3e:19:39:
4a:9b:1a:f7:0e:07:d3:07:a0:6f:99:23:c0:7c:0c:d6:60:71:
06:82:c7:1a:6a:14:f4:c1:f8:4b:b5:54:4f:07:0b:cf:0a:75:
74:68:6a:04:f3:c3:98:1a:c3:43:4c:dc:78:57:75:26:f4:9c:
b3:d9:1d:fc:e6:32:c1:7c:f5:6f:30:07:eb:8d:ea:cd:bb:a0:
c1:1e:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:24:15 2025 by rpki-client