Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/7Cbk56YMtk4eeHszepWGAY95j6o.roa
File: 7Cbk56YMtk4eeHszepWGAY95j6o.roa (raw, json)
Hash identifier: bEel6cKTonKjgyIxRSSsFeCeLhlbBhq28O8ZUY+SPtI=
Subject key identifier: EC:26:E4:E7:A6:0C:B6:4E:1E:78:7B:33:7A:95:86:01:8F:79:8F:AA
Certificate issuer: /CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
Certificate serial: 019420D66312283DDC26D1BFF85739638E40
Authority key identifier: 13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/7Cbk56YMtk4eeHszepWGAY95j6o.roa
Signing time: Wed 01 Jan 2025 07:48:28 +0000
ROA not before: Wed 01 Jan 2025 07:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9095
IP address blocks: 160.75.0.0/16 maxlen: 24
161.9.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:63:12:28:3d:dc:26:d1:bf:f8:57:39:63:8e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ea78b28f054f72f5226ae3ec454980ed2a10c9
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec26e4e7a60cb64e1e787b337a9586018f798faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:4d:1a:b9:f5:e9:0b:89:c7:83:40:79:9e:
ab:c1:67:f5:eb:77:67:f4:a3:c2:63:55:b0:54:12:
82:2c:40:95:3b:6b:87:82:db:1d:d8:ec:0c:51:bd:
c5:cf:e6:89:5b:2c:75:d0:06:6f:e0:52:8c:c1:51:
0a:a8:63:74:54:5d:42:90:c5:e8:05:76:0f:cb:05:
8d:7e:f3:00:41:60:48:d1:2b:c4:38:da:49:a7:5c:
ed:04:b6:2e:a2:a5:10:de:96:e8:f0:8c:f9:54:32:
5b:a5:f3:4a:84:6e:8c:53:44:e2:4c:cf:ce:58:2f:
6c:66:ef:aa:d1:85:c3:d4:ec:9e:33:8e:87:3c:07:
0a:eb:77:db:95:73:1a:4f:51:0a:52:cf:8f:05:c5:
53:7f:2e:8b:fb:da:6b:ba:cc:71:b8:5f:29:08:79:
6a:f0:3e:ff:4a:c9:0e:27:6e:4c:52:95:fa:d4:fa:
2b:55:b1:b5:70:14:62:f2:ad:21:05:c2:e4:d6:76:
30:cf:93:3b:4c:ee:81:e8:57:9c:9d:b6:c5:14:ea:
0c:6e:df:c5:75:fa:c3:61:c5:0d:82:51:0e:e1:39:
b3:63:28:99:dd:cd:79:a6:50:67:9c:2a:01:78:41:
a7:74:c1:5a:2c:13:24:22:e1:bd:7b:61:27:98:ec:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:26:E4:E7:A6:0C:B6:4E:1E:78:7B:33:7A:95:86:01:8F:79:8F:AA
X509v3 Authority Key Identifier:
keyid:13:EA:78:B2:8F:05:4F:72:F5:22:6A:E3:EC:45:49:80:ED:2A:10:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-p4so8FT3L1Imrj7EVJgO0qEMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/7Cbk56YMtk4eeHszepWGAY95j6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b97294-2802-4d05-9155-1098d6d88de8/1/E-p4so8FT3L1Imrj7EVJgO0qEMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.75.0.0/16
161.9.0.0/17
Signature Algorithm: sha256WithRSAEncryption
71:9a:73:3d:47:e5:40:7f:56:11:8f:41:65:60:3d:3b:a3:54:
2d:73:ba:90:2e:4e:ac:67:06:dd:48:90:19:20:0b:38:db:60:
28:96:10:fd:f8:60:a6:98:5d:a7:f0:c8:e2:54:2b:da:c7:d0:
64:2b:f3:e0:5c:77:a9:ef:15:0e:ad:9c:b0:c8:7f:b7:79:44:
d4:77:40:d7:0a:a6:f1:62:5e:21:6e:ec:15:81:2d:31:6d:a0:
b9:b0:57:f5:59:cf:a4:13:24:eb:29:f2:d3:52:ad:74:3a:88:
92:05:c1:de:0a:53:5e:8a:d4:d2:09:c5:d3:6c:07:a0:7b:c5:
1d:b5:01:a1:c6:28:55:ce:31:a2:0a:38:82:16:83:f5:7f:b7:
1b:c6:9b:88:80:91:72:7f:a5:da:a6:23:fd:a6:61:0f:2c:5b:
8e:8c:99:23:b4:f1:56:f3:f2:22:b2:6f:a4:b8:58:72:22:1e:
23:61:14:06:bf:a5:a8:3e:af:dc:cd:fb:67:a8:47:04:af:2c:
59:71:87:c7:f7:1e:3b:3c:38:0e:06:ca:43:d7:4f:5c:90:e1:
c4:11:41:5a:a6:2d:67:2e:17:5f:ec:66:34:cc:78:33:28:5c:
c5:7f:aa:63:d7:3f:1a:3a:a9:9d:c0:ef:fb:b2:12:6a:46:ca:
3c:2a:21:e2
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAZQg1mMSKD3cJtG/+Fc5Y45AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWE3OGIyOGYwNTRmNzJmNTIyNmFlM2VjNDU0OTgwZWQy
YTEwYzkwHhcNMjUwMTAxMDc0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzI2ZTRlN2E2MGNiNjRlMWU3ODdiMzM3YTk1ODYwMThmNzk4ZmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMdNGrn16QuJx4NAeZ6rwWf163dn
9KPCY1WwVBKCLECVO2uHgtsd2OwMUb3Fz+aJWyx10AZv4FKMwVEKqGN0VF1CkMXo
BXYPywWNfvMAQWBI0SvEONpJp1ztBLYuoqUQ3pbo8Iz5VDJbpfNKhG6MU0TiTM/O
WC9sZu+q0YXD1OyeM46HPAcK63fblXMaT1EKUs+PBcVTfy6L+9prusxxuF8pCHlq
8D7/SskOJ25MUpX61PorVbG1cBRi8q0hBcLk1nYwz5M7TO6B6FecnbbFFOoMbt/F
dfrDYcUNglEO4TmzYyiZ3c15plBnnCoBeEGndMFaLBMkIuG9e2EnmOwinQIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFOwm5OemDLZOHnh7M3qVhgGPeY+qMB8GA1UdIwQY
MBaAFBPqeLKPBU9y9SJq4+xFSYDtKhDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1wNHNvOEZUM0wxSW1yajdFVkpnTzBxRU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iOTcyOTQtMjgwMi00ZDA1LTkxNTUt
MTA5OGQ2ZDg4ZGU4LzEvN0NiazU2WU10azRlZUhzemVwV0dBWTk1ajZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9iOTcyOTQtMjgwMi00ZDA1LTkxNTUtMTA5OGQ2ZDg4ZGU4
LzEvRS1wNHNvOEZUM0wxSW1yajdFVkpnTzBxRU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAoEsDBAeh
CQAwDQYJKoZIhvcNAQELBQADggEBAHGacz1H5UB/VhGPQWVgPTujVC1zupAuTqxn
Bt1IkBkgCzjbYCiWEP34YKaYXafwyOJUK9rH0GQr8+Bcd6nvFQ6tnLDIf7d5RNR3
QNcKpvFiXiFu7BWBLTFtoLmwV/VZz6QTJOsp8tNSrXQ6iJIFwd4KU16K1NIJxdNs
B6B7xR21AaHGKFXOMaIKOIIWg/V/txvGm4iAkXJ/pdqmI/2mYQ8sW46MmSO08Vbz
8iKyb6S4WHIiHiNhFAa/pag+r9zN+2eoRwSvLFlxh8f3Hjs8OA4GykPXT1yQ4cQR
QVqmLWcuF1/sZjTMeDMoXMV/qmPXPxo6qZ3A7/uyEmpGyjwqIeI=
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:34:10 2025 by rpki-client