Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/608fcf-c0f0-43d6-b5a6-dd521481ff5c/1/7-Ry3ULwgaUOm5eCBCBjclOk2eo.roa
File: 7-Ry3ULwgaUOm5eCBCBjclOk2eo.roa (raw, json)
Hash identifier: 6oc+V+B+eXpAXTDz26ORPR1107mqUHpCMWgHzPo9jLg=
Subject key identifier: EF:E4:72:DD:42:F0:81:A5:0E:9B:97:82:04:20:63:72:53:A4:D9:EA
Certificate issuer: /CN=520af4f26564ce4d817809e0e6e9b311c3f3bab4
Certificate serial: 0176119F
Authority key identifier: 52:0A:F4:F2:65:64:CE:4D:81:78:09:E0:E6:E9:B3:11:C3:F3:BA:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ugr08mVkzk2BeAng5umzEcPzurQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/608fcf-c0f0-43d6-b5a6-dd521481ff5c/1/7-Ry3ULwgaUOm5eCBCBjclOk2eo.roa
Signing time: Sat 01 Jan 2022 15:06:42 +0000
ROA not before: Sat 01 Jan 2022 15:06:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43201
IP address blocks: 194.56.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24514975 (0x176119f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520af4f26564ce4d817809e0e6e9b311c3f3bab4
Validity
Not Before: Jan 1 15:06:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efe472dd42f081a50e9b97820420637253a4d9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:f4:1e:49:1d:d2:37:83:5f:0f:88:63:c2:
64:ba:77:30:5b:d3:91:8e:95:22:b1:8a:0a:e9:0d:
50:38:f9:33:b7:2e:62:d1:e8:0a:89:5e:a1:63:ef:
d9:ad:ee:5f:72:9a:68:45:d5:53:82:85:46:d3:5d:
6d:0c:88:bb:d1:22:84:6c:88:ef:ad:8e:a8:2e:ae:
ec:0b:81:2c:79:dd:cd:c8:b4:b2:b6:97:0a:b7:0b:
07:0f:5a:67:34:93:73:df:44:85:ca:76:5d:cf:59:
ed:ed:88:c0:5a:a7:b3:e3:77:18:34:97:99:62:2a:
ac:32:68:57:21:81:f1:29:b7:95:c6:8a:ad:95:2e:
d7:c6:ec:43:7b:26:ef:79:f4:fd:c7:fa:7f:d8:fd:
7d:50:99:aa:5c:68:82:b0:9b:ca:61:93:55:4f:06:
bc:d4:8c:b6:80:d5:2a:fc:4f:da:57:e8:74:a3:a7:
3a:a8:4b:27:23:aa:e9:ab:3f:b5:3e:ff:f1:46:5d:
29:9a:fd:bc:a2:20:93:c3:a7:1e:80:ae:9b:99:b3:
f9:23:b0:1d:6d:a6:83:11:80:ca:16:25:b1:d4:98:
05:1b:33:8d:1f:30:0d:42:74:6c:91:4c:58:ff:5b:
ed:53:36:ae:d6:f3:d4:a4:f9:da:fa:23:b0:a5:c6:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E4:72:DD:42:F0:81:A5:0E:9B:97:82:04:20:63:72:53:A4:D9:EA
X509v3 Authority Key Identifier:
keyid:52:0A:F4:F2:65:64:CE:4D:81:78:09:E0:E6:E9:B3:11:C3:F3:BA:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ugr08mVkzk2BeAng5umzEcPzurQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/608fcf-c0f0-43d6-b5a6-dd521481ff5c/1/7-Ry3ULwgaUOm5eCBCBjclOk2eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/608fcf-c0f0-43d6-b5a6-dd521481ff5c/1/Ugr08mVkzk2BeAng5umzEcPzurQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.180.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:11:5c:35:14:e2:be:38:e2:68:84:bf:e6:0d:ff:cf:b4:f4:
8b:fe:d3:31:9f:44:20:0c:14:cc:75:95:85:ff:3b:b1:b4:60:
70:5c:f5:22:e8:c2:0d:33:2a:2e:a2:5c:48:75:16:10:08:9b:
2c:3c:e5:95:4f:7d:28:7a:59:02:16:be:f2:0e:70:95:d3:69:
37:8c:99:9f:71:d2:8d:c4:ee:f0:ca:86:89:1d:90:09:87:13:
de:34:fc:9e:57:96:98:2c:4a:e2:ee:ac:78:5d:96:6a:2b:56:
41:a6:75:cb:75:2a:03:08:28:66:e1:37:29:e5:c2:d1:d6:3c:
96:96:6a:85:37:6d:1c:31:74:5c:82:d6:7e:ee:48:a8:cf:f8:
9e:81:a0:f8:26:6b:f5:76:bf:50:be:37:cd:44:5d:d3:a8:d2:
57:d5:8b:74:c7:b1:4c:85:d3:ce:2a:00:65:34:ed:1a:ef:00:
a0:f3:b2:85:5a:4b:e3:de:2b:5a:b1:3a:a8:34:e1:ff:72:a0:
d3:0e:3b:79:c3:05:1a:ae:36:6b:29:7b:4a:bd:fd:72:a2:2e:
a0:18:19:61:ef:89:a5:47:d9:25:c2:b7:d3:08:28:47:cd:30:
e8:a9:95:f5:f7:ee:09:b1:c6:14:c8:7f:61:4b:00:a6:d3:dc:
a4:9f:46:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:29 2025 by rpki-client