Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/7TreajjI3SUMAsVXcT-lQA-_qZA.roa
File: 7TreajjI3SUMAsVXcT-lQA-_qZA.roa (raw, json)
Hash identifier: EBF8kl2XwJZQjthGLpptzpA9T72RxvGRCPffN3QI6ww=
Subject key identifier: ED:3A:DE:6A:38:C8:DD:25:0C:02:C5:57:71:3F:A5:40:0F:BF:A9:90
Certificate issuer: /CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Certificate serial: 018204E2843A78A2B06FE0AFB824C1AA309E
Authority key identifier: 7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/7TreajjI3SUMAsVXcT-lQA-_qZA.roa
Signing time: Sat 16 Jul 2022 02:42:09 +0000
ROA not before: Sat 16 Jul 2022 02:42:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 185.126.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:04:e2:84:3a:78:a2:b0:6f:e0:af:b8:24:c1:aa:30:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f203c1419ec6a21e66127203f51c1fa74dc044f
Validity
Not Before: Jul 16 02:42:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed3ade6a38c8dd250c02c557713fa5400fbfa990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:98:e4:4d:5c:e8:04:cd:73:a9:58:7a:ff:1d:
e6:2f:1f:04:cb:ec:a5:e0:8b:79:02:f2:2c:58:d8:
fc:8a:d1:39:5d:0c:94:8d:ac:6f:40:70:72:76:e9:
10:dc:b0:24:76:31:95:58:07:b4:14:dd:c8:0a:9f:
16:8e:b6:56:e7:e2:95:4b:73:64:76:82:be:7a:fa:
81:ec:f4:94:5e:c7:7f:f4:60:32:9c:2d:e7:27:ab:
bd:03:7f:06:51:24:83:6b:71:b1:2e:fb:b3:1e:da:
ab:83:e2:5e:ae:5b:06:5d:4e:99:bd:59:f8:a1:37:
e0:c3:eb:a7:38:71:4f:be:ce:3e:b3:34:09:ff:97:
22:b6:7c:a4:94:33:e1:86:ed:ae:00:2b:74:a4:dd:
83:8c:0d:93:ce:26:f6:49:8f:3b:a0:96:b8:35:93:
c3:57:30:d5:78:ff:70:7b:45:0b:c4:5b:97:0a:f3:
ec:83:a1:70:04:a5:38:94:09:db:61:9c:f8:aa:cf:
21:22:be:c1:27:a1:9f:14:c2:c4:8c:05:a9:5b:08:
93:19:b0:68:2f:72:e2:5e:77:82:2a:ae:41:dd:a8:
18:e8:4c:fb:7c:8b:52:37:6d:e1:0f:be:92:24:28:
69:0f:48:8d:cc:c4:d2:56:63:a5:75:75:69:fa:2b:
d6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3A:DE:6A:38:C8:DD:25:0C:02:C5:57:71:3F:A5:40:0F:BF:A9:90
X509v3 Authority Key Identifier:
keyid:7F:20:3C:14:19:EC:6A:21:E6:61:27:20:3F:51:C1:FA:74:DC:04:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyA8FBnsaiHmYScgP1HB-nTcBE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/7TreajjI3SUMAsVXcT-lQA-_qZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c90469-e638-4a57-92ce-534e73cc3b7c/1/fyA8FBnsaiHmYScgP1HB-nTcBE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.156.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:5c:39:26:05:c4:7d:98:36:e5:ab:c4:79:29:b9:5d:3a:d8:
d8:d8:26:c6:88:05:85:e4:54:8a:89:ed:f4:f8:91:2c:2b:f7:
19:99:5a:eb:f4:99:89:f8:28:1b:d9:16:b4:90:5e:4c:61:b0:
1f:0b:db:44:17:ad:0a:63:4e:e5:61:81:e6:f2:8e:7e:fb:6e:
19:eb:c7:1d:b7:6c:4d:29:e8:50:01:58:55:a0:04:9e:07:27:
52:f4:33:b0:0e:b7:c2:c4:5d:10:8f:32:cb:fc:26:79:32:69:
4b:2c:71:45:d8:2d:8a:86:ef:51:c1:78:cb:d5:dd:bb:4c:b9:
b7:87:1a:31:b4:a8:dd:5f:4f:d7:f1:0c:f9:09:b2:80:87:2a:
36:f3:03:ee:72:fb:a5:f0:92:0a:f1:7f:81:16:75:99:aa:3b:
52:6b:16:58:05:e9:89:fb:30:ad:96:a9:7d:5a:c4:77:10:5b:
a3:c0:0a:0e:68:d4:4a:02:6e:1b:82:07:fa:03:cd:e1:a1:49:
df:60:03:59:05:3e:a1:e6:f5:fd:72:8e:8b:5c:2d:33:79:e1:
d7:e0:ab:9c:27:fd:61:f0:20:2a:b3:a1:13:92:5e:f4:cb:f9:
6d:1d:d9:4e:c2:f9:74:73:c3:68:52:65:bc:90:d4:e4:01:c4:
16:90:8a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:16:13 2025 by rpki-client