Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fr7chU3mkddQrTjKAwYpozaaYtg.roa
File: fr7chU3mkddQrTjKAwYpozaaYtg.roa (raw, json)
Hash identifier: q6i6PQCN0vEKixyeExkR/W/PK+pwZYjYv+Mvybu4cTQ=
Subject key identifier: 7E:BE:DC:85:4D:E6:91:D7:50:AD:38:CA:03:06:29:A3:36:9A:62:D8
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019425FC7E67E0FA8CEE6C136408514A5D8F
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fr7chU3mkddQrTjKAwYpozaaYtg.roa
Signing time: Thu 02 Jan 2025 07:48:11 +0000
ROA not before: Thu 02 Jan 2025 07:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152159
IP address blocks: 185.80.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7e:67:e0:fa:8c:ee:6c:13:64:08:51:4a:5d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 2 07:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ebedc854de691d750ad38ca030629a3369a62d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:2d:be:cb:b2:c2:c6:64:c1:59:5c:26:c2:
8d:dd:c6:a8:b7:e2:ba:f7:8a:84:13:a9:3b:88:e6:
6d:3f:e8:80:71:bb:8e:c9:1c:53:1c:86:4c:2f:e6:
3d:14:22:02:1d:ab:bb:cf:63:e0:03:7c:26:23:93:
ed:7c:37:f0:1a:c1:d6:d1:b6:77:11:cc:66:84:c7:
54:58:92:a1:3a:2a:fc:b7:44:dd:5c:26:07:84:99:
a1:b0:1a:d6:5c:62:bb:6a:1c:ca:f8:a1:16:6b:e7:
da:27:d3:07:a8:65:0a:ad:a6:28:d9:76:f7:4c:59:
7b:5e:3a:01:78:3d:fb:65:a2:fa:ef:2a:d0:63:13:
05:2e:9b:9d:c0:e5:82:72:50:52:19:3a:4b:61:e9:
b1:25:10:6b:48:25:83:16:89:d2:ab:c2:13:60:2b:
6a:07:4c:22:9f:26:0c:9b:12:71:b1:f0:5a:2f:1f:
62:8b:69:ae:7b:f2:03:3f:75:59:27:23:fd:69:fb:
f2:b7:b7:e4:4e:fa:1c:74:60:15:09:7b:c2:96:14:
ac:d1:e8:29:c4:ae:29:4e:10:e0:17:36:ab:b0:13:
b9:38:28:a8:38:63:3d:a2:6f:5c:d0:3b:c7:ec:69:
93:e3:b9:65:81:a0:cb:b5:cf:7e:0d:8b:c2:49:b0:
5f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BE:DC:85:4D:E6:91:D7:50:AD:38:CA:03:06:29:A3:36:9A:62:D8
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/fr7chU3mkddQrTjKAwYpozaaYtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.197.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:98:5f:52:9c:6a:84:0e:0b:f7:69:a5:bf:e9:d9:b4:11:e5:
f9:a3:15:da:72:b2:3a:bd:14:e5:b2:da:29:c2:bf:81:54:a5:
4b:f0:8b:6a:a1:c0:4f:fb:48:2a:44:c8:60:d4:90:99:87:cb:
fb:88:5c:a6:e0:eb:3c:93:3a:72:60:54:85:f2:b6:19:7c:f4:
5f:7e:d7:b7:51:e0:42:e2:32:ef:ac:1d:ec:ef:35:3f:c0:71:
b2:cf:31:9b:28:f6:94:be:5d:a1:8e:d5:2e:8c:87:d4:73:4a:
15:c2:15:ff:1f:ba:dd:35:99:29:cf:a8:a3:52:0a:a2:f5:74:
3d:0e:87:fd:51:65:36:d6:24:c4:db:3f:c5:50:6b:9e:30:0d:
4c:8e:8d:e8:ac:3c:41:fa:7d:25:22:9f:ba:0f:5e:c3:2a:6e:
67:d7:42:82:d0:62:be:8f:9d:0d:b7:f4:39:2f:e3:67:67:07:
97:80:56:3e:df:3a:80:b0:82:09:7b:90:34:d0:eb:6a:48:af:
98:20:23:87:47:4e:16:f7:d0:dc:d5:69:b2:7d:da:fb:92:a0:
1f:5f:f8:0c:a0:fc:3e:a0:9c:eb:68:d9:98:16:bd:d6:f5:03:
40:fa:b2:63:9f:95:da:36:81:18:b0:b2:17:4a:45:57:9c:ea:
cf:33:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:30:55 2025 by rpki-client