Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/S7LjQq5tPvyMOngjSBccEMUPBus.roa
File: S7LjQq5tPvyMOngjSBccEMUPBus.roa (raw, json)
Hash identifier: FC4Bsjxgd9ISoqrmsgDcl4jr0/vO6sUfNzdZ3YakcLc=
Subject key identifier: 4B:B2:E3:42:AE:6D:3E:FC:8C:3A:78:23:48:17:1C:10:C5:0F:06:EB
Certificate issuer: /CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Certificate serial: 018CC348B186799A732F3709A05591CD199E
Authority key identifier: 6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/S7LjQq5tPvyMOngjSBccEMUPBus.roa
Signing time: Mon 01 Jan 2024 04:29:30 +0000
ROA not before: Mon 01 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16075
IP address blocks: 193.104.220.0/24 maxlen: 24
2001:67c:13c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:b1:86:79:9a:73:2f:37:09:a0:55:91:cd:19:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Validity
Not Before: Jan 1 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4bb2e342ae6d3efc8c3a782348171c10c50f06eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:9d:a8:50:b7:3c:cb:d1:9a:a1:67:46:7f:
84:59:92:b7:b0:9d:3e:65:7d:68:14:62:84:23:f6:
7c:17:54:ea:71:63:cf:1f:42:9a:0f:aa:25:66:9b:
12:0d:e8:34:66:28:7e:ea:8a:9e:08:c0:41:ad:9c:
a9:90:3b:6c:10:60:dc:87:be:06:56:11:8b:ea:ca:
93:8c:e6:67:11:f8:7d:19:28:93:55:d6:c3:0f:06:
36:7c:f6:08:be:22:15:a8:60:77:e4:70:83:9a:78:
cf:50:47:42:87:b6:f9:5b:ee:22:87:ec:e3:10:7e:
3b:1e:8f:69:e2:73:2f:88:89:a5:e8:91:36:88:bc:
d8:ca:5b:8d:ca:a2:39:54:96:5b:39:4e:4e:1c:ff:
07:6d:a3:bb:e9:63:4e:b8:df:c9:ce:7a:3f:a3:b2:
c3:42:7b:9a:77:c6:57:e4:78:a2:4c:63:c2:0d:24:
5d:4f:ad:33:2d:09:54:da:46:e8:39:ae:e3:4b:62:
19:0c:6f:64:40:e4:03:02:72:c1:dd:4f:5c:d8:6f:
81:73:de:0b:65:55:e7:45:cf:90:81:2d:99:04:97:
0e:23:1b:02:d3:59:66:09:f2:3a:f6:8a:ec:87:5e:
7b:3c:91:ef:8d:5a:95:06:61:c5:a0:6c:dd:e9:c1:
fa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B2:E3:42:AE:6D:3E:FC:8C:3A:78:23:48:17:1C:10:C5:0F:06:EB
X509v3 Authority Key Identifier:
keyid:6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/S7LjQq5tPvyMOngjSBccEMUPBus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.220.0/24
IPv6:
2001:67c:13c::/48
Signature Algorithm: sha256WithRSAEncryption
7e:5b:1a:60:4a:51:db:b5:ed:7c:94:95:2e:83:e3:90:3f:33:
2c:6d:ff:d3:28:e0:4e:c0:7d:46:cc:4c:69:7e:f7:7b:48:d1:
ec:49:fd:0b:92:34:c4:41:c1:56:4d:54:71:b0:0d:95:7a:92:
41:6e:bf:bb:c2:17:34:d1:d0:78:0c:74:21:18:fa:61:31:c7:
b2:8e:fc:db:fa:3f:15:00:9b:94:83:fd:6b:3f:4e:8e:48:bd:
95:d8:1b:82:4e:b4:72:63:79:86:55:60:f1:61:36:e7:05:3b:
e2:48:1a:4e:42:14:24:5a:a3:57:79:83:8d:5e:4d:8d:c8:a3:
5d:38:3f:80:89:6b:10:40:4f:c8:75:b3:99:e3:e7:44:2d:99:
25:02:e8:1f:e6:cf:90:57:a0:cc:1a:9b:d8:c1:7f:c7:ff:33:
b2:e8:99:73:dd:a5:36:6f:80:6b:7f:a3:de:05:ae:8a:52:a6:
0f:19:65:49:ca:c4:6f:f1:83:50:7c:db:3a:44:08:eb:6d:7c:
1a:ab:92:d8:c4:15:c8:21:70:95:e6:42:fa:58:87:51:3f:f6:
81:1d:23:87:93:50:cd:44:1f:a6:c0:dd:29:5f:70:5e:a3:15:
1e:98:f2:f4:6b:a8:1d:66:52:05:73:22:07:0e:eb:d9:c9:23:
5f:ff:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:43:47 2025 by rpki-client