Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/x7xqu0lB-_4nrhMXfMNYMuoRRDg.roa
File: x7xqu0lB-_4nrhMXfMNYMuoRRDg.roa (raw, json)
Hash identifier: sSJSMJ527PLOa2/vl5VgOxnTN4o6TlOcGMzgJfHVCuU=
Subject key identifier: C7:BC:6A:BB:49:41:FB:FE:27:AE:13:17:7C:C3:58:32:EA:11:44:38
Certificate issuer: /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Certificate serial: 0194244587091F1701309CE502F3A46BBC7F
Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/x7xqu0lB-_4nrhMXfMNYMuoRRDg.roa
Signing time: Wed 01 Jan 2025 23:48:43 +0000
ROA not before: Wed 01 Jan 2025 23:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 194.93.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:87:09:1f:17:01:30:9c:e5:02:f3:a4:6b:bc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Validity
Not Before: Jan 1 23:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7bc6abb4941fbfe27ae13177cc35832ea114438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:0d:65:7a:53:eb:5e:53:55:e0:ce:18:f0:
3c:48:5e:92:39:4c:a9:90:c0:25:bd:6e:09:5f:20:
8b:c8:92:65:ff:33:f4:bb:67:08:8a:69:e7:ae:c0:
85:a0:d0:db:68:c3:e7:98:22:a7:02:cb:75:18:67:
e0:1d:03:95:ca:fb:5d:d5:ef:c2:c7:ca:97:61:36:
b7:77:13:1f:8d:2e:3c:18:bb:e8:1f:b0:db:40:9d:
ff:9e:63:2e:1e:d1:db:f4:93:a0:62:4e:0b:20:fa:
73:d1:cb:33:52:b3:1d:e2:4b:aa:23:80:1c:c8:2e:
d7:46:d6:8b:5b:65:ac:2a:7b:c9:40:9a:63:87:f8:
52:d8:dc:ef:3c:da:31:2a:a6:7e:be:87:8a:27:78:
0c:b9:03:42:2d:1c:e1:27:fc:1f:97:24:19:6a:2f:
34:7d:51:77:75:b1:86:6c:2a:8f:a2:89:3c:8c:5d:
75:75:59:f4:a0:eb:ce:cf:da:e3:7d:bb:11:a2:b1:
3b:01:ad:ca:d9:6e:02:61:95:42:bb:4d:8f:f6:dd:
01:87:e2:03:bb:15:f4:e5:65:37:e4:df:33:06:31:
e6:b8:4a:3a:0c:15:35:af:57:4c:09:c0:f2:8f:25:
25:4f:a8:8e:ea:e7:f6:8b:86:a8:24:a8:a8:7b:25:
3a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BC:6A:BB:49:41:FB:FE:27:AE:13:17:7C:C3:58:32:EA:11:44:38
X509v3 Authority Key Identifier:
keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/x7xqu0lB-_4nrhMXfMNYMuoRRDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
70:1d:fd:c6:d7:40:e7:50:7b:a8:77:ea:0d:a2:3a:12:d7:2b:
a5:f0:ed:14:5a:a8:1e:2e:83:ca:d5:e2:e2:49:98:7f:4d:4d:
3e:ae:73:91:2d:93:ea:b1:77:55:9a:38:94:56:91:34:de:f2:
97:58:58:ba:34:dd:7b:b6:73:2d:40:32:d8:4d:b3:03:18:20:
26:93:a1:90:e2:81:ed:58:8f:e7:d2:27:c1:a4:4b:8c:0e:3f:
1e:66:c0:20:5a:6f:ac:fa:86:11:b7:eb:79:7e:88:80:1c:d0:
7e:2f:db:57:e6:c0:c8:c6:fa:fc:98:74:30:1e:01:cc:2f:13:
f4:c2:6e:76:27:d5:78:cc:9f:d4:2e:66:00:a2:e6:46:8e:03:
f0:e1:70:1b:f1:e4:e5:cf:c1:fd:42:86:80:e1:cb:fc:7a:49:
0e:5e:a2:66:05:76:4f:58:49:61:8b:7c:d5:a3:a1:b0:c2:d0:
73:47:51:76:5d:06:41:77:01:d4:14:47:ec:10:04:ce:da:b6:
9e:c0:60:f8:a6:0d:5a:bc:17:02:eb:aa:2e:60:18:be:91:ce:
e2:f8:38:ce:43:3a:7d:3a:10:8f:e6:c5:d6:51:c3:cd:00:78:
a2:cc:13:a4:9b:69:15:dc:ce:3c:c9:0a:92:83:17:1e:a0:a1:
bf:43:cb:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:02 2025 by rpki-client