Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/7pmvBHJbdwVqFyqKem89BSyuKvk.roa
File: 7pmvBHJbdwVqFyqKem89BSyuKvk.roa (raw, json)
Hash identifier: yz/z7MiR6pHVCBirN+J/dsbi3QYekD7/Z8ghjQadQLE=
Subject key identifier: EE:99:AF:04:72:5B:77:05:6A:17:2A:8A:7A:6F:3D:05:2C:AE:2A:F9
Certificate issuer: /CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Certificate serial: 019422200F902770DBBF92F56084DF050EC6
Authority key identifier: 41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/7pmvBHJbdwVqFyqKem89BSyuKvk.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60012
IP address blocks: 185.204.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0f:90:27:70:db:bf:92:f5:60:84:df:05:0e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a59b0960ea65d6b92393ee0347a1a832f9b984
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee99af04725b77056a172a8a7a6f3d052cae2af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:73:a6:e7:17:41:ae:f9:92:6d:18:22:e7:
f7:8d:f5:12:d3:b3:0f:86:79:2a:ed:b2:8e:a8:ab:
d3:7b:3b:b4:d9:0e:c5:14:0e:42:97:36:70:2c:49:
ba:65:c9:96:1a:65:55:03:70:ad:49:93:98:23:f7:
45:b8:01:9c:46:15:f0:8f:1c:d1:7e:9e:e2:13:af:
d5:56:e9:93:0f:fb:0d:ff:fd:e6:5a:e6:1d:01:26:
4a:6f:7d:8d:57:57:5e:25:e8:7f:03:0d:64:c9:65:
36:e1:2f:07:97:1e:5e:83:05:e8:ef:5b:f8:a0:4c:
96:95:70:fe:00:30:44:5d:59:4d:c0:44:25:34:14:
e1:8b:32:07:6d:18:d8:6f:78:0c:05:b7:e5:03:70:
db:b4:63:33:66:f1:b8:b1:18:1c:d2:2e:33:08:a4:
04:2e:d1:ba:f2:df:2b:b9:7a:6c:17:cb:2b:9f:ce:
f5:5a:a1:5b:3f:5d:d3:18:d1:b1:05:c0:a5:25:6e:
59:e6:02:6e:82:88:f0:f8:1f:53:56:e6:aa:a3:07:
5c:da:36:48:6b:ef:5e:d7:2a:10:71:a6:11:09:40:
85:ca:dd:53:5c:21:d3:27:4a:a2:1f:a0:01:25:5d:
f9:99:f7:d7:c8:be:76:98:6c:55:f9:00:e1:86:0a:
07:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:99:AF:04:72:5B:77:05:6A:17:2A:8A:7A:6F:3D:05:2C:AE:2A:F9
X509v3 Authority Key Identifier:
keyid:41:A5:9B:09:60:EA:65:D6:B9:23:93:EE:03:47:A1:A8:32:F9:B9:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaWbCWDqZda5I5PuA0ehqDL5uYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/7pmvBHJbdwVqFyqKem89BSyuKvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/QaWbCWDqZda5I5PuA0ehqDL5uYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.44.0/22
Signature Algorithm: sha256WithRSAEncryption
62:5b:26:12:ef:2f:c2:a1:c4:1a:0f:89:ac:be:08:d7:70:26:
39:8f:d3:a9:d4:1c:09:fe:be:de:00:2b:4e:19:ff:c3:76:80:
2e:1a:1d:61:f7:d4:14:45:08:66:b5:a5:6b:b8:c1:92:2c:f8:
66:e3:5b:a6:b6:a2:e0:fc:95:6b:d2:a1:5b:41:92:f5:80:f2:
4a:99:c6:ca:32:01:cc:30:12:cd:10:11:05:ff:f9:29:1f:98:
22:f9:e8:a2:e3:7c:a8:9b:47:07:70:c5:35:16:53:2e:e4:c0:
e9:c5:4a:73:02:5c:6b:2f:5f:fe:2c:cb:80:16:72:f4:27:ca:
bc:24:f8:b3:09:f6:6f:14:88:02:50:0b:d4:00:99:03:c0:95:
37:c1:57:52:df:a2:f3:3b:10:cf:43:ec:84:a6:09:85:cd:fe:
2c:8a:58:ba:de:40:26:dc:0a:cb:70:02:52:d1:05:cb:72:8a:
d0:b1:f9:27:e0:67:93:2b:7a:2e:bb:78:97:61:09:d5:00:21:
1c:ce:b8:86:9b:bf:61:ec:98:8e:f2:96:97:57:39:84:c5:75:
4f:66:b1:99:59:ad:f9:d8:7a:46:36:fc:67:75:93:b1:6f:96:
72:ad:82:d1:29:70:3c:30:43:b6:32:33:3f:79:71:ee:2e:09:
c2:12:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:28:32 2025 by rpki-client