Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/m7p9-Nc8bA5aZ6G8FeSb_3gZ3mE.roa
File: m7p9-Nc8bA5aZ6G8FeSb_3gZ3mE.roa (raw, json)
Hash identifier: 6BjeEl8S/sVhlCuS797tfS67KPopqn+SkFRfjTD0/E8=
Subject key identifier: 9B:BA:7D:F8:D7:3C:6C:0E:5A:67:A1:BC:15:E4:9B:FF:78:19:DE:61
Certificate issuer: /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial: 0194228DD7EB4BF6DA8667241573B13DC6F1
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/m7p9-Nc8bA5aZ6G8FeSb_3gZ3mE.roa
Signing time: Wed 01 Jan 2025 15:48:28 +0000
ROA not before: Wed 01 Jan 2025 15:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16199
IP address blocks: 195.250.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d7:eb:4b:f6:da:86:67:24:15:73:b1:3d:c6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bba7df8d73c6c0e5a67a1bc15e49bff7819de61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:47:54:cb:18:7a:17:aa:34:ac:77:61:cf:
3d:0e:bb:2a:ba:98:9b:1a:96:d1:e8:89:3f:a8:27:
8c:52:8a:d6:51:72:de:85:96:10:85:70:3c:80:af:
c3:9f:4f:c1:ea:61:7b:1d:83:a8:4c:2f:fc:d1:5f:
98:2b:7e:42:9d:ac:76:34:f5:c6:49:c1:fc:06:b3:
6f:53:1a:24:d9:a5:00:fb:52:2c:98:5b:9b:0d:ce:
6b:99:c7:e0:cf:85:00:68:3e:2d:ca:01:56:74:2c:
cb:d7:24:81:74:ec:c8:df:4b:f9:38:d1:ab:4d:83:
53:04:77:1f:c3:b4:49:f0:37:6d:44:58:e8:90:18:
e0:3d:9f:f8:52:98:76:73:c8:60:6d:09:09:d6:51:
e0:77:6d:21:93:28:3f:45:fa:0c:2e:7a:5d:29:33:
ee:a9:d8:a9:34:d8:1a:ec:72:5c:42:b8:31:a0:1d:
6f:26:0e:a8:e4:e9:80:b1:f7:54:7b:bb:53:33:04:
78:a2:00:93:b2:9e:51:47:79:d5:c7:6a:e7:38:2d:
0e:81:95:38:37:3f:4d:76:e1:cd:bd:07:a2:5e:dc:
bb:6d:c9:81:19:89:cc:e4:ba:da:2b:3a:09:ec:99:
30:7d:30:a8:04:cf:3e:3c:de:07:32:7b:88:71:89:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BA:7D:F8:D7:3C:6C:0E:5A:67:A1:BC:15:E4:9B:FF:78:19:DE:61
X509v3 Authority Key Identifier:
keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/m7p9-Nc8bA5aZ6G8FeSb_3gZ3mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.59.0/24
Signature Algorithm: sha256WithRSAEncryption
14:2a:5e:c2:6a:ff:45:ee:8d:8b:dd:3c:f9:aa:da:bb:a5:91:
b4:7c:ac:6c:a4:c6:78:de:af:8e:64:d8:ae:fb:01:a9:4d:6a:
c0:68:c9:c7:98:bf:a6:2a:c4:89:37:9c:ae:ae:44:73:ad:06:
e8:f1:a9:22:23:39:a5:52:88:94:c1:7c:25:a9:fe:2c:0e:53:
c1:6d:a3:79:25:39:41:98:03:36:74:ac:b4:01:b8:74:70:b2:
58:59:27:7a:3c:98:65:93:03:aa:21:13:8b:82:99:d1:57:f3:
8e:ef:0a:43:6d:df:48:6a:22:8c:73:ba:cb:64:89:b1:97:28:
62:1f:72:36:ba:b3:1e:f5:45:2e:6d:f7:d5:b2:da:34:05:be:
ac:81:d5:64:42:29:23:f5:0a:33:90:45:5e:12:4c:e2:08:ec:
7b:0d:31:16:41:d0:75:34:e0:1c:27:1a:ff:fe:a8:f8:b2:fe:
fe:85:d5:b8:ef:86:09:dc:83:8a:65:e3:bd:51:ce:74:63:01:
79:f0:53:96:21:b5:a8:c5:99:3c:5f:e4:99:8b:16:7f:df:fb:
59:4d:57:da:58:cc:a4:2d:34:2f:53:ae:f0:a3:e4:b1:1e:b2:
62:4b:4b:e0:2d:e7:e1:1a:88:e1:63:1c:e1:2a:51:a1:cb:9f:
65:14:93:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:33:57 2025 by rpki-client