Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/Z_9Q3PxGDOcB3nFj__w1sU1fvQA.roa
File: Z_9Q3PxGDOcB3nFj__w1sU1fvQA.roa (raw, json)
Hash identifier: SvYV/Pu2tlFMkSStzl7ZdaRZIZBCBsYRr7gH+lE6jO4=
Subject key identifier: 67:FF:50:DC:FC:46:0C:E7:01:DE:71:63:FF:FC:35:B1:4D:5F:BD:00
Certificate issuer: /CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
Certificate serial: 01866F44AD753A680C3DD5CF3427CB670BBC
Authority key identifier: 7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/Z_9Q3PxGDOcB3nFj__w1sU1fvQA.roa
Signing time: Mon 20 Feb 2023 14:40:17 +0000
ROA not before: Mon 20 Feb 2023 14:40:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 185.83.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:44:ad:75:3a:68:0c:3d:d5:cf:34:27:cb:67:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b4e1f6030d4735909ec7ef7c3a5649f762c49ef
Validity
Not Before: Feb 20 14:40:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67ff50dcfc460ce701de7163fffc35b14d5fbd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f4:5c:36:a8:cf:97:fc:97:34:31:ae:7b:56:
ed:e9:47:7f:cb:e6:e0:c2:b4:13:65:71:80:37:c7:
8b:7a:0a:8b:d9:37:1f:38:6c:76:4d:ef:80:81:81:
1d:1c:23:74:6b:c4:e6:3a:91:05:45:3c:4f:34:30:
31:77:eb:60:4e:ac:a8:1d:2e:8e:4b:bc:0c:e6:5a:
fc:12:02:0c:83:26:48:54:1e:79:d6:bd:8f:d4:e8:
35:31:5a:2e:ac:85:c9:ff:d9:17:34:9d:ae:3b:bf:
af:3b:90:f2:c9:1a:92:fe:b4:06:bc:ce:d5:f9:da:
68:44:0d:ca:a4:89:57:08:ba:0e:6c:96:f3:3b:1a:
2e:ea:16:8f:88:5a:1f:80:c0:6f:22:13:c1:30:f5:
c7:a7:68:b6:0c:d1:b4:a5:f6:8e:98:f6:e5:68:82:
e5:1d:8a:41:07:d7:b3:f3:c0:0f:3e:74:87:9b:e6:
26:ac:46:e8:35:90:d6:ba:9a:8a:af:84:c3:c3:49:
1a:fa:af:ec:c5:23:60:8b:a1:b3:bc:4b:14:2b:ff:
45:8c:0d:16:39:cd:71:25:09:0e:22:e5:db:1f:5b:
9a:4b:70:4d:57:e1:73:ce:7a:cc:de:25:8a:9d:1e:
2f:27:b3:da:ec:c1:7d:4e:df:6e:9e:c4:6e:15:aa:
48:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FF:50:DC:FC:46:0C:E7:01:DE:71:63:FF:FC:35:B1:4D:5F:BD:00
X509v3 Authority Key Identifier:
keyid:7B:4E:1F:60:30:D4:73:59:09:EC:7E:F7:C3:A5:64:9F:76:2C:49:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e04fYDDUc1kJ7H73w6Vkn3YsSe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/Z_9Q3PxGDOcB3nFj__w1sU1fvQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ee92c8-eb89-4e24-8083-c07b0d796923/1/e04fYDDUc1kJ7H73w6Vkn3YsSe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.231.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c7:9f:dc:d1:12:c1:1e:2d:cb:21:5d:18:ad:1e:fe:ff:c0:
a5:66:b1:23:3c:4c:89:6b:e0:12:cb:be:de:ae:c2:3c:c0:2a:
cf:45:5c:57:9b:6c:2a:37:95:0f:0d:a8:be:6a:96:5c:41:d9:
94:a3:f7:67:f5:5c:3d:9f:eb:6b:42:f7:fc:dd:dd:0f:81:2e:
80:be:2b:e7:53:a2:44:d6:ee:86:06:07:af:5f:2f:91:76:ba:
1b:a5:f5:9e:ac:39:7c:3d:28:70:69:d6:0d:19:8b:d5:73:ac:
29:88:a2:18:7a:c3:98:dd:67:de:9e:6f:16:8b:ec:fd:89:97:
19:d1:bc:2c:f6:77:5b:d3:e6:b5:6a:cc:7a:df:7b:3d:8a:b1:
c5:1a:fe:c5:26:7d:c3:13:3d:47:3e:d9:b2:9d:39:58:04:ca:
0a:9a:b7:ae:b4:f1:a8:7f:c7:7f:bc:73:82:a1:fd:8d:b1:5f:
03:4c:b9:9d:cd:5d:f0:bb:4e:13:64:32:0a:06:b4:bc:f5:ff:
28:ec:0e:d4:2b:19:3d:00:0f:d4:37:3e:ea:77:99:f7:51:98:
50:5f:09:3f:d8:ac:56:d3:db:9c:8f:7b:3e:88:ca:bf:b5:48:
bd:45:d7:7d:0e:1f:e9:ed:43:eb:ec:22:8a:1b:0d:5d:af:18:
7b:e7:23:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:03 2025 by rpki-client