Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa
File: 7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa (raw, json)
Hash identifier: gAGdIZGspYyJlvskZ74rsTfXVPxswIlGbLI3PkYprvU=
Subject key identifier: EE:00:31:D4:FC:B1:E2:ED:13:73:2A:06:26:6F:BB:C5:30:A7:A7:4D
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0194266C19A7B36A1BEA3293FA2F2A8DB37D
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa
Signing time: Thu 02 Jan 2025 09:50:06 +0000
ROA not before: Thu 02 Jan 2025 09:50:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50590
IP address blocks: 93.125.1.0/24 maxlen: 24
217.21.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:19:a7:b3:6a:1b:ea:32:93:fa:2f:2a:8d:b3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee0031d4fcb1e2ed13732a06266fbbc530a7a74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:94:dc:bb:16:f7:37:fb:19:41:f0:bc:bf:
0b:c1:ef:de:c2:af:e1:03:ac:73:b7:ce:03:62:ff:
b3:b1:c1:97:5f:84:19:26:5d:7f:ae:66:94:ea:b9:
17:17:d4:4e:2a:57:45:15:cd:17:3b:93:f8:aa:fc:
a1:81:c6:db:94:d1:b2:cc:85:4e:c6:bb:36:78:b9:
59:b6:94:7b:2f:8d:46:89:ae:3b:18:af:76:b0:6e:
40:8f:61:8b:a3:d4:ed:17:8a:b7:69:50:bf:42:ae:
6f:dc:29:8a:6a:da:02:ee:ee:e8:e9:0d:8b:aa:d2:
75:a4:80:95:e0:19:d1:90:86:90:f7:2e:f9:55:57:
4e:ca:80:1d:d9:2e:fb:b4:15:ce:8d:b3:72:d0:e3:
ac:76:62:05:ea:e0:8b:bf:3d:85:a6:a5:45:60:25:
21:2e:a4:8d:55:d6:af:56:87:3b:52:03:a7:de:02:
27:e1:63:1a:d1:db:92:61:23:cb:f5:fe:61:8c:93:
47:32:57:50:90:b2:54:74:07:76:8d:37:0e:cf:fb:
2d:fd:a3:48:43:c4:b0:67:cd:83:3d:d1:4e:71:dd:
3e:c0:0c:2e:e2:4a:9d:18:f0:4f:98:cd:f7:8a:46:
c6:71:57:d5:75:5c:1b:b5:96:ec:bf:61:64:7d:28:
23:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:00:31:D4:FC:B1:E2:ED:13:73:2A:06:26:6F:BB:C5:30:A7:A7:4D
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.125.1.0/24
217.21.53.0/24
Signature Algorithm: sha256WithRSAEncryption
69:16:f1:1e:af:5d:31:27:3a:df:ab:0d:cb:3a:fa:d8:9e:63:
08:49:b1:f2:f8:da:98:54:3c:d4:2f:8f:d9:98:40:03:dd:df:
a3:55:05:02:12:ab:ec:e2:b5:96:98:5e:08:4a:69:cd:b6:65:
d1:c4:a7:90:18:47:d3:cd:d3:27:46:dc:47:fa:d7:78:7f:27:
f0:8a:3c:ba:67:4c:df:76:59:4f:23:48:51:2f:62:20:7e:26:
ea:51:02:63:a5:ac:19:d2:f4:c8:17:84:4a:0c:1a:e3:95:a9:
9b:d0:0f:ac:36:94:65:73:9a:b0:72:e9:00:ea:9f:04:61:13:
1e:5e:55:16:09:c8:05:68:b2:e3:f7:4a:0d:75:4e:cf:72:b9:
83:99:f0:d0:11:cc:40:07:b1:16:ce:be:6c:b3:b2:cf:c5:9a:
b8:62:4d:bc:8f:fe:14:e4:2e:07:65:78:e3:b7:09:1d:36:11:
2b:b5:8e:e4:11:a9:27:fa:6d:60:c7:a3:7d:3a:40:24:7c:15:
f9:be:34:49:8d:99:0d:57:53:18:57:65:f2:5a:69:fc:18:23:
7a:01:9a:87:c2:cf:5a:32:01:5d:fd:92:37:32:5a:0e:9a:49:
82:df:db:33:71:96:f8:f7:43:60:d7:66:d3:87:84:35:a5:8a:
e1:ab:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:24 2025 by rpki-client