Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/f7iYx6J9qQRVlLpAz-hY2T7oU7s.roa
File: f7iYx6J9qQRVlLpAz-hY2T7oU7s.roa (raw, json)
Hash identifier: 7zo5pWrqydP9MLZg4sLTBJUU+28NvFqFkEh4byNC2/g=
Subject key identifier: 7F:B8:98:C7:A2:7D:A9:04:55:94:BA:40:CF:E8:58:D9:3E:E8:53:BB
Certificate issuer: /CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Certificate serial: 019421B22DEEE9EAEA3AF8303E2B11B6E37F
Authority key identifier: 40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/f7iYx6J9qQRVlLpAz-hY2T7oU7s.roa
Signing time: Wed 01 Jan 2025 11:48:32 +0000
ROA not before: Wed 01 Jan 2025 11:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24685
IP address blocks: 194.246.121.0/24 maxlen: 32
195.234.76.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2d:ee:e9:ea:ea:3a:f8:30:3e:2b:11:b6:e3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fb898c7a27da9045594ba40cfe858d93ee853bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:bc:a5:5a:b0:b0:c5:86:a0:8a:b9:c6:1c:
04:e4:ed:9c:c7:79:2c:db:41:d8:72:f0:66:70:06:
29:f6:18:2c:eb:13:d0:52:d3:6f:14:e8:1a:79:01:
9f:54:9b:ed:b4:99:34:5e:59:c9:05:a6:1e:e4:ff:
30:42:31:b6:73:02:92:2f:a3:ef:2f:2e:da:9b:ac:
dc:43:de:5a:47:22:bb:af:cc:8f:35:9e:39:2d:5b:
b2:f7:8c:cc:56:27:9c:78:9c:2a:c2:82:de:98:6b:
ca:39:92:f6:c0:70:4b:7e:d9:37:e1:98:5c:ba:c3:
c2:b9:d2:ff:d0:8c:3a:8a:ec:59:2a:e1:4f:35:5a:
23:7d:33:c4:77:99:04:f2:f1:d8:b1:06:24:34:31:
6e:f9:d0:72:11:95:99:5e:ad:80:2c:44:57:84:af:
44:50:09:74:cc:3d:43:2e:54:7f:c2:c9:f4:83:da:
ca:25:60:d0:4e:f9:a7:fa:85:33:14:af:8c:c5:f2:
4e:14:eb:d8:ba:5b:e7:46:bb:fb:14:34:f8:49:cc:
c6:cc:5d:47:a4:0b:f4:40:8e:56:a5:d5:cd:2b:b4:
c4:c6:60:5b:4c:dc:2d:de:56:8f:36:af:01:9e:75:
37:d9:a4:3b:9a:63:0c:36:08:4a:36:32:81:dc:03:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B8:98:C7:A2:7D:A9:04:55:94:BA:40:CF:E8:58:D9:3E:E8:53:BB
X509v3 Authority Key Identifier:
keyid:40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/f7iYx6J9qQRVlLpAz-hY2T7oU7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.121.0/24
195.234.76.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8a:30:5c:9d:fa:38:f5:5e:9d:85:33:5c:f1:e3:ba:1a:6c:
b5:54:84:da:45:94:23:cd:be:ed:09:87:34:6b:38:36:db:b6:
2b:4c:24:76:90:93:ae:ea:9a:31:07:e4:4a:8a:98:3b:0e:dd:
9f:5d:e5:21:69:aa:11:08:03:2d:1f:45:0d:b4:ba:34:c2:84:
05:be:c9:e5:6a:4e:c1:29:62:c0:33:cc:e5:a9:66:92:45:25:
e8:e2:cd:49:bf:c0:84:80:af:ce:9e:9c:1a:5f:b6:a1:b5:61:
11:93:bb:c1:50:1b:4b:29:ae:99:71:5f:36:ae:b3:b6:fc:a9:
85:57:73:9a:15:29:3c:f2:05:dd:47:82:86:19:3e:10:a3:43:
62:ca:57:b2:e7:10:8a:70:6d:f2:5b:8c:39:4f:e0:15:71:d6:
2b:f0:08:8b:ae:c2:b8:90:60:c9:ab:32:21:7b:e6:f4:77:4e:
29:ef:04:94:dc:e2:d7:b4:1e:2d:01:dd:19:58:3f:dc:b2:1d:
5d:65:51:cb:26:ba:21:bd:0e:d9:d8:ea:cd:10:2e:c7:8a:9c:
b6:f6:48:74:5a:8c:87:ec:ee:9e:d7:48:9c:31:8a:62:77:a5:
aa:d6:83:89:c9:95:8b:d2:4d:a6:2d:1c:e3:54:3c:de:99:97:
0a:91:52:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:53:59 2025 by rpki-client