Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/7yBa3A7Tkyb0oFXe2RWSg6N3T5M.roa
File: 7yBa3A7Tkyb0oFXe2RWSg6N3T5M.roa (raw, json)
Hash identifier: CkRoqfWXaGSTniBPyXtya2QzLEBTXeHuXxjidGt7KEM=
Subject key identifier: EF:20:5A:DC:0E:D3:93:26:F4:A0:55:DE:D9:15:92:83:A3:77:4F:93
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 0185704BAB6B856E9C34D3A9CF26A7095F61
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/7yBa3A7Tkyb0oFXe2RWSg6N3T5M.roa
Signing time: Mon 02 Jan 2023 02:24:45 +0000
ROA not before: Mon 02 Jan 2023 02:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136038
IP address blocks: 194.126.202.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:ab:6b:85:6e:9c:34:d3:a9:cf:26:a7:09:5f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Jan 2 02:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef205adc0ed39326f4a055ded9159283a3774f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:56:10:94:00:82:38:78:14:c5:ab:40:fc:53:
e4:46:42:b7:ab:1a:94:cd:f8:af:a5:7b:65:c6:1d:
12:bb:3b:7b:a8:98:10:63:66:65:f9:bb:de:fe:d0:
ea:ac:df:06:35:67:d2:00:9d:f4:31:e1:0d:81:61:
42:16:63:24:ea:1f:d3:83:37:7c:47:41:95:99:2f:
b6:3d:f2:1b:a8:1d:7e:46:6c:7d:aa:c7:94:ac:9e:
8b:99:5d:43:b3:c7:a5:f2:22:b5:94:67:8a:6b:be:
ee:bf:da:8a:77:35:b5:22:a0:fd:4d:7a:36:23:3f:
f7:6e:82:28:1f:d9:48:fa:e3:93:ca:da:dc:68:8f:
1e:4d:a8:83:8a:d5:fa:d1:14:f8:11:d9:96:e5:b0:
7d:a6:10:f8:4b:cb:7c:c2:a9:14:ab:ef:3f:62:46:
fc:b5:b2:92:df:42:3c:c6:e4:b5:3a:05:07:f0:0a:
48:c0:e3:cf:e5:c9:cb:30:d8:71:ab:ac:20:8d:0c:
cb:a8:d7:0a:fa:f1:69:10:0a:9b:2e:69:ed:56:98:
98:38:e2:62:39:31:47:17:36:39:46:0b:26:99:e1:
b9:06:45:9a:e6:a6:56:27:b5:84:6c:83:a5:da:d1:
58:f9:e1:39:22:f2:6c:bd:f7:94:49:3a:5a:1e:dd:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:20:5A:DC:0E:D3:93:26:F4:A0:55:DE:D9:15:92:83:A3:77:4F:93
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/7yBa3A7Tkyb0oFXe2RWSg6N3T5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.202.0/24
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a8:8c:dc:ca:42:59:3b:a7:29:59:58:fa:c5:13:3b:8f:f7:
05:77:b9:c3:f9:df:fd:ab:47:13:30:9c:b2:41:a3:9b:dc:be:
3e:a3:8a:53:94:ac:77:ef:c2:74:12:94:bd:87:bb:2d:e7:91:
00:f7:83:2b:bf:46:c8:09:8e:bd:27:0e:08:b5:d4:83:18:95:
5c:03:ca:e9:66:04:2a:71:05:31:36:eb:8c:71:ff:09:22:ec:
bd:02:a0:f5:cc:8e:23:e1:48:9b:df:3d:13:e0:85:41:ae:41:
27:ec:d1:90:14:8d:81:2f:1e:8c:2b:29:27:cb:b9:79:ab:a6:
f3:9d:c0:ed:09:84:b2:6f:d1:65:34:40:a7:90:e0:f1:d4:1d:
7f:cd:77:eb:11:a5:3f:81:b7:5d:fd:ad:3d:e0:ba:5e:88:8e:
2c:4f:c9:3a:6f:45:3a:ad:18:7e:24:8f:88:38:69:d6:de:02:
ed:50:31:b0:03:58:9c:5f:de:7c:76:d1:2b:1f:42:cf:2f:03:
e0:93:02:9f:6d:d5:73:a0:68:c5:81:ca:ae:0b:f1:53:5e:4f:
80:90:89:b8:99:77:8d:fe:62:86:ad:70:3c:6e:a6:85:91:da:
70:8f:32:e6:db:02:e7:80:de:86:74:05:d5:84:f6:27:74:6a:
e3:c6:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:01:44 2025 by rpki-client