Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/7nTA5UbZn9UlRE15X8hSv9P6DQQ.roa
File: 7nTA5UbZn9UlRE15X8hSv9P6DQQ.roa (raw, json)
Hash identifier: avKiejuh7p7ncEMp/as92LVowMLE4+4osRUZg2HK6pA=
Subject key identifier: EE:74:C0:E5:46:D9:9F:D5:25:44:4D:79:5F:C8:52:BF:D3:FA:0D:04
Certificate issuer: /CN=f7e784f370640383e97ec92963bcad3181b99774
Certificate serial: 0918A053
Authority key identifier: F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/7nTA5UbZn9UlRE15X8hSv9P6DQQ.roa
Signing time: Sat 01 Jan 2022 13:01:10 +0000
ROA not before: Sat 01 Jan 2022 13:01:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209321
IP address blocks: 92.249.26.0/24 maxlen: 24
92.249.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152608851 (0x918a053)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7e784f370640383e97ec92963bcad3181b99774
Validity
Not Before: Jan 1 13:01:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee74c0e546d99fd525444d795fc852bfd3fa0d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c6:a1:86:a9:76:f8:66:74:42:a0:a3:3b:da:
f5:17:de:3a:ba:d9:44:b1:8f:d0:f5:69:a6:08:bc:
43:43:49:20:52:c1:33:17:95:bf:50:94:2a:af:df:
05:ca:31:bb:3d:7c:11:bb:52:be:5f:fc:17:65:07:
78:b4:4c:a5:92:07:26:3e:16:e2:f9:08:44:87:03:
73:28:fc:2c:f9:97:de:65:be:a4:50:dc:55:25:f8:
14:ea:a2:e0:63:38:b2:97:e8:30:5f:7f:b5:fd:9c:
4f:da:b8:cb:dd:b6:4b:0e:f5:cf:8b:21:dd:b6:47:
56:ec:b4:93:e3:0b:1b:aa:10:1b:fe:e0:f8:b8:a7:
20:0b:d5:13:e5:5a:d8:e4:df:4c:8a:d3:c0:30:c1:
a8:39:2c:f2:fe:35:19:8b:08:0d:70:25:1f:83:0d:
f2:af:8d:b9:ee:48:94:f4:95:01:5b:ee:41:de:0c:
09:8f:af:a9:86:e4:dd:12:05:93:56:19:a3:6f:5a:
11:e8:a2:34:00:15:19:ba:8a:d8:ce:90:2a:fe:33:
3e:a4:a9:d5:68:8f:67:e3:19:fa:ab:aa:97:e9:68:
27:ed:f8:ac:59:15:18:bb:7d:d5:97:33:12:f6:51:
04:0d:08:d9:98:22:7c:6a:ea:ea:ea:4f:aa:72:ca:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:74:C0:E5:46:D9:9F:D5:25:44:4D:79:5F:C8:52:BF:D3:FA:0D:04
X509v3 Authority Key Identifier:
keyid:F7:E7:84:F3:70:64:03:83:E9:7E:C9:29:63:BC:AD:31:81:B9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-eE83BkA4PpfskpY7ytMYG5l3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/7nTA5UbZn9UlRE15X8hSv9P6DQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/800b02-32a8-4899-805c-68e0a84feb46/1/9-eE83BkA4PpfskpY7ytMYG5l3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.26.0/23
Signature Algorithm: sha256WithRSAEncryption
08:3f:be:4b:ed:12:8d:ee:82:20:af:9c:b2:df:a7:da:47:ef:
9f:cb:08:7d:50:d8:c4:98:35:74:1e:7a:52:db:b5:6d:a1:e3:
99:75:8f:b1:16:e3:22:e8:93:68:91:bc:1b:49:88:f1:1e:06:
ed:87:c2:71:74:14:e7:62:01:13:f3:a9:29:f2:c0:cf:47:42:
83:51:bb:2b:d6:39:af:8e:a9:da:4c:a3:0b:41:fb:2b:4a:3c:
bd:81:27:a4:4a:95:78:3c:66:27:a3:38:66:12:61:03:58:79:
d8:07:e6:f9:92:7b:cc:00:dc:4d:16:b7:b4:13:bb:1d:7e:3f:
cf:aa:df:87:37:3a:37:d1:db:3f:3b:28:8e:c3:57:ef:1e:fe:
0d:90:47:bc:ab:6a:e1:e0:db:8d:56:74:e8:1a:05:7f:45:53:
41:12:67:0f:ba:c1:4b:8a:3c:c0:33:f3:01:9c:51:78:fc:ec:
86:1b:9f:bf:53:bb:7a:78:08:6d:f6:74:5e:24:7a:79:4d:53:
f5:91:d0:c8:ac:0a:5e:d4:57:c4:57:8d:b2:51:4f:90:0c:72:
bd:41:25:5c:d1:67:a0:a4:ee:1f:6d:5f:bb:14:ad:5f:e6:4e:
a7:71:45:87:97:5e:e3:b8:0e:6a:d1:c1:d7:95:c6:72:8b:44:
41:6a:be:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:04:34 2025 by rpki-client