Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/7WIu-04JT5q4B6hkGVgTZ1A7dhY.roa
File: 7WIu-04JT5q4B6hkGVgTZ1A7dhY.roa (raw, json)
Hash identifier: Pf0YItmuxNXQvgyrB87kYftzZzA3/+ql7wFTvsw+Svg=
Subject key identifier: ED:62:2E:FB:4E:09:4F:9A:B8:07:A8:64:19:58:13:67:50:3B:76:16
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 019426D95E7E510CE0E2CB7C4A2D5FC9AA67
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/7WIu-04JT5q4B6hkGVgTZ1A7dhY.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42068
IP address blocks: 195.242.150.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5e:7e:51:0c:e0:e2:cb:7c:4a:2d:5f:c9:aa:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed622efb4e094f9ab807a86419581367503b7616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2d:90:a3:0d:2b:e1:32:69:75:5c:88:7d:89:
61:6c:9a:ec:5e:a8:c6:84:44:77:30:26:09:3b:6c:
2c:10:64:54:df:5e:6e:77:4d:13:39:df:75:d9:ca:
ba:cc:83:21:32:27:a5:6c:22:43:e8:08:2c:e2:a2:
3a:16:3e:e2:df:74:43:bb:7f:63:2e:b8:8b:7b:09:
28:06:20:56:05:16:ee:d4:26:4a:40:89:ab:27:d4:
3c:83:f5:75:8f:b7:c0:52:81:82:4b:d2:49:37:08:
84:89:90:a6:cc:cd:e0:44:40:97:49:1d:e9:09:ea:
a0:6c:88:6a:8b:33:a3:a7:b1:a2:be:33:3b:8a:46:
a9:75:f3:72:48:84:72:1d:49:8c:6e:43:7c:cd:86:
fc:e8:09:4b:7d:90:ba:d9:68:cc:fb:db:6f:01:6a:
aa:68:57:d9:ce:9e:28:e4:64:d0:82:f8:1c:d1:f6:
8f:c9:2f:f8:2b:e6:f7:4e:f9:c8:63:2d:0d:bb:a6:
a5:fe:1e:a2:65:60:ed:6a:86:bd:b6:00:9b:fe:8b:
79:f1:a0:98:9c:93:e8:77:52:53:93:14:7a:49:0b:
ad:a2:29:93:f2:26:5f:8c:21:4c:a1:3f:d0:23:fe:
9d:f0:04:aa:49:1d:1f:6c:7c:10:f5:4d:8f:23:c3:
b4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:62:2E:FB:4E:09:4F:9A:B8:07:A8:64:19:58:13:67:50:3B:76:16
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/7WIu-04JT5q4B6hkGVgTZ1A7dhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.150.0/23
Signature Algorithm: sha256WithRSAEncryption
08:fa:56:85:bc:32:43:ff:12:d5:e1:c8:19:77:50:af:79:3a:
64:6e:c5:ca:d5:26:4a:99:a8:3a:51:c3:a0:6c:83:d6:f0:f3:
52:96:c2:fd:59:65:0a:3c:86:0c:33:52:d0:05:f8:f6:f9:3b:
13:6f:94:f5:e5:1a:3a:a1:10:cd:f0:85:d8:a8:5b:0f:3f:48:
a2:37:5b:75:fc:d7:b7:ff:dd:f0:f0:ec:1e:93:50:f0:4a:19:
2e:90:f4:c2:bf:66:e2:03:a7:f4:e3:45:35:a5:d5:53:55:4c:
eb:db:b8:65:5a:f0:d4:f8:c0:d8:a3:99:ce:70:3b:d0:50:2f:
d8:07:5d:d0:4a:77:4c:ef:d7:50:78:b0:a6:c2:1b:13:24:8a:
72:7a:4c:6c:8a:5f:4c:0d:08:58:fb:8a:85:25:03:52:1c:e2:
48:b3:ea:77:e1:26:71:7c:58:31:01:de:64:3a:3d:e4:f6:1e:
fb:75:bd:d3:26:79:e8:4f:6e:15:88:57:cf:de:6f:68:bf:a3:
88:a6:73:e2:98:86:26:93:2a:4a:fc:e3:80:a3:ab:24:e4:2f:
d5:75:7f:84:2e:03:5e:ef:29:5f:cc:6a:f6:7f:ef:94:c2:5f:
34:33:8d:c0:f9:ba:67:c8:08:2e:50:40:81:f2:ff:08:52:09:
29:e0:ea:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:27 2025 by rpki-client