Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa
File: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (raw, json)
Hash identifier: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=
Subject key identifier: 9F:BB:F9:60:EA:D2:14:6A:17:A9:52:74:3D:EC:AD:0A:B1:60:38:B8
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 019422FBF76C024B9F2D138BD8870C9D9FD3
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa
Signing time: Wed 01 Jan 2025 17:48:45 +0000
ROA not before: Wed 01 Jan 2025 17:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200995
IP address blocks: 212.72.236.0/22 maxlen: 24
2001:7bb::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f7:6c:02:4b:9f:2d:13:8b:d8:87:0c:9d:9f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Jan 1 17:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fbbf960ead2146a17a952743decad0ab16038b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:0f:f5:13:67:44:8b:1b:a6:51:32:52:39:4b:
c3:28:c5:fc:f9:47:29:7d:d6:77:62:98:6d:30:c5:
35:cb:82:93:0e:aa:b4:0b:64:1c:41:d9:15:b0:e1:
6a:e8:5c:0c:e2:ba:71:25:3d:22:53:e1:1b:a1:70:
55:5e:36:00:e7:15:2b:5c:d1:e2:b3:34:18:5d:4b:
b3:f5:79:cc:ea:2f:8b:a8:73:b6:5c:5e:45:b6:fb:
49:50:b1:6a:06:77:92:9d:b1:8a:dd:a0:fe:f8:45:
01:ef:a5:14:32:5e:76:41:7c:96:fd:62:8e:3b:9c:
cb:34:b2:88:61:8a:f4:f1:10:72:c3:8c:4d:45:c8:
77:1b:cd:f1:0b:c9:0d:33:4e:a8:16:d5:37:42:63:
00:d0:83:6b:fc:9e:b7:55:fc:16:1b:05:11:6d:7a:
04:8c:a3:1b:ed:2b:c1:bc:fe:c8:40:8f:d2:2e:1e:
39:d3:8c:a7:26:83:b2:cc:a5:7b:ed:ca:93:8d:89:
25:d6:08:80:82:8e:7a:60:a4:86:e5:7a:38:2e:c4:
69:5d:ef:ae:99:3f:91:51:f8:fa:89:f7:b4:67:5f:
1f:ae:bf:f8:d1:a4:d4:df:1c:45:47:1b:a3:a0:fa:
60:b3:2e:90:54:fa:8e:26:40:d6:20:36:ba:2b:3c:
1d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BB:F9:60:EA:D2:14:6A:17:A9:52:74:3D:EC:AD:0A:B1:60:38:B8
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.72.236.0/22
IPv6:
2001:7bb::/32
Signature Algorithm: sha256WithRSAEncryption
8b:73:28:78:b0:00:4a:dd:cb:af:62:3d:87:4d:12:02:d3:bd:
2c:21:ae:94:b0:8d:42:1b:50:aa:1d:38:93:aa:b8:fa:b2:2b:
5b:bb:09:05:d4:9e:cb:a5:6e:01:48:39:3c:8f:d3:7d:23:c0:
f8:d2:3a:6c:0c:22:7b:09:d2:1d:b5:56:f6:98:64:cd:01:7a:
be:10:84:c0:e5:3e:e9:b8:b1:d8:38:12:7c:89:dc:5f:07:c6:
64:6d:8f:b3:37:3d:3b:db:4f:60:a3:fc:42:26:b7:cb:9f:b1:
74:ae:f1:f0:2b:5f:ed:cf:0c:c1:a0:01:78:83:58:d9:2a:09:
11:90:c4:2e:d2:2d:f6:3d:f5:c4:fb:2b:ef:d7:aa:dd:cd:e4:
16:a8:77:cd:7b:00:f1:08:d1:05:e4:83:45:12:27:ae:7c:87:
c4:7b:b9:3c:d1:1b:04:5d:76:df:8b:b9:d9:52:5a:34:f4:5b:
6d:f1:a8:f9:ef:93:c8:00:38:11:00:9b:73:dd:9f:11:65:88:
82:e6:7c:44:0e:c1:a0:87:9f:9c:b0:33:bc:b8:7f:6a:03:ff:
88:87:f1:29:9d:66:02:fb:7a:4f:91:7f:32:b0:d3:40:4e:a1:
02:aa:df:ce:4d:8e:6c:7a:dc:d9:aa:c1:36:e5:14:5f:58:82:
f2:9c:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:48:58 2025 by rpki-client