Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/E00rNsoiT3py_3yapmHFtC_Nhrg.roa
File: E00rNsoiT3py_3yapmHFtC_Nhrg.roa (raw, json)
Hash identifier: NbpIiEieVkToVn1q+xbEvBZtrUTnRwlkypf+PLwHZU0=
Subject key identifier: 13:4D:2B:36:CA:22:4F:7A:72:FF:7C:9A:A6:61:C5:B4:2F:CD:86:B8
Certificate issuer: /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial: 01941FFA79D7F773A3971C22780384D96EBE
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/E00rNsoiT3py_3yapmHFtC_Nhrg.roa
Signing time: Wed 01 Jan 2025 03:48:16 +0000
ROA not before: Wed 01 Jan 2025 03:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199643
IP address blocks: 185.7.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:79:d7:f7:73:a3:97:1c:22:78:03:84:d9:6e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=134d2b36ca224f7a72ff7c9aa661c5b42fcd86b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2b:34:b8:96:20:0e:f8:35:44:e0:40:58:84:
be:eb:67:8b:7c:94:e5:18:9f:89:26:f4:fe:ad:cc:
96:65:1b:12:cc:a0:f3:63:eb:f1:ef:c4:f4:9d:15:
24:b5:a2:e3:3a:2c:a3:df:9c:1a:6e:ee:9e:4b:f5:
c7:d2:b9:66:b2:21:72:89:63:4f:69:b4:c1:fb:92:
a7:35:ff:0b:b6:9a:60:c0:e1:dd:29:9c:2d:84:a2:
b4:e4:15:7d:62:c9:29:17:8e:7b:4c:91:d0:f1:12:
4f:86:57:2b:c5:e7:e0:19:65:22:7d:79:a0:45:68:
42:39:38:ab:9b:a6:47:0c:77:82:90:64:de:c0:e6:
41:dd:ec:54:b9:77:a0:29:df:81:81:12:74:c4:bc:
7e:6b:52:7e:d4:75:35:2f:48:d5:4f:95:b3:74:a4:
dd:50:63:71:02:9c:bd:61:e0:2a:58:a8:38:6e:6e:
b8:15:95:9a:71:66:10:ec:7b:f0:57:6e:51:19:f1:
63:06:9e:a0:99:0d:42:34:75:bf:31:81:a8:af:3a:
9d:ea:0c:01:34:62:46:d8:18:70:60:bd:58:ac:21:
41:3f:41:d6:9f:25:7e:ef:f3:99:8a:7c:06:2b:cd:
d6:2b:f5:18:6c:34:d3:be:84:d4:b6:78:fa:60:d9:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4D:2B:36:CA:22:4F:7A:72:FF:7C:9A:A6:61:C5:B4:2F:CD:86:B8
X509v3 Authority Key Identifier:
keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/E00rNsoiT3py_3yapmHFtC_Nhrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.128.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a4:26:d2:e8:e4:df:b1:a0:83:7f:e8:ee:15:92:53:86:75:
88:2b:35:cb:10:75:aa:ce:c2:70:cb:07:30:aa:b3:e6:94:80:
9d:0d:36:13:6b:e9:b2:be:ff:e3:34:c1:d6:82:db:7e:30:78:
54:ea:ae:34:0f:3c:89:bf:90:16:9b:7d:23:64:18:1a:c1:c1:
f7:ef:a5:af:7a:7a:62:cd:ca:92:b7:59:e2:de:03:4b:44:f6:
c8:99:f2:59:2b:4c:07:b5:ed:0e:66:ca:76:17:0b:e2:7b:f3:
25:b5:5b:0a:89:25:5a:d9:fe:ab:8f:5a:fe:fc:19:cb:e5:fe:
ba:18:85:d8:c3:1e:03:9e:f8:5a:33:f2:b5:c9:4f:bd:c0:03:
02:18:c1:dc:49:89:e6:05:f4:0b:42:62:38:59:d3:30:76:16:
91:3d:db:09:70:55:1d:b4:58:e6:5f:2c:51:7e:bd:6d:d3:78:
a9:f4:eb:3f:79:f8:1d:ac:91:ec:28:03:e0:56:b2:84:7b:88:
f8:05:f7:97:90:57:cd:a8:f9:97:c8:a7:e5:bf:21:f0:76:35:
8a:09:2b:17:0a:97:3f:19:e5:db:04:6c:51:2b:13:35:62:6e:
e9:03:a6:5c:f3:5d:3d:e6:33:3b:a1:06:2e:9f:29:11:1a:66:
1f:87:b8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:31:54 2025 by rpki-client