Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/2n7OMl3jQfBIql5u4fGHwPSLtNw.roa
File: 2n7OMl3jQfBIql5u4fGHwPSLtNw.roa (raw, json)
Hash identifier: 1rKFkHzCGzWhEvrCyPc6hzfuk0GlXlkcWKE6261l+UI=
Subject key identifier: DA:7E:CE:32:5D:E3:41:F0:48:AA:5E:6E:E1:F1:87:C0:F4:8B:B4:DC
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 019425FC246013FD8D5D352DCBEB12DD41A0
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/2n7OMl3jQfBIql5u4fGHwPSLtNw.roa
Signing time: Thu 02 Jan 2025 07:47:48 +0000
ROA not before: Thu 02 Jan 2025 07:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200726
IP address blocks: 185.98.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:24:60:13:fd:8d:5d:35:2d:cb:eb:12:dd:41:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Jan 2 07:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da7ece325de341f048aa5e6ee1f187c0f48bb4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:2e:6c:66:21:9e:49:82:d1:83:40:f8:04:
e4:81:8d:98:60:1e:c0:19:ea:67:6c:96:50:29:30:
2a:ea:6d:0c:ab:5e:5a:99:b2:cd:d3:c0:c3:36:5a:
54:a4:f1:d7:50:ea:37:7a:7a:e0:15:e8:3f:a3:82:
6f:57:52:7a:e5:03:1c:2a:59:cb:00:ea:a3:66:71:
ab:fd:a8:0c:69:e1:33:58:02:5e:7a:af:5c:1a:90:
6a:1e:84:eb:a2:78:71:dd:3e:53:8b:83:9b:f3:9a:
e9:ec:2d:56:2e:93:de:a4:56:7c:0b:41:51:ff:66:
df:73:f6:8d:6c:72:be:2d:38:cc:fd:0b:90:05:be:
82:8a:34:4e:41:8e:c9:bc:58:f6:43:43:f1:6d:36:
07:0d:45:85:63:9a:eb:fc:63:bf:96:76:aa:66:9a:
b3:4f:96:0c:a0:a2:02:4e:34:13:60:d0:fb:c2:22:
cf:f8:1b:8f:6c:33:4f:2d:da:90:54:00:9d:1e:4f:
dd:01:a5:ed:ff:69:cf:05:fd:1a:2c:97:38:cc:33:
c4:bc:53:34:9b:f8:8b:b4:de:1a:b6:c5:19:79:4a:
74:b8:e3:b8:46:60:f3:c4:ac:49:1b:c6:b4:7d:27:
ee:d7:3f:cb:64:21:e9:7c:f5:b4:80:aa:d7:60:5f:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7E:CE:32:5D:E3:41:F0:48:AA:5E:6E:E1:F1:87:C0:F4:8B:B4:DC
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/2n7OMl3jQfBIql5u4fGHwPSLtNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.72.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b0:c3:58:aa:f9:17:a5:f4:62:e1:4b:12:8f:c0:10:fb:0f:
02:c6:9c:85:e9:63:1a:f8:a3:39:ba:b5:09:87:56:b6:cd:38:
53:ca:68:17:94:99:19:ca:05:70:3c:d2:bb:d2:8a:87:fe:3b:
cf:aa:30:3a:21:5e:c2:bc:b5:38:d7:f7:a6:05:10:d6:10:95:
09:1d:c7:c1:c7:3e:17:a1:e5:42:57:31:1c:e4:56:3e:09:e9:
8c:f0:90:4e:0e:5c:c9:17:c7:04:c2:1e:61:4c:f9:16:54:bf:
5c:b6:32:c7:e5:c8:ed:29:35:81:fc:ab:08:53:71:2d:a3:92:
3b:78:ea:ad:bd:7e:b8:6d:72:db:6d:6e:86:f7:e1:1c:79:a2:
4f:92:60:7e:63:94:d5:64:3d:30:c1:11:f1:1b:0b:cd:86:18:
9b:98:10:9e:81:54:f1:e2:5d:ff:ff:ec:0a:c8:0b:0f:39:95:
c3:8d:99:1e:0c:ff:92:86:3a:20:32:ad:43:63:0c:2f:cc:7d:
61:0b:eb:68:e1:25:fc:5e:e2:97:d5:ad:d6:d3:4a:a7:ac:19:
29:7c:f6:a1:92:38:db:b0:d4:75:b2:f8:31:a5:ab:8e:bb:11:
fe:7a:36:7f:5f:a1:f2:dd:9f:0c:83:ae:4a:b0:40:0b:4b:ab:
b2:a0:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:31 2025 by rpki-client