Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/7g9WDnfwGC695A3gUF6F3XaKlmY.roa
File: 7g9WDnfwGC695A3gUF6F3XaKlmY.roa (raw, json)
Hash identifier: TzzYrMCZOYqgatk0txvOXfw1Un0jwLj7jZ0x8AM5wkA=
Subject key identifier: EE:0F:56:0E:77:F0:18:2E:BD:E4:0D:E0:50:5E:85:DD:76:8A:96:66
Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial: 019424B27198A482FE2506584A4B92EA2169
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/7g9WDnfwGC695A3gUF6F3XaKlmY.roa
Signing time: Thu 02 Jan 2025 01:47:41 +0000
ROA not before: Thu 02 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 185.207.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:71:98:a4:82:fe:25:06:58:4a:4b:92:ea:21:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Validity
Not Before: Jan 2 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee0f560e77f0182ebde40de0505e85dd768a9666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:30:53:6a:ea:da:8b:c5:ac:6f:c1:5e:cf:
d9:50:96:c6:7c:55:2e:f2:25:0d:a4:07:5b:db:4b:
0b:0b:30:2f:2e:69:e8:e0:e7:34:bf:4a:f0:44:94:
f1:80:4d:ad:46:c5:85:32:57:b2:8d:36:22:03:cf:
fe:c6:be:c4:04:fe:d0:11:84:a9:17:0b:6f:8f:8c:
e8:89:62:ab:90:6d:be:40:1d:1c:cc:1a:38:ea:98:
2b:2f:8b:21:da:25:46:3c:e5:78:9b:73:cd:9c:74:
5e:86:b4:5d:1d:68:6e:8a:84:04:1e:01:c5:31:df:
81:15:cc:c2:5d:b2:2b:cf:6e:00:fa:4c:1d:2f:0a:
8e:46:39:ad:ba:3d:d0:88:c7:d3:8c:b0:cd:a6:67:
65:7f:6d:d8:f8:3a:c7:bd:11:cb:85:14:56:93:41:
16:55:4e:ff:cd:07:e4:44:00:3c:d7:ff:28:2f:31:
50:04:09:fd:1b:21:ec:ba:e8:37:d0:76:c3:7a:b3:
76:6c:7d:4f:6c:d9:06:92:35:a6:45:af:96:c7:2b:
b2:f1:7e:b9:e2:2f:f9:da:41:ea:db:f2:f2:3a:76:
cb:73:19:21:87:fd:5c:a2:06:9c:99:35:44:d3:04:
85:c3:b6:3f:13:33:47:26:33:eb:2b:35:60:1f:ef:
95:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0F:56:0E:77:F0:18:2E:BD:E4:0D:E0:50:5E:85:DD:76:8A:96:66
X509v3 Authority Key Identifier:
keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/7g9WDnfwGC695A3gUF6F3XaKlmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.100.0/22
Signature Algorithm: sha256WithRSAEncryption
31:78:ad:4d:8c:4f:f9:e3:bc:27:9e:5e:0d:cc:ac:a0:03:c7:
17:b5:40:24:61:3c:55:3f:ab:19:30:24:d3:34:d5:39:ad:f7:
e3:0b:32:4f:df:e8:18:b1:0c:aa:a8:13:6f:49:0a:75:7a:1c:
f8:a8:6a:e3:25:59:4c:59:2b:19:a8:32:1b:58:ea:b4:24:1b:
fb:07:7b:9c:a6:4d:5c:3d:d2:58:85:a2:e0:07:d5:ad:db:70:
84:ad:14:b9:31:78:20:d8:63:98:ee:fd:7f:84:87:41:db:2b:
49:76:34:19:67:45:d6:54:8a:db:5f:05:33:1a:18:39:27:38:
34:8d:83:cb:79:2e:d1:aa:69:af:d8:1f:d9:61:25:03:a9:79:
d1:54:f7:84:59:de:77:08:27:e7:0f:c8:7a:ac:84:b4:50:2d:
11:d3:d6:cc:44:f0:e8:23:57:b8:ac:32:dd:42:e2:ab:ec:4a:
cf:e6:e9:75:7d:98:83:97:eb:6a:41:04:f3:31:90:13:b7:12:
c6:5c:9a:c9:2b:56:fb:99:7f:8c:46:6c:11:55:31:b6:8f:cd:
ba:45:aa:c6:b6:22:ab:b2:60:bd:3d:50:a6:ee:9b:2d:eb:3e:
9b:05:74:ef:b0:b1:d2:2a:43:c8:67:f1:fa:6c:bf:f3:31:7f:
7e:58:87:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:07:07 2025 by rpki-client