Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/R_dc828vlc27bxXSMzahF76dopg.roa
File: R_dc828vlc27bxXSMzahF76dopg.roa (raw, json)
Hash identifier: U9Dh8EyuA2m2THZyqCUiwh3xOZkz+ZLmhUNE1mbIxTM=
Subject key identifier: 47:F7:5C:F3:6F:2F:95:CD:BB:6F:15:D2:33:36:A1:17:BE:9D:A2:98
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 0194274830D8499205A7D3F205AC14708439
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/R_dc828vlc27bxXSMzahF76dopg.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215966
IP address blocks: 212.7.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:30:d8:49:92:05:a7:d3:f2:05:ac:14:70:84:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47f75cf36f2f95cdbb6f15d23336a117be9da298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:59:85:d4:4f:35:34:2e:9a:15:14:92:70:
29:17:ba:88:0b:05:e2:69:57:52:ae:a2:5b:4e:7e:
ba:a9:93:d8:d2:20:8b:bb:76:4e:f2:f6:76:82:e4:
3c:fa:df:92:05:76:2c:fa:8c:d7:52:67:87:bb:84:
75:7b:fb:c4:2a:35:f0:87:fb:4f:bf:d4:3d:8f:a6:
9e:02:4b:7b:fe:ca:43:1b:a2:a9:eb:b8:41:e3:53:
3c:b1:c3:85:7b:f6:be:b9:fc:7a:54:bf:20:b4:76:
10:52:1a:82:60:4d:c6:0b:bd:a4:ed:ad:c6:3a:98:
10:1b:0b:fd:7e:1f:f5:15:c7:bc:87:09:b0:42:f4:
3e:aa:00:8a:91:ca:b6:0d:e5:5d:2b:9d:e4:53:a5:
a0:83:69:15:96:5d:e8:07:c8:7d:03:2b:4f:34:fe:
e4:f1:21:ae:8b:a2:5a:e1:49:52:3b:68:7f:52:07:
8b:8a:67:cd:3f:d0:90:93:6b:69:31:3b:4f:a2:56:
2d:6a:9b:08:cb:8e:a8:36:97:ca:f1:24:50:c7:29:
f7:f1:bf:06:35:ad:e0:3c:52:56:57:43:a0:00:6b:
57:4a:3d:85:69:2c:29:cf:7a:ce:d6:a5:4f:af:7b:
5d:92:4c:8f:ab:de:0b:89:cb:67:05:de:33:21:2c:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F7:5C:F3:6F:2F:95:CD:BB:6F:15:D2:33:36:A1:17:BE:9D:A2:98
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/R_dc828vlc27bxXSMzahF76dopg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.7.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:8f:5b:7f:d0:40:4d:e0:82:08:9f:f6:56:99:d5:de:29:59:
0e:ce:bb:f6:00:ca:dc:7d:54:c1:9d:85:9d:36:09:2d:f9:a3:
f5:93:f7:25:46:f0:56:0b:37:ab:f3:4d:f4:d4:97:f5:0a:59:
cb:15:c4:91:27:19:b8:d8:d3:87:eb:3e:9f:2c:d1:17:27:ac:
1a:37:24:5e:39:9b:95:28:b9:2a:17:18:b3:79:e8:3b:28:e4:
23:00:3b:28:f4:c2:17:d9:92:f1:5f:00:dd:87:4f:c3:82:3d:
66:a9:da:94:89:df:77:61:de:80:f8:d1:45:83:c1:79:6d:08:
9e:0a:d7:bf:91:f7:61:87:e1:a9:58:d7:c5:28:09:4f:31:00:
b7:2c:2c:14:7c:c8:13:e9:62:c4:7a:d3:d0:cb:ae:0a:c2:9d:
7d:15:ad:12:b9:e4:07:10:a3:d0:01:cd:a1:1b:3b:77:fb:ad:
7e:c5:2b:1d:df:cd:70:d8:75:4f:b2:dc:db:10:b5:8c:2a:a0:
f1:7d:36:47:61:7c:7b:38:38:d4:28:0e:18:3e:92:86:39:5e:
86:a0:24:f2:3e:e6:c8:42:d9:27:0d:27:4d:d1:22:6b:87:6b:
ad:f2:95:cc:33:5d:12:20:52:d9:19:bb:08:f0:4b:3b:43:84:
ab:8d:8b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:52 2025 by rpki-client