Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7KQs2faMqH9V6e1--H9UKQxdZw8.roa
File: 7KQs2faMqH9V6e1--H9UKQxdZw8.roa (raw, json)
Hash identifier: oJbLf1La41ipej6LJsYo5wzpzk+z+qPbcDztySNZuoA=
Subject key identifier: EC:A4:2C:D9:F6:8C:A8:7F:55:E9:ED:7E:F8:7F:54:29:0C:5D:67:0F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D716A9F91B89DB945BAB4ECA379C63
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7KQs2faMqH9V6e1--H9UKQxdZw8.roa
Signing time: Wed 01 Jan 2025 21:48:06 +0000
ROA not before: Wed 01 Jan 2025 21:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198338
IP address blocks: 185.103.254.0/23 maxlen: 23
185.105.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:16:a9:f9:1b:89:db:94:5b:ab:4e:ca:37:9c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eca42cd9f68ca87f55e9ed7ef87f54290c5d670f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:81:8a:ec:ae:1b:58:5c:08:db:51:43:ec:
6e:e0:71:f9:67:2f:c5:ad:e6:82:90:f5:09:2f:f2:
15:04:58:56:97:46:85:c8:57:54:dc:54:77:c9:c3:
77:c3:84:12:77:9b:9e:f6:e8:1a:19:01:4b:ff:dc:
e3:bf:e7:b3:dd:5f:3a:45:4b:ef:94:a0:66:36:09:
68:25:ed:d1:81:31:b5:7a:9a:6c:d9:bf:8e:9c:87:
56:42:a7:76:e0:76:23:97:14:9a:d9:20:13:08:51:
d8:5a:39:34:93:b4:dc:9d:93:79:18:63:f4:ce:9b:
5f:5f:09:c4:af:52:c2:a9:61:40:1f:f5:0c:fc:1b:
c5:fb:76:dd:b8:b0:71:2c:a6:de:22:c9:91:4f:33:
a2:c0:bf:53:a2:35:92:fd:0f:07:c9:a5:29:68:28:
c2:1a:da:81:95:6c:92:90:4c:15:d8:22:7e:cb:a6:
5c:ce:37:af:ac:6b:4e:cc:c5:ae:b4:90:b9:2b:26:
c5:f9:f8:f3:8e:26:00:5e:38:ca:62:96:db:27:58:
e5:f2:14:b3:22:eb:15:77:2c:d5:32:36:b0:ff:5b:
11:22:a8:c0:73:83:46:a8:87:32:28:b1:45:35:2c:
9f:f9:3a:ed:37:6b:79:66:e0:ef:d5:13:9f:56:87:
d2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A4:2C:D9:F6:8C:A8:7F:55:E9:ED:7E:F8:7F:54:29:0C:5D:67:0F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/7KQs2faMqH9V6e1--H9UKQxdZw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.254.0/23
185.105.116.0/22
Signature Algorithm: sha256WithRSAEncryption
af:cc:76:e3:5b:97:0b:2f:c5:00:38:59:71:d1:52:cb:a7:c6:
9d:c5:36:d0:61:03:25:42:71:ce:5b:a4:aa:1f:91:57:23:62:
bc:b9:95:36:0c:eb:82:af:c6:80:0d:a1:e6:c5:f3:1e:cb:4e:
b4:db:f0:09:d1:b0:9a:d5:3c:8b:96:0d:dc:42:57:86:ff:b0:
9e:5e:03:46:8b:6b:57:58:15:38:36:7c:9b:6a:6a:6f:aa:50:
89:92:f4:64:de:7c:5a:a7:be:58:94:42:2f:8a:77:7c:ab:27:
ed:96:d8:a0:f0:42:94:6d:6c:2f:61:6c:cc:68:f7:2c:68:fc:
a9:c1:b2:7d:02:a7:3d:11:2a:75:01:2d:2d:e5:ff:68:20:f6:
2c:e7:73:39:d4:d4:b4:f6:cc:50:27:90:e8:92:aa:8f:7b:82:
b0:33:34:bc:9d:f2:68:21:47:39:2b:9d:07:b0:d8:b1:7e:4a:
6e:d6:11:24:88:ad:8e:13:cb:31:23:76:4a:ca:e5:09:a1:4d:
d7:23:17:a6:59:e2:57:de:34:29:02:3f:db:16:20:f4:a7:7f:
13:c7:c8:72:73:30:3b:3c:8b:05:88:cf:5f:c4:8f:5d:5e:a2:
6d:dd:e8:00:eb:bc:b2:5d:f1:4d:f4:f2:cb:7c:4b:6e:26:28:
f2:d9:74:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:35 2025 by rpki-client