Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/7cV8_TKZwb0T4ROpJOeeQXBT9CY.roa
File: 7cV8_TKZwb0T4ROpJOeeQXBT9CY.roa (raw, json)
Hash identifier: Z9Y7gbafc/QJM7EL8JhsgU6MKZ67KIHyHcE8y8qHxN4=
Subject key identifier: ED:C5:7C:FD:32:99:C1:BD:13:E1:13:A9:24:E7:9E:41:70:53:F4:26
Certificate issuer: /CN=7b70bd98ee21138dd2436440f53cfa10160ee073
Certificate serial: 01857169E253B5F6A9BDFCE1D8CFF0C3FC79
Authority key identifier: 7B:70:BD:98:EE:21:13:8D:D2:43:64:40:F5:3C:FA:10:16:0E:E0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/7cV8_TKZwb0T4ROpJOeeQXBT9CY.roa
Signing time: Mon 02 Jan 2023 07:37:22 +0000
ROA not before: Mon 02 Jan 2023 07:37:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25145
IP address blocks: 193.163.88.0/24 maxlen: 24
2a11:1ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:e2:53:b5:f6:a9:bd:fc:e1:d8:cf:f0:c3:fc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b70bd98ee21138dd2436440f53cfa10160ee073
Validity
Not Before: Jan 2 07:37:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edc57cfd3299c1bd13e113a924e79e417053f426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:8a:87:bc:47:68:ea:cf:93:ab:4b:9c:49:
b8:a7:ff:98:8a:57:31:9c:73:8a:b3:57:a0:21:ba:
8b:38:4e:68:12:2e:a3:0f:8e:b7:1e:aa:e6:55:2d:
2b:04:e1:fa:c4:c8:d3:d3:f6:97:f9:ac:c5:cb:f1:
95:77:85:65:6f:58:47:7b:31:6a:06:4c:b5:ad:43:
32:b9:68:7f:ae:2d:96:65:06:20:22:2b:c7:cc:db:
56:ed:3b:05:d4:b2:09:a9:29:d6:cc:a4:26:1e:bb:
8b:2d:24:f6:ad:f5:7f:54:31:d5:38:d2:7b:8c:14:
6b:21:a2:80:2d:e3:ca:45:0d:e5:9a:fe:0d:09:95:
05:19:b7:05:38:75:00:a6:ba:67:3c:68:f5:12:b5:
15:7e:a6:f4:ce:70:69:b4:7b:db:ea:3d:32:17:59:
ef:b3:84:d5:cc:72:de:e5:c7:de:3e:9f:4b:81:c6:
90:ff:cc:5d:a1:39:aa:c1:11:c9:11:ca:16:92:42:
c6:d5:61:1b:a6:ab:7b:20:5a:d2:b5:d2:a9:d4:9f:
a0:8f:b1:43:d9:cb:a9:54:96:fb:ae:33:bb:c6:d8:
e3:75:29:23:86:01:67:b0:05:fb:ec:d0:0a:70:fb:
96:d8:b4:e1:60:67:95:6b:c5:a6:3f:e8:cf:b1:a1:
1c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C5:7C:FD:32:99:C1:BD:13:E1:13:A9:24:E7:9E:41:70:53:F4:26
X509v3 Authority Key Identifier:
keyid:7B:70:BD:98:EE:21:13:8D:D2:43:64:40:F5:3C:FA:10:16:0E:E0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/7cV8_TKZwb0T4ROpJOeeQXBT9CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f5a3aa-65b0-4c10-9725-7bc0309975ed/1/e3C9mO4hE43SQ2RA9Tz6EBYO4HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.88.0/24
IPv6:
2a11:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
13:eb:e9:87:61:06:be:7e:9c:64:68:e9:bd:ab:fe:79:2d:69:
c5:23:6f:8f:76:e6:da:51:b4:7d:e4:24:5e:3f:14:1e:b2:fa:
73:03:05:67:e8:54:60:d7:4f:1b:58:67:91:86:2d:2c:35:6e:
05:3b:61:c9:ca:f1:ea:e1:98:11:cf:42:c4:0a:18:05:10:d2:
57:4e:c6:99:59:05:0f:b6:5a:87:f0:85:b8:f1:52:e1:1c:5d:
4f:d3:ab:6a:b7:f3:fe:d8:54:c9:a4:c0:80:3b:56:31:ea:a2:
8c:65:81:5d:07:27:3b:25:96:41:bd:ce:20:47:d5:44:70:69:
ea:01:fc:92:de:44:0f:2f:23:77:49:4b:42:32:80:8e:b4:66:
67:be:a0:3f:02:83:a1:3e:d7:9b:8e:05:ff:61:2c:f1:3a:df:
4a:89:59:1a:65:00:d7:7a:e7:da:e5:9e:bc:00:48:94:02:85:
7e:77:4c:09:d0:66:6e:f2:99:79:f3:93:89:7e:44:07:8f:57:
45:f4:a5:f8:91:62:68:d9:b3:be:91:c8:9e:5f:d5:a6:d3:34:
28:03:1a:58:ee:f5:a9:25:96:3c:af:11:69:03:dc:a8:10:d3:
70:07:4d:47:a4:e0:c7:bc:3b:b3:ad:dd:02:b2:5c:21:ee:9d:
77:ff:62:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:53:09 2025 by rpki-client