Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/T7lX2ekmUi7OsrdodcWMavc_4vc.roa
File: T7lX2ekmUi7OsrdodcWMavc_4vc.roa (raw, json)
Hash identifier: DCsx73v7MDeJbCqyarrMXWkA+xvEy2W1plhLsMBJoCs=
Subject key identifier: 4F:B9:57:D9:E9:26:52:2E:CE:B2:B7:68:75:C5:8C:6A:F7:3F:E2:F7
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F0D137C9D530B0DB3AB09B5D1B64F
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/T7lX2ekmUi7OsrdodcWMavc_4vc.roa
Signing time: Thu 02 Jan 2025 05:48:39 +0000
ROA not before: Thu 02 Jan 2025 05:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210746
IP address blocks: 85.187.45.0/24 maxlen: 24
151.237.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0d:13:7c:9d:53:0b:0d:b3:ab:09:b5:d1:b6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fb957d9e926522eceb2b76875c58c6af73fe2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:ae:0e:39:72:b9:0d:b8:ba:a1:ef:60:67:
44:b4:32:b6:4f:fd:1f:f4:7a:8a:45:f1:c0:ec:e7:
97:cc:67:2d:59:1f:3b:eb:92:1b:a4:29:6e:47:a9:
3d:54:af:fa:80:ec:db:59:0a:19:0c:e1:60:b4:c9:
4c:fb:0c:6f:41:63:22:cc:32:37:56:fb:e4:8b:39:
f6:ea:a5:53:2e:46:b4:4f:5b:07:ea:ed:b9:58:9f:
d9:ab:e6:07:b5:61:9c:47:80:50:48:28:3c:95:be:
ab:76:e2:7e:2b:20:33:79:ce:2a:a1:23:39:10:d2:
04:39:b6:18:3c:34:0e:d9:aa:3d:fe:f2:0a:53:27:
d2:5e:ce:13:b2:9c:3d:0d:9e:f9:77:64:14:11:fa:
4b:d4:16:34:f3:23:7e:53:88:06:cd:02:fa:1a:5d:
76:93:c1:4c:44:ab:62:09:c3:7b:10:61:7c:96:5b:
5f:ff:79:88:65:d0:c4:66:f6:27:b1:9d:a1:1d:2f:
1a:34:fd:fe:86:8b:97:55:9b:2b:e4:bf:1f:c0:2d:
e9:a0:0f:69:c4:34:cb:3c:0a:3e:f5:57:c7:f1:c9:
45:4c:87:6d:c4:a1:6b:4a:5e:26:63:fb:8e:0e:53:
32:bc:f7:0d:18:f2:1f:2c:49:70:56:5e:84:c1:92:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B9:57:D9:E9:26:52:2E:CE:B2:B7:68:75:C5:8C:6A:F7:3F:E2:F7
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/T7lX2ekmUi7OsrdodcWMavc_4vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.45.0/24
151.237.23.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:46:f9:57:7c:34:b1:41:f9:e3:ad:16:c7:1e:fc:e4:39:40:
0b:70:a0:ca:a6:c0:61:89:38:29:28:c0:cf:4c:d9:33:4b:3e:
b2:51:2b:43:36:9d:2b:b3:42:c8:9c:a0:cc:b0:3d:f7:53:6d:
5e:1f:12:15:f6:26:7c:34:e4:38:9f:31:a4:89:02:f6:cd:9f:
b7:a4:32:49:de:98:4a:c8:76:3c:a8:43:37:be:3d:5c:16:28:
f0:c9:25:5b:3f:98:16:61:02:5a:9b:d2:4a:bf:05:a6:30:43:
c6:e2:1e:1f:05:55:ec:83:23:9e:d7:09:76:90:4b:e0:9d:80:
5e:87:b4:dd:e7:0e:9b:0b:d3:b1:4d:f5:94:d4:e5:70:52:4d:
cf:72:72:74:b8:5d:6e:88:13:80:86:bc:88:6b:f4:7c:4a:a9:
3d:51:ec:ed:96:be:ae:e8:de:46:ab:8b:e8:f6:25:6c:e3:4b:
48:5b:f9:44:65:50:6c:7f:0c:4f:04:6c:3d:92:cc:cc:ee:b2:
8e:e8:f0:81:d6:d7:b7:46:27:30:2c:0e:e2:e5:6b:42:d6:50:
ca:b1:08:2c:e2:f1:6d:14:87:67:4f:65:6f:68:4d:bc:02:73:
e6:f5:43:c0:0b:f8:07:5e:16:74:40:b7:d9:2b:b7:83:13:2c:
df:34:3a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:03:46 2025 by rpki-client