Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/f7BcJOtUx2H5XnAxpu4WpSnjCAI.roa
File: f7BcJOtUx2H5XnAxpu4WpSnjCAI.roa (raw, json)
Hash identifier: 9SL4f9jMfOWwlCBl+VUeiilLS/R5fzgRJ1E6zPwrJ8E=
Subject key identifier: 7F:B0:5C:24:EB:54:C7:61:F9:5E:70:31:A6:EE:16:A5:29:E3:08:02
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427486197C66DFD8AA38D92A6B7638114
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/f7BcJOtUx2H5XnAxpu4WpSnjCAI.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53745
IP address blocks: 193.235.66.0/24 maxlen: 24
194.14.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:61:97:c6:6d:fd:8a:a3:8d:92:a6:b7:63:81:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fb05c24eb54c761f95e7031a6ee16a529e30802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3a:35:1a:58:04:ec:7a:83:65:3d:af:ae:03:
d0:73:bf:59:2c:0d:7c:d8:11:83:0a:c0:a7:24:7c:
d8:11:e4:d8:72:d0:9d:21:aa:bf:c1:1f:73:61:f3:
59:07:53:ed:76:90:b7:70:56:e5:86:f8:d6:b2:b2:
e8:9a:53:00:cd:f8:3f:c1:e9:07:06:c9:4f:8e:24:
7b:e7:e9:29:1a:3d:eb:0d:e7:8e:3c:0b:92:76:a3:
e7:f5:57:74:6b:02:65:17:7c:a8:15:79:1d:92:89:
23:56:96:76:19:69:80:68:c9:d2:b7:dc:85:59:c4:
f0:27:b5:4e:33:72:f7:0f:fc:23:08:b7:34:ac:ad:
ff:69:62:55:a1:da:6f:34:7c:53:54:01:a2:23:54:
e7:12:8b:68:f2:32:fb:eb:a3:b8:ef:88:b4:29:ab:
11:6e:18:bb:3f:e6:7e:b8:bd:92:92:d3:da:95:41:
fe:20:26:46:48:f5:02:5d:5c:0e:28:a1:0a:9e:3f:
68:49:b4:55:5b:4b:a0:f5:7b:9a:98:e5:8c:26:44:
61:d3:3d:95:51:ae:40:a0:9c:7f:b6:91:1b:7b:39:
46:85:71:5c:bc:32:e8:6a:0b:7b:b2:16:18:63:04:
31:cb:35:69:e0:5b:6b:b9:ee:7f:06:df:86:44:a8:
48:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B0:5C:24:EB:54:C7:61:F9:5E:70:31:A6:EE:16:A5:29:E3:08:02
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/f7BcJOtUx2H5XnAxpu4WpSnjCAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.66.0/24
194.14.248.0/24
Signature Algorithm: sha256WithRSAEncryption
36:64:0e:7a:fc:c0:bf:0d:d9:7e:80:7d:15:23:51:5d:b9:96:
09:ca:98:0f:af:ef:83:3b:8d:90:46:4b:5c:e9:1b:9c:44:e7:
db:d1:4c:a3:6b:43:36:31:38:54:29:3d:78:1a:4f:d0:96:bc:
96:37:be:aa:e8:67:83:93:3d:08:5a:ec:32:8c:78:75:70:38:
80:45:56:80:2c:c6:8c:4b:5c:4e:d7:7b:8a:8e:fd:dd:05:22:
28:d7:4a:d2:96:4d:d1:42:8e:5e:24:fc:22:e7:6f:c9:79:b2:
a4:65:11:ba:d2:a3:b7:a4:fb:5f:c3:e3:a1:81:eb:f0:99:2e:
17:0d:bd:fd:98:65:b2:15:bf:61:c3:37:48:42:d1:4d:18:c5:
be:bf:48:5d:36:0f:d1:16:85:a6:4f:af:a0:9c:2e:65:91:cc:
94:b6:c6:c7:2d:13:bc:21:b0:74:ab:4d:b6:79:c4:a9:e5:2a:
d9:ec:0b:b3:4f:23:ef:11:45:5c:27:99:88:82:73:9c:6e:9b:
bc:ff:54:43:b4:37:6b:b6:a9:9f:47:d9:90:e1:90:63:a3:12:
c6:06:d9:96:01:02:93:10:81:95:50:0d:16:77:99:4f:d5:26:
65:34:94:78:23:3b:8c:0d:4c:1a:49:21:17:eb:1a:63:43:f5:
14:aa:f1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:03 2025 by rpki-client