Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa
File: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (raw, json)
Hash identifier: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=
Subject key identifier: EC:CB:7B:71:10:64:18:D2:B9:AF:00:C6:E7:94:DB:31:51:30:83:E2
Certificate issuer: /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial: 0194236A3C9296BBF1EC7DC3584A01AC1B01
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa
Signing time: Wed 01 Jan 2025 19:49:12 +0000
ROA not before: Wed 01 Jan 2025 19:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44066
IP address blocks: 188.92.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3c:92:96:bb:f1:ec:7d:c3:58:4a:01:ac:1b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eccb7b71106418d2b9af00c6e794db31513083e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:5e:a5:9d:a1:e8:c7:28:a7:77:f3:d7:b3:
f9:1e:be:2c:54:dc:a9:e1:bb:ab:8e:ed:18:86:1b:
c3:4e:d3:20:2f:ac:40:b7:7e:10:20:13:d2:78:24:
5e:c1:4c:5d:bf:d3:9f:00:1e:2b:1d:8e:b8:8d:d1:
e9:2e:89:1f:cf:c0:65:af:c5:7c:41:6c:22:67:3d:
41:74:34:dc:26:57:2c:ae:33:e8:a4:35:8a:a7:b4:
9b:17:2b:a7:a3:09:26:af:3d:c2:95:4f:65:1b:a3:
12:64:4c:4e:b5:0b:5a:a8:4d:58:ff:e8:b2:1c:5d:
42:dc:1a:c2:02:95:e0:dc:b8:6e:38:77:bc:5d:d5:
a5:76:f6:21:12:54:c7:8b:fc:31:51:1f:cd:88:b4:
5b:f5:51:f9:fc:e1:8a:4f:a9:78:e8:e8:f2:d5:47:
a2:6d:d3:91:87:e7:df:0d:56:e5:6d:3c:d9:d2:12:
9d:66:79:91:91:c1:de:b0:7d:97:71:e3:fc:3c:a1:
2f:4e:c4:a3:ad:51:ba:05:dc:63:aa:63:e7:7a:a0:
b2:ee:d9:dc:e2:29:ba:5d:12:53:14:3f:b4:9e:42:
9e:22:98:76:f4:d9:b7:55:ba:4e:b4:8e:a6:70:67:
82:b9:e9:9d:2f:57:b2:2e:d6:15:e4:d1:e2:86:83:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CB:7B:71:10:64:18:D2:B9:AF:00:C6:E7:94:DB:31:51:30:83:E2
X509v3 Authority Key Identifier:
keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:5d:97:4a:a5:15:c9:82:88:2e:5e:32:e2:d9:61:04:9e:15:
43:e7:6d:26:be:a6:3e:eb:b4:06:0e:3d:d0:dc:78:cf:6c:b6:
60:99:3e:16:47:af:13:6a:f0:5e:35:03:1c:b1:c3:9b:00:04:
d6:75:8f:76:1b:1f:ea:95:91:e9:e8:b5:2c:53:94:29:bf:af:
65:fd:ac:9d:fd:12:40:42:54:f3:78:78:c9:2e:8f:ca:21:4f:
ab:78:ea:a0:d3:0b:b2:6c:fd:1e:15:4b:48:a5:fb:06:00:fc:
28:8d:bf:a8:bf:dd:bf:80:f8:78:cb:2b:c7:9a:69:7c:c2:ba:
fd:fd:39:eb:9f:76:f0:c0:fb:2d:a5:f3:64:20:cb:27:23:6f:
62:4b:20:a9:c0:b9:4d:87:72:be:8b:f7:f5:c1:24:38:5f:d7:
83:03:76:d8:ca:a6:71:3c:9b:d8:09:3e:2d:4b:71:fc:5c:02:
f5:a9:49:eb:6b:15:63:af:6a:d4:ac:4d:32:3c:0e:1b:dd:d3:
b5:f4:da:67:1c:78:11:14:df:e7:34:78:77:f7:fd:52:6a:0e:
e3:a3:d4:a6:f1:99:d6:b8:2c:bf:89:49:7f:f4:f3:1f:07:24:
3f:0b:37:59:77:8c:cd:b9:4d:fe:fa:98:9d:1f:df:b4:f4:31:
2f:9b:07:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:42 2025 by rpki-client