Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/ISP7AwV7T2uPChZASc5YrPiTlkk.roa
File: ISP7AwV7T2uPChZASc5YrPiTlkk.roa (raw, json)
Hash identifier: oFTsPiIdNPqfQz+HEt0vWKZqmx2ZRwTaVu/Xdt0P09Q=
Subject key identifier: 21:23:FB:03:05:7B:4F:6B:8F:0A:16:40:49:CE:58:AC:F8:93:96:49
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 0194266C03DCA9B3AF2E8A2C75E8A5BBEC6D
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/ISP7AwV7T2uPChZASc5YrPiTlkk.roa
Signing time: Thu 02 Jan 2025 09:50:00 +0000
ROA not before: Thu 02 Jan 2025 09:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62651
IP address blocks: 176.67.82.0/24 maxlen: 24
176.67.85.0/24 maxlen: 24
176.67.86.0/24 maxlen: 24
176.67.87.0/24 maxlen: 24
185.91.120.0/23 maxlen: 23
2a05:e9c0:1000::/40 maxlen: 40
2a05:e9c0:1400::/40 maxlen: 40
2a05:e9c0:1800::/40 maxlen: 40
2a05:e9c0:3800::/40 maxlen: 40
2a05:e9c0:4400::/40 maxlen: 40
2a05:e9c0:5000::/40 maxlen: 40
2a05:e9c0:6800::/40 maxlen: 40
2a05:e9c0:7400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:03:dc:a9:b3:af:2e:8a:2c:75:e8:a5:bb:ec:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Jan 2 09:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2123fb03057b4f6b8f0a164049ce58acf8939649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c8:40:2b:e0:1f:78:47:74:54:b4:ec:8a:3b:
9e:0e:6c:ca:00:1e:d5:03:94:8d:9a:f2:20:ef:b5:
a4:45:1a:42:e1:ee:57:b4:43:03:2a:c6:c2:bd:22:
d3:c3:b2:ec:81:32:23:c5:89:5f:1e:41:7b:a1:15:
15:fb:4c:37:8d:93:22:aa:66:0e:33:e5:b0:1d:d1:
42:d9:d2:f2:36:af:8b:a0:f3:a4:15:a4:9f:74:53:
5a:6e:08:13:6e:57:39:de:be:f1:b7:79:f4:23:25:
f7:f1:17:d2:29:d6:7c:b5:21:09:60:7f:e9:28:d4:
39:49:49:c6:2d:f1:7b:3f:5c:b7:95:b1:28:a2:e9:
44:5f:2c:95:a9:6d:f6:e8:eb:99:39:a4:b6:5f:0e:
bc:a9:c3:17:75:25:3f:84:3c:d8:d5:8d:a1:a3:72:
84:75:ff:93:ae:08:43:02:68:a1:71:cc:36:1d:41:
60:de:c3:d2:dd:26:f0:b2:58:c5:13:62:f0:d7:81:
4a:01:1c:9b:93:f6:6e:b7:ec:74:26:a7:44:eb:3c:
9b:12:be:82:58:cf:98:82:5e:04:fc:25:17:74:0a:
db:bd:24:3f:cf:24:1d:6a:1a:88:08:40:f5:d2:2d:
7f:7e:d0:1d:c1:d8:26:d2:fe:d5:ac:a2:a3:c9:0f:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:23:FB:03:05:7B:4F:6B:8F:0A:16:40:49:CE:58:AC:F8:93:96:49
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/ISP7AwV7T2uPChZASc5YrPiTlkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.82.0/24
176.67.85.0-176.67.87.255
185.91.120.0/23
IPv6:
2a05:e9c0:1000::/40
2a05:e9c0:1400::/40
2a05:e9c0:1800::/40
2a05:e9c0:3800::/40
2a05:e9c0:4400::/40
2a05:e9c0:5000::/40
2a05:e9c0:6800::/40
2a05:e9c0:7400::/40
Signature Algorithm: sha256WithRSAEncryption
93:1f:ae:65:ea:c7:3c:3a:ee:17:44:2c:99:0f:e9:cc:06:75:
51:c5:de:7a:57:97:ee:96:d1:4e:9d:0a:43:73:a5:01:76:9d:
ed:b4:6b:aa:d4:95:c0:a8:aa:2c:32:1b:1d:f8:8d:cb:e6:73:
fa:fa:62:31:b2:69:96:71:e4:26:4b:5d:d1:be:1a:db:a1:c3:
e7:f4:b1:3a:9a:0c:da:ae:56:78:d4:83:23:db:ea:28:94:f2:
05:db:99:bd:a3:36:7b:c8:0c:5d:8b:0a:2b:15:57:4b:13:a5:
8c:04:38:2f:eb:49:a4:06:41:24:7b:47:f0:d8:d8:6a:8d:a4:
26:15:dc:bb:eb:e3:1c:14:18:20:03:95:b3:74:48:e0:29:56:
7e:84:cf:72:71:05:7b:f7:61:15:47:58:33:20:b6:a4:38:22:
5b:d1:ab:93:99:85:bc:1a:a3:43:0e:2a:e7:f7:02:19:42:86:
9e:db:3f:33:99:c7:e3:94:20:e0:2e:cc:e1:47:3e:ab:06:08:
a8:6a:98:c7:6b:85:25:3f:23:d7:ce:79:62:0a:03:e9:60:39:
1f:f9:8e:68:59:5d:4e:4b:36:ca:4e:57:39:84:1b:99:e6:55:
1a:e1:2e:38:30:e0:59:83:c3:a5:0e:6e:42:43:df:b8:2c:e2:
12:4d:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:55 2025 by rpki-client