Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/7MVokHTUjOR_Ula_qOVzOSXNEdU.roa
File: 7MVokHTUjOR_Ula_qOVzOSXNEdU.roa (raw, json)
Hash identifier: iVCuhBUobzj667bcusQ2j4zXO5PCfzjmGuh6mK8Lkeo=
Subject key identifier: EC:C5:68:90:74:D4:8C:E4:7F:52:56:BF:A8:E5:73:39:25:CD:11:D5
Certificate issuer: /CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Certificate serial: 019420D60C2E09E3DE75D2A8F079916DFCB4
Authority key identifier: 44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/7MVokHTUjOR_Ula_qOVzOSXNEdU.roa
Signing time: Wed 01 Jan 2025 07:48:06 +0000
ROA not before: Wed 01 Jan 2025 07:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206898
IP address blocks: 185.83.215.0/24 maxlen: 24
2a05:9f06::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:0c:2e:09:e3:de:75:d2:a8:f0:79:91:6d:fc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44007172df9fc2d4a2ddbba934cebc9f0286d3ca
Validity
Not Before: Jan 1 07:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecc5689074d48ce47f5256bfa8e5733925cd11d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:c1:b1:76:43:b3:13:e4:a5:c5:46:49:a8:
47:06:83:03:4d:41:7d:0b:89:d5:db:3d:0b:bc:95:
90:da:6c:79:b8:9d:93:3c:a4:58:e8:6d:7a:e6:74:
48:67:d6:27:64:ef:31:49:35:9b:8d:06:a4:57:a4:
5b:05:59:be:a6:c8:54:33:40:19:13:a5:cf:42:4a:
d6:02:c5:49:ab:dc:51:0f:e3:86:14:18:f0:09:26:
e0:02:99:45:50:83:03:f8:30:01:d7:8d:f3:33:fe:
43:f4:a7:ec:99:ef:18:d0:91:2a:c5:85:7c:22:f8:
d5:3b:5a:a0:28:22:31:b0:3b:a3:e0:92:ce:4f:42:
8b:83:63:15:03:f8:97:6c:7a:83:6b:6d:68:c6:63:
f0:0e:32:83:86:0b:a0:06:9a:7c:21:26:cb:c3:66:
8f:ff:8f:f8:f4:fb:83:f3:7f:a5:ea:a9:46:18:e5:
ad:83:f7:e3:d3:54:c3:19:6c:12:30:97:5d:2d:9c:
89:dc:4b:d9:44:47:04:06:bf:10:93:52:62:f6:8e:
41:eb:db:e3:e3:b9:8e:a7:d8:6c:23:1b:58:d1:54:
a4:d0:9d:35:ea:cc:17:ac:9d:39:b4:45:87:20:84:
13:dd:30:1f:6d:0c:0a:06:d0:6d:08:17:33:7f:6e:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:68:90:74:D4:8C:E4:7F:52:56:BF:A8:E5:73:39:25:CD:11:D5
X509v3 Authority Key Identifier:
keyid:44:00:71:72:DF:9F:C2:D4:A2:DD:BB:A9:34:CE:BC:9F:02:86:D3:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RABxct-fwtSi3bupNM68nwKG08o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/7MVokHTUjOR_Ula_qOVzOSXNEdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/945dbd-2fb7-4dd1-96a6-0585de4d4ee7/1/RABxct-fwtSi3bupNM68nwKG08o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.215.0/24
IPv6:
2a05:9f06::/31
Signature Algorithm: sha256WithRSAEncryption
57:b9:a9:1d:30:40:9a:b6:39:2b:d6:b4:b0:f0:24:cf:0f:09:
2a:a4:42:a6:fc:d0:b0:cd:31:9b:f0:38:80:d7:dd:c4:93:fd:
40:7e:0a:b6:93:51:d9:27:c7:be:e8:cc:e5:aa:de:c3:5b:4a:
54:0d:50:3e:71:cb:48:aa:c0:e5:f7:80:10:20:bb:dd:75:15:
49:30:f7:cb:57:02:3f:27:ae:83:03:1c:96:6b:33:d1:ec:da:
4b:5f:f6:f2:3b:7c:f5:99:d5:97:77:81:30:68:f7:2c:99:8f:
ae:05:95:40:94:4b:88:05:da:43:57:1a:d8:13:93:c7:c3:ca:
c4:22:bb:a5:47:63:3f:3e:a5:d9:9c:4f:e1:44:ff:23:f1:f9:
04:ba:d6:43:aa:09:4a:33:c2:ca:49:9e:9b:77:79:67:20:3d:
ee:4a:94:9d:11:e2:fe:ce:51:10:78:3c:32:67:c7:b0:74:52:
46:d7:99:64:b3:e9:0f:42:ec:2e:88:45:66:c7:a3:3f:34:13:
5e:78:6a:ae:7c:d2:d0:7c:dc:31:c6:df:bf:47:d8:55:b5:82:
47:80:79:20:df:34:ab:c6:5e:60:ef:ea:54:9e:72:5f:08:b4:
62:f6:7b:73:8c:c9:9c:c8:a4:68:8f:4c:b8:54:ac:d1:05:15:
10:c4:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:58 2025 by rpki-client