Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/r7gX59Qqj2m8tkfxKOifStnrTtw.roa
File: r7gX59Qqj2m8tkfxKOifStnrTtw.roa (raw, json)
Hash identifier: NQ9wPPqnM3aQNBwThdDuKiLJ5LhU3Tk2rpFlfHyhTPI=
Subject key identifier: AF:B8:17:E7:D4:2A:8F:69:BC:B6:47:F1:28:E8:9F:4A:D9:EB:4E:DC
Certificate issuer: /CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Certificate serial: 01942143B0C64ABF301DF45A67827A877E7D
Authority key identifier: 9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/r7gX59Qqj2m8tkfxKOifStnrTtw.roa
Signing time: Wed 01 Jan 2025 09:47:51 +0000
ROA not before: Wed 01 Jan 2025 09:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6744
IP address blocks: 150.140.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b0:c6:4a:bf:30:1d:f4:5a:67:82:7a:87:7e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be0a611e0678b8d329ee550312b246e0dcf4698
Validity
Not Before: Jan 1 09:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afb817e7d42a8f69bcb647f128e89f4ad9eb4edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:db:31:a0:c9:ff:70:1f:2f:1b:63:3f:62:
1b:25:d3:01:13:09:b1:7d:7a:11:05:49:0f:f9:79:
5a:e4:c8:46:4c:47:7b:81:8b:57:54:08:25:02:cd:
27:2a:ae:b9:21:18:24:77:8e:77:3c:bc:33:09:df:
4a:e3:a5:28:fb:32:f8:f0:36:45:dc:5f:f3:28:7f:
55:d1:3c:ba:fb:25:e4:da:88:b9:48:ec:cf:12:db:
c6:83:a9:a6:51:7b:e0:0f:64:47:a9:72:a8:a2:98:
87:98:fb:ca:4a:15:67:7f:b2:b6:ea:2a:0a:ab:61:
aa:c6:a3:69:a4:6d:bc:5f:52:f0:ac:ed:c6:a7:00:
3c:60:22:2a:4a:c4:74:ce:fe:69:d0:aa:2b:0b:b3:
3d:ed:75:ae:a0:38:37:c2:0b:75:ef:32:e6:78:00:
22:c5:ac:ac:9b:44:e7:e9:ec:fb:45:e1:d4:87:cb:
1a:2e:3e:d2:45:32:be:fd:1a:67:eb:0f:a6:a7:ad:
5b:21:af:fd:7a:f9:f1:26:86:d5:cd:35:21:a2:5b:
e0:d8:d9:25:c5:86:fe:da:e5:0e:81:a2:6d:0d:4f:
a1:0b:b4:fa:cd:c6:9b:df:5e:35:28:be:32:bd:57:
44:57:f8:ac:c3:af:09:5b:f2:c0:45:26:9a:5f:7f:
c7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B8:17:E7:D4:2A:8F:69:BC:B6:47:F1:28:E8:9F:4A:D9:EB:4E:DC
X509v3 Authority Key Identifier:
keyid:9B:E0:A6:11:E0:67:8B:8D:32:9E:E5:50:31:2B:24:6E:0D:CF:46:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-CmEeBni40ynuVQMSskbg3PRpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/r7gX59Qqj2m8tkfxKOifStnrTtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/03f256-7401-4af4-97d0-ead1af8691ba/1/m-CmEeBni40ynuVQMSskbg3PRpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.140.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9b:21:1e:8f:fc:9f:74:79:34:9f:04:37:bc:35:56:86:17:5f:
62:f3:28:27:76:5b:d3:74:a7:59:6e:ce:c9:3d:8f:ea:7a:63:
cc:76:9d:6d:43:5b:d9:33:57:96:c8:a5:dc:e3:3c:eb:08:32:
80:48:ed:86:3a:aa:e9:d8:12:11:32:88:69:8d:94:48:96:d1:
70:a1:98:04:7e:2e:5d:be:72:77:24:1a:3f:26:c4:af:2f:19:
69:3b:55:70:83:2c:d5:0d:f8:5b:b8:81:a5:0c:69:6a:1a:39:
b5:58:9f:00:76:14:94:92:a9:13:60:b9:cf:c1:02:f8:c8:a0:
10:a5:46:b6:e3:fe:79:22:50:4c:a4:c5:15:4a:2f:f4:e7:56:
d1:ca:b4:09:21:33:01:fd:5a:53:34:d3:1f:e4:94:fa:fb:04:
70:ea:23:b6:8e:97:40:74:51:bc:5d:e0:c5:55:25:e2:7e:1d:
70:ba:35:aa:73:83:10:bf:6c:23:35:95:bc:f9:b8:2e:41:81:
31:7f:0a:e7:db:31:11:6b:e5:07:cc:b2:7c:61:e9:3f:10:d8:
ea:8b:96:ee:90:f5:3b:8c:ab:57:de:28:80:9c:08:19:25:69:
2b:03:69:da:32:43:7b:4a:44:61:f1:c8:6a:fa:5e:c8:c2:14:
ac:76:d3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:06:33 2025 by rpki-client