Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa
File: 7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa (raw, json)
Hash identifier: 878HhGYlePO6JgY3PtW7VLOGBnrfdtyTWzeH4xsP4g8=
Subject key identifier: ED:91:06:D3:3F:CE:B2:A7:78:AB:D6:96:E0:65:FE:A7:29:C9:C1:5C
Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Certificate serial: 0194221F89BCA27BA95641589ED7ADBA07F6
Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204639
IP address blocks: 185.44.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:89:bc:a2:7b:a9:56:41:58:9e:d7:ad:ba:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed9106d33fceb2a778abd696e065fea729c9c15c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:78:f2:56:f5:30:bf:02:4d:4e:b4:7e:ab:32:
82:fc:4d:d6:3e:fa:78:9a:37:d8:27:83:fe:81:02:
2b:84:66:9f:f3:79:fb:72:36:2e:b4:24:65:91:6e:
4b:2c:09:bb:1c:35:5e:c7:b8:e1:5f:be:55:66:e7:
05:1c:0f:5d:41:24:6d:c2:13:63:02:41:9d:ee:84:
97:b7:42:dc:78:8f:80:56:c6:70:dd:73:a2:ee:13:
72:ff:b7:9a:cc:27:12:b9:34:e3:37:36:35:c0:0d:
54:c3:f4:86:d4:cb:bf:f6:7f:0d:21:09:9a:39:d2:
50:91:ca:ee:f1:39:0a:9a:8f:e7:f9:ea:b4:13:d1:
4c:3e:00:62:47:5d:47:84:1b:e5:a5:57:7c:0a:b8:
cc:02:65:7d:0d:a8:bf:69:05:6c:0e:80:47:90:e2:
cd:9c:4c:79:6d:f0:a6:fe:2f:62:ed:81:12:de:2a:
1c:3b:0b:80:18:14:0c:dd:46:8d:87:bc:33:d8:34:
c2:9b:57:2c:b3:af:a6:49:79:6e:4e:3d:bc:a3:d6:
d8:49:d1:eb:cd:b3:85:e1:b1:32:db:14:c4:f6:93:
2b:ec:53:66:d0:63:6a:7d:c2:2e:69:2d:05:0b:c7:
51:10:d4:c5:bd:e6:8b:95:cf:8b:2e:5a:b0:41:29:
77:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:91:06:D3:3F:CE:B2:A7:78:AB:D6:96:E0:65:FE:A7:29:C9:C1:5C
X509v3 Authority Key Identifier:
keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/7ZEG0z_Osqd4q9aW4GX-pynJwVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.118.0/24
Signature Algorithm: sha256WithRSAEncryption
03:0f:86:01:ed:7b:6f:56:23:ce:51:33:d8:32:a4:1c:db:ba:
9d:3e:fe:94:bb:ac:3e:d7:82:7d:e8:76:36:98:f7:ec:97:35:
a1:08:50:c4:a6:e7:3d:dd:dc:e4:65:6f:12:cc:ad:85:d9:21:
f7:41:80:b1:0d:a6:55:e5:fc:fa:12:5b:6d:02:72:e9:90:fb:
ea:ec:68:b6:74:1d:ac:2b:89:00:21:f7:3f:e8:95:84:68:28:
f8:98:f3:74:ad:b0:23:bf:b0:6e:e2:a1:bf:45:25:40:32:07:
db:bd:d5:b3:7d:9e:c6:f9:f4:73:23:e9:2a:35:13:11:4c:2d:
b5:cb:b5:23:8d:2e:89:12:39:36:b2:a3:a9:d4:15:2c:8a:ad:
f3:9b:be:aa:15:f1:b9:2f:8f:6c:6f:c5:93:26:f6:56:86:66:
d2:31:b2:d8:00:f8:70:ae:aa:a5:92:63:af:f1:db:52:85:66:
79:1b:34:41:b7:42:8e:16:af:ec:58:fb:28:fb:cc:44:61:a9:
4e:50:60:0f:c3:8a:0a:48:be:26:78:3d:88:55:1d:16:0c:34:
bd:b0:20:14:27:51:41:62:44:b4:63:c8:aa:f1:93:b2:6e:48:
7e:23:51:69:e1:00:7e:59:dc:7c:ef:81:55:02:64:f6:a6:02:
e3:21:74:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:48 2025 by rpki-client