Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/7_8LSE-o1Yz1FBhncDVnl7MwSy0.roa
File: 7_8LSE-o1Yz1FBhncDVnl7MwSy0.roa (raw, json)
Hash identifier: xkoHl6S9+n8EwfXWvptcFhgNKS1mKnJKPD36usEJovc=
Subject key identifier: EF:FF:0B:48:4F:A8:D5:8C:F5:14:18:67:70:35:67:97:B3:30:4B:2D
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 02CD812E
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/7_8LSE-o1Yz1FBhncDVnl7MwSy0.roa
Signing time: Sat 01 Jan 2022 13:02:34 +0000
ROA not before: Sat 01 Jan 2022 13:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64411
IP address blocks: 158.172.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47022382 (0x2cd812e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 1 13:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efff0b484fa8d58cf514186770356797b3304b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:a7:bd:a8:e2:dd:3b:de:f6:68:4c:98:90:
62:a4:e6:e4:a4:13:63:e5:f6:53:21:0a:5e:4f:be:
9a:93:d3:1e:bf:3d:30:ca:6f:23:4f:9b:6a:91:f2:
4a:28:c2:51:08:51:a9:75:26:72:c1:e6:3f:d4:b8:
8d:10:21:b5:3d:51:be:f6:16:70:c0:0d:4f:a7:b1:
e9:a6:91:2a:56:81:81:29:ce:9f:78:d7:d6:02:67:
fa:62:a3:e3:ad:22:8d:73:a6:84:87:3c:91:a8:8c:
e0:82:3a:4c:fa:f0:a9:13:ab:8a:07:9d:3e:21:59:
30:3b:d1:3a:33:e5:63:28:be:e2:a1:00:66:c6:d3:
43:e9:f9:f0:17:5a:ef:4e:25:f2:9b:6d:42:a7:ff:
4a:09:87:81:b5:4f:53:4d:97:0a:c8:f9:65:0c:cd:
3d:b0:4e:db:ff:5b:89:4c:19:03:79:2f:e8:22:d9:
38:0a:8c:0a:b6:74:d5:f6:37:6d:70:c0:c7:7f:bd:
d5:6c:a2:70:37:a6:d9:92:2d:75:ef:d0:17:72:66:
83:f6:65:98:06:3e:e0:fe:40:83:2a:90:90:7c:d9:
b7:05:68:cf:9e:e9:a8:7b:e3:ea:c1:27:93:06:3c:
51:0a:0e:10:c2:40:1f:86:15:29:0e:d8:5e:a8:a3:
3a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FF:0B:48:4F:A8:D5:8C:F5:14:18:67:70:35:67:97:B3:30:4B:2D
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/7_8LSE-o1Yz1FBhncDVnl7MwSy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.0.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:84:c2:54:6d:c3:eb:01:3e:e9:2b:34:04:32:db:ff:13:7a:
73:c7:bd:40:db:5d:b2:e0:8d:01:77:25:55:56:b0:cf:26:01:
05:f5:60:e0:de:a6:43:2f:e8:6e:d5:9f:a6:9f:7c:49:7a:83:
80:e0:9a:64:6e:4e:f0:5c:85:cb:f3:67:7a:2b:b6:eb:dd:fc:
a1:aa:e1:fa:dd:da:a6:be:43:7e:4d:b3:8f:4c:2b:b9:50:ae:
23:78:07:fc:17:a9:25:94:77:10:bc:ad:62:78:60:f9:a0:49:
27:bd:aa:75:65:2d:ef:3a:98:95:6b:2a:a6:d0:4f:04:a7:42:
ca:77:b2:b7:5b:cf:45:b3:13:32:46:7f:5d:77:dd:91:76:98:
d1:2f:9e:3c:a2:0d:9d:b4:5f:21:d9:85:20:74:da:7f:b1:df:
86:bf:c0:0f:6d:28:b9:d7:3f:c6:e1:bd:30:30:e0:40:14:96:
2a:59:0a:29:df:82:fc:02:78:2d:4b:0e:9a:58:2e:68:d0:e1:
e2:b1:4e:6f:10:4b:68:92:bd:10:84:52:96:4e:bb:f9:de:8e:
54:39:1f:65:ca:2c:aa:d3:4d:83:d7:5c:28:54:e8:00:e7:3e:
16:65:a9:3d:11:91:e5:38:fe:ef:a5:6a:c1:1a:5b:c9:30:7d:
3b:88:00:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:21 2025 by rpki-client