Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/7H80yAVL4R2QfCHsY7d1neAHwRc.roa
File: 7H80yAVL4R2QfCHsY7d1neAHwRc.roa (raw, json)
Hash identifier: CpyD2cHx4DtvY6d+1rHWrMEbiOladccjX6t3p/lpNsI=
Subject key identifier: EC:7F:34:C8:05:4B:E1:1D:90:7C:21:EC:63:B7:75:9D:E0:07:C1:17
Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa
Certificate serial: 019420D6457B7AE5BC08D9E94920D2A3DF2D
Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/7H80yAVL4R2QfCHsY7d1neAHwRc.roa
Signing time: Wed 01 Jan 2025 07:48:20 +0000
ROA not before: Wed 01 Jan 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39605
IP address blocks: 185.28.232.0/22 maxlen: 24
2a00:a320::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:45:7b:7a:e5:bc:08:d9:e9:49:20:d2:a3:df:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec7f34c8054be11d907c21ec63b7759de007c117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:52:1b:8d:aa:7c:7d:f6:ff:24:fb:3b:24:
72:29:2b:e5:64:4b:c6:f9:3b:99:68:17:40:6a:a7:
86:c8:cc:ce:b1:ed:e0:f1:7c:5f:ea:e4:ba:45:75:
0c:39:69:c1:4d:6b:cf:1e:19:b5:12:69:e0:32:7e:
d0:f0:58:38:1c:06:c1:3d:cc:a8:d3:b0:94:3a:c8:
32:95:ab:41:9a:78:60:72:a1:42:2e:bc:c0:4e:88:
b4:03:6e:66:ad:e9:76:b4:01:f5:64:0b:1c:bc:fd:
c2:79:99:bf:81:11:9a:4c:9a:f9:f0:20:9e:d3:99:
02:98:f2:c3:ca:bd:09:9f:10:f1:ea:57:cb:14:e3:
2a:64:82:19:8c:57:45:23:f4:99:10:32:73:14:92:
8b:3b:69:67:d9:40:f5:dd:d3:e8:46:61:23:92:07:
5b:d3:7e:f9:fa:e1:48:f6:d2:80:9e:19:eb:a1:e9:
7b:14:98:2b:ff:9c:ef:52:28:94:7d:f9:fd:f7:4e:
a4:40:fa:e1:8d:cf:ef:9d:08:b2:59:b5:d8:80:62:
05:4c:e1:6a:b8:79:0a:30:8b:7b:59:01:08:e9:cf:
a8:33:11:b5:80:91:83:31:87:b9:d1:9e:3f:30:ac:
b4:43:05:d7:04:84:de:03:a0:d1:2c:ce:e6:59:ec:
09:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7F:34:C8:05:4B:E1:1D:90:7C:21:EC:63:B7:75:9D:E0:07:C1:17
X509v3 Authority Key Identifier:
keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/7H80yAVL4R2QfCHsY7d1neAHwRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.232.0/22
IPv6:
2a00:a320::/32
Signature Algorithm: sha256WithRSAEncryption
7b:ed:52:b2:7c:de:fb:e6:3a:c4:28:51:b8:3f:fa:25:e6:ef:
4b:5d:95:cb:2a:34:f5:be:5b:fc:c1:37:34:8d:fb:23:55:aa:
75:4a:ee:c9:1b:9a:70:36:18:a9:14:0b:a6:58:1c:f0:04:45:
27:af:aa:f2:8d:d1:eb:f7:f3:36:89:1c:1f:de:ed:48:84:89:
cf:39:37:c8:ce:68:ee:0a:43:d7:e3:10:9f:f7:70:41:ef:09:
75:58:a4:db:9a:ca:31:86:aa:b1:d7:66:2c:d0:bd:c8:24:0e:
5b:47:77:dc:2b:60:a2:04:91:23:5c:34:19:f6:04:c1:ff:71:
6a:3b:9b:55:98:c6:d6:88:f8:c9:cd:1c:5c:82:50:ed:e5:60:
2a:6a:ce:6c:5c:bc:f0:5b:64:91:7f:d8:1d:fd:11:51:c6:89:
75:26:70:38:24:62:e9:4f:4a:2d:bf:2d:4c:5c:fe:60:89:fe:
08:e7:53:22:2f:35:32:2c:40:c7:6e:7a:71:16:ea:6b:0c:ce:
24:fc:a1:a3:ff:81:c2:86:aa:de:0d:38:55:5d:1d:dc:8b:e1:
e8:9e:2a:35:fa:12:3b:2c:e3:38:bb:c1:db:f2:2b:e3:1d:20:
d1:32:bf:2d:04:e3:2e:d4:37:9c:e5:51:54:9a:d3:2d:37:00:
7a:7f:21:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:24:58 2025 by rpki-client