Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/7lQ2n0U6OGHvZetlcAN_7gtqiXo.roa
File: 7lQ2n0U6OGHvZetlcAN_7gtqiXo.roa (raw, json)
Hash identifier: kbqkXt9hZ3uzC1xNTsFUvBpi7NV5H49kb9lWeOu1K7A=
Subject key identifier: EE:54:36:9F:45:3A:38:61:EF:65:EB:65:70:03:7F:EE:0B:6A:89:7A
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 084B37FE
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/7lQ2n0U6OGHvZetlcAN_7gtqiXo.roa
Signing time: Fri 01 Apr 2022 14:59:10 +0000
ROA not before: Fri 01 Apr 2022 14:59:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 178.254.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139147262 (0x84b37fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Apr 1 14:59:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee54369f453a3861ef65eb6570037fee0b6a897a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e7:ac:07:50:dd:9d:0e:74:59:de:9b:36:12:
1a:98:6d:4e:cd:b8:f7:ed:47:0c:2a:0f:7c:37:31:
c4:ca:25:fe:e6:6c:f7:f1:da:f3:17:88:b7:8d:a7:
38:ae:e4:34:12:4d:f8:70:db:ce:c0:bc:bd:a0:1b:
e5:e4:e2:18:06:8b:d1:6f:c9:f7:bf:2f:be:a2:64:
f8:d8:dc:35:b0:8e:44:05:0f:3a:df:59:58:62:7f:
36:da:a1:63:2b:61:1a:ee:92:f3:c9:02:a3:9a:5b:
14:59:0e:e1:59:c4:92:86:36:19:17:f8:f6:be:1c:
75:9d:ba:04:15:09:91:56:77:90:42:bf:38:b2:09:
1d:28:e4:af:4d:89:7d:79:cd:19:46:38:eb:95:f5:
d6:a6:be:a2:9d:17:d2:d5:ee:33:86:2d:1b:1e:9f:
c1:27:59:b5:06:66:7b:4c:87:4b:b5:4c:f4:71:80:
7e:67:f4:83:45:e7:ea:bb:21:ac:70:89:89:63:8d:
d8:18:6e:84:54:26:7f:6d:fa:2f:ca:6f:71:5f:17:
e8:fb:62:b4:4b:39:75:d4:6f:a6:7e:67:c6:fa:71:
43:9c:40:d8:d1:34:be:a4:d2:59:44:ec:3c:1c:0f:
80:53:0c:8d:bf:1c:b5:fd:d1:49:7e:e1:7f:85:fb:
e0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:54:36:9F:45:3A:38:61:EF:65:EB:65:70:03:7F:EE:0B:6A:89:7A
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/7lQ2n0U6OGHvZetlcAN_7gtqiXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.150.0/24
Signature Algorithm: sha256WithRSAEncryption
26:45:84:74:90:7d:03:39:81:59:99:ed:12:b4:e8:88:c7:ea:
86:c6:cb:66:9f:a7:5b:f9:2e:f1:cb:c2:79:f9:5a:49:87:11:
4a:3f:97:66:32:5e:56:fd:94:f9:9a:05:c3:50:f7:57:c5:58:
7a:f8:92:a6:70:43:00:9e:ee:c7:ca:52:d8:73:7e:5d:4c:6b:
b6:2d:32:e9:3d:ac:35:42:77:d4:7f:fa:a7:a7:d6:10:10:32:
8f:c0:92:d9:da:6a:f2:f3:8e:78:0e:e1:98:c5:ef:8f:70:47:
be:10:c8:c3:3e:f2:01:b3:c0:19:0d:13:b4:bf:bf:d0:84:0e:
0b:de:30:31:aa:b2:b4:11:2d:4e:3b:d7:d3:cb:ca:ae:8f:13:
89:0f:54:6c:14:61:46:b7:bb:c6:59:32:e2:14:a5:a0:ba:28:
d6:50:d9:18:ba:34:a0:ab:f9:54:5f:3c:38:a3:56:90:1f:97:
99:f3:db:a5:22:e4:9d:96:af:f9:2c:a6:3c:0e:d7:89:45:3d:
d8:7e:b1:6f:a8:1e:91:c4:8c:97:6c:3a:03:04:3d:23:cf:24:
ca:83:0e:2f:51:33:98:82:f2:4c:cb:89:ff:71:8b:a2:5e:4a:
b8:68:3d:4c:b2:43:45:74:9a:98:96:31:6a:66:a2:1a:39:51:
eb:c7:6f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:18 2025 by rpki-client