Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa
File: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (raw, json)
Hash identifier: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=
Subject key identifier: EE:FB:FC:05:5A:1B:FD:93:BB:C5:90:45:53:12:C4:C2:21:D1:AA:C2
Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial: 0194228DBBF0C4B5E9F74936C1E95B930E8F
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa
Signing time: Wed 01 Jan 2025 15:48:21 +0000
ROA not before: Wed 01 Jan 2025 15:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 93.191.217.0/24 maxlen: 24
93.191.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:bb:f0:c4:b5:e9:f7:49:36:c1:e9:5b:93:0e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Validity
Not Before: Jan 1 15:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eefbfc055a1bfd93bbc590455312c4c221d1aac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:7a:ba:1f:c2:e7:e3:2e:4a:ce:e1:e5:83:
79:03:15:50:4b:2b:61:d7:fa:ba:cc:b0:e4:ec:18:
1a:f1:ae:be:89:93:69:b6:33:2e:da:88:da:a6:74:
d4:70:b4:1b:60:20:c4:72:30:4e:cc:b1:e0:1e:92:
7e:b0:6e:5a:ec:6e:a2:e0:1a:92:24:b3:91:0e:71:
80:5d:8d:b8:d6:4d:b6:5e:01:a1:fa:a1:73:ca:75:
f1:bb:0d:e9:63:83:01:d1:a3:c6:f6:71:99:ec:aa:
62:d3:23:02:c2:df:3f:58:5f:13:75:30:cc:64:a5:
3f:c6:8e:a5:28:da:fd:36:ae:09:ac:ce:6a:5c:10:
a0:d1:cb:97:ae:cb:41:a9:0e:03:59:72:25:81:59:
a3:a5:57:31:b2:20:c2:dc:79:04:5c:7f:56:cc:32:
05:c7:6e:2a:38:de:e1:a0:1f:9b:fb:d4:e5:fa:31:
b2:cf:d6:86:47:9f:97:95:df:a0:aa:c1:75:53:42:
f7:47:37:c6:f9:3d:db:6f:a7:db:db:45:db:49:53:
b5:dc:c9:73:91:b7:30:33:af:36:f7:3b:57:da:6f:
8f:17:e8:b7:67:11:ca:7a:f9:ca:49:f3:19:3f:30:
e5:ae:5d:73:ce:32:f8:ec:be:d4:4f:8f:44:a7:d2:
8b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FB:FC:05:5A:1B:FD:93:BB:C5:90:45:53:12:C4:C2:21:D1:AA:C2
X509v3 Authority Key Identifier:
keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.217.0/24
93.191.219.0/24
Signature Algorithm: sha256WithRSAEncryption
27:10:a4:0c:01:fa:3b:20:84:6b:78:b2:ee:88:63:dd:8f:45:
3e:af:39:37:54:36:4c:c0:ce:bf:12:e5:3d:18:7b:b7:d7:39:
9e:d7:2a:11:24:40:c6:39:e9:25:10:52:66:9a:81:6b:8d:52:
58:2d:c4:04:ab:03:a6:5e:20:1a:0f:41:2d:0a:fb:5f:35:d9:
9f:6c:15:c2:09:c6:dd:07:ca:8f:b4:3c:73:f8:de:72:15:4c:
2c:94:5d:98:98:3d:71:01:a6:95:3e:eb:0e:ad:d7:fc:97:cd:
23:b4:b5:bb:1e:9a:c5:3e:0a:a1:71:b1:5b:e0:bb:f3:77:91:
a7:30:a3:9d:4b:d6:62:26:34:ce:f3:32:be:4d:2c:7e:bc:f5:
30:fb:39:70:92:52:32:0f:db:1f:b1:88:76:28:77:70:5d:0e:
00:55:dc:70:3f:f8:14:0a:63:b0:73:0a:d1:80:16:61:66:a5:
1e:35:9a:06:3d:c3:35:7d:46:78:a2:98:f1:c8:b1:97:63:f4:
b2:71:1c:23:1e:e6:06:56:a4:d0:48:f7:f9:62:04:b9:8e:8a:
a5:d8:bf:bb:97:9c:54:05:ae:2e:3a:6d:64:85:dc:e0:cc:18:
7b:bf:e1:21:a6:81:88:d1:e3:7c:e4:4a:3b:fa:b1:f3:dc:e4:
8c:73:e6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:40 2025 by rpki-client