Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa
File: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (raw, json)
Hash identifier: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=
Subject key identifier: EC:CC:48:6E:6B:41:E7:0C:EE:C8:DA:89:95:55:79:D3:25:D9:67:6C
Certificate issuer: /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial: 019585160159ADC2EA154ED32F4FFA440DBF
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa
Signing time: Tue 11 Mar 2025 12:02:46 +0000
ROA not before: Tue 11 Mar 2025 12:02:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30058
IP address blocks: 193.47.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:85:16:01:59:ad:c2:ea:15:4e:d3:2f:4f:fa:44:0d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Validity
Not Before: Mar 11 12:02:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eccc486e6b41e70ceec8da89955579d325d9676c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:23:8d:f9:d6:c2:00:7d:c0:08:e6:54:db:
60:c2:5e:be:9b:b8:e0:bc:6a:2e:bc:0b:39:12:ed:
9e:b3:b4:75:07:04:bc:33:33:bf:f4:b9:90:8b:4e:
ec:2d:aa:b6:61:d6:14:4c:fb:10:fe:fe:d6:43:60:
a2:74:09:7b:02:31:cc:1c:d2:51:a7:e7:21:db:b3:
33:cc:65:0e:7a:0f:99:be:17:fb:76:03:36:81:d4:
e7:f5:58:e2:db:18:a8:e3:9e:b2:94:e9:94:51:c0:
13:ef:ed:7d:4c:ce:13:42:8f:50:a5:4a:ad:b1:29:
77:56:ce:64:20:67:fd:ba:61:f0:d6:c0:35:9f:c7:
68:56:10:ab:23:26:70:4f:21:ef:b7:04:6b:57:84:
10:72:08:0b:7e:af:44:6b:a3:7f:d3:8b:5c:44:c8:
e2:5d:6b:2f:0c:ce:f6:fa:61:2c:a5:41:27:56:01:
4a:bf:5e:a0:8b:a0:27:3e:61:b4:45:e4:ed:b6:d1:
72:1f:4e:06:51:bd:bd:fc:bd:c5:22:a5:91:25:f7:
9e:49:99:f6:83:4f:4c:a9:93:9e:f3:dc:04:9c:41:
a4:7b:f8:38:f5:11:a7:14:76:9c:c2:5c:0d:6e:0f:
1c:df:52:49:54:0d:dd:2f:24:d1:cc:5f:46:7e:4c:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:CC:48:6E:6B:41:E7:0C:EE:C8:DA:89:95:55:79:D3:25:D9:67:6C
X509v3 Authority Key Identifier:
keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.0.0/24
Signature Algorithm: sha256WithRSAEncryption
97:73:fc:c7:d0:be:df:56:33:28:fe:50:28:9b:ee:ed:39:96:
ab:87:17:d3:97:7e:5b:6d:29:44:30:8a:d7:4b:a1:5b:9c:8e:
78:06:9c:90:7b:6b:f3:f5:3d:d8:9e:03:a8:0e:f2:1b:10:63:
cc:f0:05:63:92:9d:44:5b:48:59:7c:56:d7:1a:d4:b2:45:81:
0c:02:0a:b0:78:41:5d:2d:b6:2f:f2:99:23:6e:e8:d3:c9:e2:
e0:b8:b5:2c:ed:af:47:5c:84:e1:96:c1:05:89:65:4f:bc:16:
f0:3a:9c:c9:e6:79:a3:89:51:9e:05:35:36:c6:e4:bf:7f:a2:
9d:ad:36:c4:06:b0:96:de:97:42:a7:26:4d:c9:c0:53:e1:a9:
b7:31:07:3a:dc:37:af:0a:5e:59:b8:ad:15:2e:9e:a0:94:f1:
3b:7d:41:a9:3d:6e:de:3a:70:d8:c2:cb:14:68:38:e2:7a:59:
82:6c:7d:1f:72:2d:54:0f:1a:b7:bf:af:cb:f2:22:af:ac:88:
cf:95:c5:c0:f9:39:f9:f0:4d:4e:2f:d9:37:d1:33:7d:30:67:
5b:65:ae:ff:21:64:04:c2:bf:10:69:0f:37:c5:2b:4b:28:50:
04:f8:66:ff:df:9c:04:b5:49:74:27:35:0f:f8:fc:52:67:e8:
91:72:62:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:50:10 2025 by rpki-client