Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/7ELaTfhZCzOLHxXhMQWe12aEV_0.roa
File: 7ELaTfhZCzOLHxXhMQWe12aEV_0.roa (raw, json)
Hash identifier: o2GrG8dzdMwmTG6sMarb49h9j6ga8LYsSX67uHgh15Y=
Subject key identifier: EC:42:DA:4D:F8:59:0B:33:8B:1F:15:E1:31:05:9E:D7:66:84:57:FD
Certificate issuer: /CN=db7fd26ca5f791470b0b729b72f61f800058a322
Certificate serial: 018570C2BEE18CAAA29073469628350F8AE1
Authority key identifier: DB:7F:D2:6C:A5:F7:91:47:0B:0B:72:9B:72:F6:1F:80:00:58:A3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23_SbKX3kUcLC3KbcvYfgABYoyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/7ELaTfhZCzOLHxXhMQWe12aEV_0.roa
Signing time: Mon 02 Jan 2023 04:34:48 +0000
ROA not before: Mon 02 Jan 2023 04:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204810
IP address blocks: 94.142.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:c2:be:e1:8c:aa:a2:90:73:46:96:28:35:0f:8a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7fd26ca5f791470b0b729b72f61f800058a322
Validity
Not Before: Jan 2 04:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec42da4df8590b338b1f15e131059ed7668457fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:43:e6:1e:9a:e5:7a:cc:b8:9f:ea:1f:3f:
9a:7d:ed:8c:9b:70:3d:ab:c3:2e:6b:48:0f:c4:5d:
c8:ec:23:9d:4d:d8:a7:8b:92:6e:f4:67:00:da:33:
d5:3b:54:d9:e5:05:ef:1d:47:d4:20:70:99:23:6f:
4d:8f:fa:69:79:df:71:c3:12:cc:07:bc:29:bf:0c:
4e:05:74:d6:8a:5b:4d:ff:05:68:0b:c6:be:bc:38:
38:bf:91:0c:df:08:07:15:bf:9b:89:b8:1f:4f:f7:
ab:75:14:dc:08:28:15:82:06:7c:03:dc:bb:2a:f2:
ef:d3:7e:0a:13:74:2a:41:0f:76:39:cb:18:ca:d9:
d4:c2:44:d9:93:3d:d5:f4:d8:68:cb:83:0d:27:60:
79:6f:4d:ae:22:98:8a:d2:05:f5:56:4e:4f:5d:e9:
9a:74:e4:05:89:f7:4d:64:05:40:8c:65:f5:81:eb:
9f:7e:59:bf:3b:7c:79:28:d4:fb:d6:db:1f:cb:3b:
eb:fc:af:04:6b:dd:74:69:45:4a:f1:46:09:b3:75:
cb:ba:50:7b:2b:25:30:24:e9:c5:9c:b7:8e:b2:a0:
39:a6:e7:de:a7:d0:eb:ea:01:e1:39:25:0b:c0:2a:
5c:a6:38:7d:ff:42:92:c6:33:e3:79:05:54:54:f0:
4b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:42:DA:4D:F8:59:0B:33:8B:1F:15:E1:31:05:9E:D7:66:84:57:FD
X509v3 Authority Key Identifier:
keyid:DB:7F:D2:6C:A5:F7:91:47:0B:0B:72:9B:72:F6:1F:80:00:58:A3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23_SbKX3kUcLC3KbcvYfgABYoyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/7ELaTfhZCzOLHxXhMQWe12aEV_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/714b48-6468-4d45-9fff-69367f9a5fc9/1/23_SbKX3kUcLC3KbcvYfgABYoyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:47:ea:97:1d:d4:45:1c:23:55:ff:9f:81:bb:46:5d:f7:2e:
e3:13:76:d4:33:7c:6a:30:3c:b3:6e:a0:92:a2:64:59:68:2d:
cd:37:88:c8:e9:bf:ad:50:b0:9c:97:11:60:05:f6:9e:a8:02:
fc:09:cd:3a:d2:da:ed:ae:e7:fa:08:b9:03:58:be:b8:39:91:
e3:d4:40:68:1c:d8:05:19:c3:f7:a4:7f:d0:7a:f7:46:ab:c6:
35:bf:2c:12:91:78:57:fa:fe:62:64:5e:ca:9b:e4:7e:91:c7:
d1:56:8d:8e:43:4a:e0:88:dd:38:67:69:1d:4b:1c:fd:54:a5:
a5:2a:60:47:a0:23:97:eb:34:c6:7d:f8:15:9c:2a:f8:ab:57:
5d:94:f2:7f:03:db:09:c7:58:9f:bb:15:90:ad:77:7c:e6:2e:
dc:84:2a:fa:c9:9b:c4:b4:d3:fe:a1:0e:05:8b:25:bf:60:b2:
13:48:89:3c:e9:cb:7d:97:2a:e9:f1:a9:2b:b4:11:d8:09:4f:
3b:47:e2:dc:3e:38:07:b7:c7:f7:b7:fc:fd:29:3c:7b:e1:ca:
3e:c2:f0:d8:90:47:b0:02:58:28:79:5b:d5:61:67:1e:05:58:
e6:4c:18:77:1e:0a:23:64:27:72:98:00:79:e1:26:bd:3c:af:
2f:30:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:42 2025 by rpki-client