Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/7LnQSFfXaCdtSrN73Q04rTSUR1U.roa
File: 7LnQSFfXaCdtSrN73Q04rTSUR1U.roa (raw, json)
Hash identifier: qe1kV18U1ftZ6/1GEB/ILiq/KKpDzYSHRLnRjgpziJY=
Subject key identifier: EC:B9:D0:48:57:D7:68:27:6D:4A:B3:7B:DD:0D:38:AD:34:94:47:55
Certificate issuer: /CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Certificate serial: 019427B54CB355FC6820F0C1CCDF06EF542C
Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/7LnQSFfXaCdtSrN73Q04rTSUR1U.roa
Signing time: Thu 02 Jan 2025 15:49:40 +0000
ROA not before: Thu 02 Jan 2025 15:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31056
IP address blocks: 83.97.40.0/21 maxlen: 21
83.97.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:4c:b3:55:fc:68:20:f0:c1:cc:df:06:ef:54:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Validity
Not Before: Jan 2 15:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecb9d04857d768276d4ab37bdd0d38ad34944755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:12:ca:67:6f:5b:31:1d:52:e8:94:4f:85:14:
fd:b3:61:1c:02:54:6b:69:40:8e:32:05:99:c5:ba:
aa:2f:22:80:35:cd:f0:01:08:72:7e:f6:43:5f:2d:
3d:2a:e7:8a:c0:25:66:dd:c0:28:81:d3:e1:bd:47:
f8:9a:2d:2b:49:52:3d:e3:76:f6:3e:65:fd:8f:d5:
1b:cf:95:6a:21:3c:81:2f:1c:ec:91:5d:0b:c0:c1:
27:a6:e4:74:1e:9e:92:23:75:1d:50:73:59:94:d6:
02:c6:3a:db:5d:9e:66:2f:5f:ee:8c:b9:5a:7b:8e:
25:32:d2:b2:98:58:c1:1f:79:91:b6:09:87:41:77:
a6:4b:11:92:a2:9c:6a:e0:ca:57:e1:7e:bd:ed:a9:
0c:94:b8:94:16:fa:93:af:91:80:84:85:b4:10:9f:
5f:c9:85:c7:34:5e:5f:0c:f5:21:8b:ad:3b:d8:aa:
af:ec:aa:2a:c9:df:49:86:a1:c2:5f:92:5a:fc:cd:
48:c7:ef:e5:9e:54:5a:0b:aa:02:76:98:64:b6:27:
d1:b6:30:8b:53:1e:af:86:6a:26:b5:31:73:ce:a0:
b5:ad:04:ce:4c:ab:cc:c1:88:b7:7b:3f:99:0c:63:
4a:bf:aa:3f:21:fd:c1:85:8c:74:8f:d7:79:c6:83:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B9:D0:48:57:D7:68:27:6D:4A:B3:7B:DD:0D:38:AD:34:94:47:55
X509v3 Authority Key Identifier:
keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/7LnQSFfXaCdtSrN73Q04rTSUR1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.40.0-83.97.55.255
Signature Algorithm: sha256WithRSAEncryption
47:c2:3a:c4:1b:30:8e:31:55:01:cc:fe:f5:75:6b:31:04:28:
b7:ae:29:b9:29:e8:c1:5a:be:bc:ea:1e:5f:95:fb:f0:9b:f5:
8b:ee:92:14:d2:a8:38:0f:da:b3:3f:6f:34:c8:15:2b:86:c5:
89:db:9c:a1:bd:53:56:82:be:92:c7:1d:85:a1:17:24:93:b7:
00:b7:34:56:0a:fa:7a:b5:35:37:bd:77:0e:5c:83:82:ef:67:
67:7b:b9:1d:c4:9d:ec:7a:8a:70:01:79:a0:fc:d1:21:10:84:
c0:a0:a1:cd:87:18:47:f9:d5:e4:3a:f7:f2:4f:81:c8:02:4d:
c9:1e:d7:60:db:ee:a4:5b:a7:33:80:22:dc:68:47:38:7a:71:
4d:20:fb:8c:f4:d6:3d:6a:cf:52:fc:49:37:c8:b3:ca:2c:40:
82:27:b2:d2:d0:02:6d:85:34:c9:fa:f5:ca:3d:28:a5:0d:be:
b5:ef:ae:70:ab:b5:5f:10:3f:fb:5f:1f:44:d4:11:fc:d8:f1:
e1:1b:b2:3b:32:2f:6e:c0:a2:ed:e4:b2:6c:9e:b7:01:ea:05:
61:4b:2e:4b:0b:96:bb:70:97:b3:93:80:d1:fa:94:7d:61:6a:
f2:01:ba:42:01:5f:3e:1c:68:96:be:af:d8:73:4b:12:8f:49:
46:c4:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:02 2025 by rpki-client