Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/7krccxmh0bmd_g_H_LUXTMk8iz4.roa
File: 7krccxmh0bmd_g_H_LUXTMk8iz4.roa (raw, json)
Hash identifier: /rD2/bVO6nMt+hyDddPt/8PJfMRKyKzJZdYdTstntTY=
Subject key identifier: EE:4A:DC:73:19:A1:D1:B9:9D:FE:0F:C7:FC:B5:17:4C:C9:3C:8B:3E
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01942220097A5D6760D59DDC22D15D6DCD72
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/7krccxmh0bmd_g_H_LUXTMk8iz4.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215567
IP address blocks: 185.143.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:09:7a:5d:67:60:d5:9d:dc:22:d1:5d:6d:cd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee4adc7319a1d1b99dfe0fc7fcb5174cc93c8b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f1:0d:4a:f9:a6:1e:6c:f6:5f:bf:9d:c7:60:
3e:3a:2a:f3:0a:cb:4b:21:e3:35:e5:ec:e2:33:d8:
5e:fe:20:1b:38:48:2c:c4:16:01:6a:e5:e7:b2:c2:
f3:ff:07:75:5a:4c:6f:4b:75:47:fe:35:44:7f:41:
7d:5a:d5:5e:a4:21:8a:bd:e8:1f:4e:1e:1d:22:25:
15:51:fe:fc:de:25:ed:f6:f3:4a:ad:aa:51:5c:26:
b5:a9:f9:7b:8f:69:86:f4:a1:d8:70:3e:23:93:c8:
16:df:31:be:6e:da:dc:af:cc:1c:8b:74:50:ed:c5:
78:bd:a8:25:24:f1:65:6d:73:3b:f8:29:46:08:4a:
22:c0:33:c9:78:66:38:c7:91:d9:94:61:70:34:fe:
71:ce:3b:9d:d5:fb:b3:de:43:56:d5:72:39:bb:c7:
c0:72:7e:ac:97:4e:f7:fb:91:fe:e3:e7:f1:72:35:
c3:c7:7d:ff:cc:b7:ec:0d:98:a3:0f:d3:f7:58:b0:
45:87:4d:61:03:c1:d1:20:f9:8f:41:f9:28:f8:16:
3b:e0:7a:21:fa:44:1f:97:b8:71:68:23:96:b8:7f:
07:40:68:ad:2a:13:fc:a4:66:58:40:ac:ad:04:6d:
32:d5:81:05:aa:2b:2d:4f:ce:28:b8:60:d3:29:21:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:4A:DC:73:19:A1:D1:B9:9D:FE:0F:C7:FC:B5:17:4C:C9:3C:8B:3E
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/7krccxmh0bmd_g_H_LUXTMk8iz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.143.72.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:fa:69:49:4c:00:e8:42:c5:82:4c:1e:97:08:4a:ec:45:e7:
0a:7e:bb:28:e9:e2:39:b2:ab:7c:3e:53:d3:07:db:17:e7:5c:
e9:e8:e0:ee:b7:6c:38:05:a1:dd:05:63:b8:a1:77:30:f8:b9:
ca:ab:cf:d5:aa:7c:ab:c1:3e:2f:ef:88:64:f0:5c:2d:d8:27:
67:27:ed:5a:d3:08:b6:83:f0:73:34:7e:b3:cd:3f:57:1f:dd:
53:b2:b0:5e:e9:a8:d4:bf:cc:32:78:63:71:be:7f:87:cf:ae:
68:0e:bf:55:b7:21:41:57:fb:af:52:b1:18:b2:f0:a6:5b:db:
ea:ff:46:e9:7e:24:7a:71:2a:04:55:e4:7f:f7:60:8b:e1:a5:
b9:58:0c:57:83:2b:26:62:1c:7a:31:6e:b4:12:71:54:2e:70:
a3:68:25:d6:bd:20:57:9d:37:1a:c5:bb:8d:19:32:cb:4a:e5:
ce:c7:60:9f:28:8c:92:34:e6:8b:3e:70:e9:53:b0:28:ca:ae:
9a:b1:b0:24:ab:ff:b6:98:7f:e2:52:b3:ee:10:45:31:5e:73:
11:4e:52:1f:3f:10:1a:bc:d4:cb:bb:28:c8:f4:04:2d:c3:5d:
0d:f5:09:44:11:83:e1:47:da:b9:98:66:26:60:70:7a:0d:33:
b5:29:b0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:49:48 2025 by rpki-client on console.sobornost.net