Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/7HrDROWVcljE8-8l6AcztjVNWWw.roa
File: 7HrDROWVcljE8-8l6AcztjVNWWw.roa (raw, json)
Hash identifier: aPUy9G990LG8Gt7ev2zQpoBPfmmiK94lRTjU13MQxug=
Subject key identifier: EC:7A:C3:44:E5:95:72:58:C4:F3:EF:25:E8:07:33:B6:35:4D:59:6C
Certificate issuer: /CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Certificate serial: 0195D39C48D3D1D146C5F0F75FFC6BBD9EA1
Authority key identifier: 7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/7HrDROWVcljE8-8l6AcztjVNWWw.roa
Signing time: Wed 26 Mar 2025 17:59:49 +0000
ROA not before: Wed 26 Mar 2025 17:59:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42532
IP address blocks: 195.135.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d3:9c:48:d3:d1:d1:46:c5:f0:f7:5f:fc:6b:bd:9e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7be907dd202152cf1902bedbecb19a2d72ac0859
Validity
Not Before: Mar 26 17:59:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec7ac344e5957258c4f3ef25e80733b6354d596c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:e1:e7:80:af:07:82:c1:e0:82:aa:95:36:
02:ab:2b:1a:37:2f:47:11:78:6f:eb:0c:f6:c6:17:
34:a3:1e:1c:05:e7:86:a1:bd:f4:18:34:69:4c:54:
40:a3:c8:f8:9f:2a:9d:d1:14:81:ce:1b:47:26:9c:
04:b1:2b:b2:5b:0d:c4:47:41:05:34:70:d4:17:e3:
8c:4c:2d:34:41:b2:33:9f:04:31:2b:8d:5a:4a:db:
bf:f0:8b:b0:b1:8e:44:0a:d4:da:eb:a4:cd:c3:cf:
bb:12:de:6d:de:5c:7b:4e:2e:f3:97:13:e2:8c:51:
e5:b7:56:bb:29:c9:57:af:bb:6b:d0:9c:48:97:41:
de:03:f6:69:6d:9a:47:03:81:a3:87:78:b7:45:7c:
c4:0c:55:c4:90:2a:b2:ec:af:33:3e:9f:89:8f:3f:
fa:1d:d6:9f:1a:aa:ef:db:bf:99:3d:48:82:3c:55:
1f:43:08:93:c3:0a:45:ad:a8:2d:24:a4:9f:9d:93:
ba:d3:7e:47:5b:91:c1:89:31:c4:26:54:b3:1f:ae:
9c:7c:8c:ed:99:9a:b0:39:7c:66:90:4c:21:82:ba:
67:38:55:bd:df:3f:59:eb:8d:07:7f:ab:07:5b:30:
3c:93:2f:42:d5:47:f2:83:c9:4b:49:42:8e:33:0b:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7A:C3:44:E5:95:72:58:C4:F3:EF:25:E8:07:33:B6:35:4D:59:6C
X509v3 Authority Key Identifier:
keyid:7B:E9:07:DD:20:21:52:CF:19:02:BE:DB:EC:B1:9A:2D:72:AC:08:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/7HrDROWVcljE8-8l6AcztjVNWWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/25e76a-d140-4e0b-88e4-ef219381f10e/1/e-kH3SAhUs8ZAr7b7LGaLXKsCFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.135.252.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:9d:df:e3:c4:6f:83:c0:f2:b4:2e:ec:83:ce:b7:69:16:98:
ae:bd:0d:c1:f6:b6:b0:dd:0e:3b:ce:e5:33:76:92:ec:27:0c:
d0:b9:ac:9f:b4:a6:65:80:6b:1a:2a:82:48:11:94:f3:3b:e9:
04:4a:99:35:ff:7b:0a:c6:60:10:d2:a4:eb:46:54:11:96:f5:
1e:f5:73:9f:ba:33:1a:43:cd:82:52:42:e5:c0:e4:d0:c0:2c:
52:a6:a7:85:43:15:d4:66:0c:cf:37:a9:a7:5e:bf:38:a0:68:
fe:d1:8d:71:86:8a:b3:f4:0f:a2:8f:8f:31:24:cf:b5:72:e4:
22:62:4a:3c:a0:11:6b:84:22:12:3a:5e:54:95:0d:9e:57:18:
30:8c:21:13:73:b2:42:59:d7:2a:d9:f1:57:c9:2c:83:f3:4a:
1d:27:4f:ed:db:f0:fb:06:af:d7:fe:82:41:df:b0:23:d1:bd:
88:4b:df:f0:17:6b:7c:3f:31:78:eb:ce:82:c7:ec:c4:10:41:
99:1a:f4:52:54:20:e5:80:63:39:46:6d:58:da:e5:7f:10:14:
96:3c:28:17:17:2a:7f:b6:d1:47:aa:1c:49:42:03:11:ed:e9:
e4:bc:b9:30:46:2c:7f:77:39:36:43:b8:94:95:1d:d8:3b:4d:
fc:4a:d8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:44 2025 by rpki-client on console.sobornost.net