Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/7thrq7mGs5MtURUKExcq8kim4V8.roa
File: 7thrq7mGs5MtURUKExcq8kim4V8.roa (raw, json)
Hash identifier: zvJH/9Gs7ZRpXaAKjn9oIc5UM29oZPs/zM5sABBQxSU=
Subject key identifier: EE:D8:6B:AB:B9:86:B3:93:2D:51:15:0A:13:17:2A:F2:48:A6:E1:5F
Certificate issuer: /CN=e9057470fd56f1b773b2e40abaee79f9966e4436
Certificate serial: 01961550FF41BB36F18291BC197D1DEDF5BB
Authority key identifier: E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/7thrq7mGs5MtURUKExcq8kim4V8.roa
Signing time: Tue 08 Apr 2025 12:12:31 +0000
ROA not before: Tue 08 Apr 2025 12:12:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58323
IP address blocks: 130.255.20.0/22 maxlen: 24
164.138.192.0/21 maxlen: 24
2a00:bac0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:15:50:ff:41:bb:36:f1:82:91:bc:19:7d:1d:ed:f5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9057470fd56f1b773b2e40abaee79f9966e4436
Validity
Not Before: Apr 8 12:12:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eed86babb986b3932d51150a13172af248a6e15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:e7:6b:8b:80:49:4f:bf:4f:b9:a1:68:5c:
35:c0:11:63:dd:aa:92:50:f6:3f:d8:1a:ca:62:99:
05:48:14:39:ad:f9:10:7b:8f:94:06:a7:84:26:49:
d5:be:6c:aa:8a:37:09:0d:1a:52:6a:46:1f:e9:d5:
01:0d:8c:3e:38:20:ce:23:d2:d7:9a:60:c0:91:74:
3d:53:91:cf:10:8a:80:72:f5:d2:a3:33:f3:af:aa:
24:d4:7a:ba:c2:4d:67:d1:b5:4b:ae:c9:e5:80:25:
e2:50:0b:1d:42:bf:81:29:0f:68:b0:06:eb:d2:58:
e4:6c:45:54:ce:3f:d5:08:5f:90:2a:b2:76:98:e6:
7d:12:3a:9c:b4:c8:48:75:57:0a:13:2e:a8:61:a0:
e5:e2:e3:02:19:ab:88:f4:2d:91:b1:21:f0:a5:cf:
cd:50:4d:fa:9e:23:82:be:c7:d8:5b:e5:46:e8:cb:
60:ee:a9:a0:12:c0:4f:06:a8:8e:64:0b:20:8a:ae:
ef:32:9b:6d:ec:b3:71:2c:29:94:ac:77:18:cd:94:
6b:76:c4:51:07:8c:52:17:c7:6b:ad:68:ac:5d:19:
cb:2a:92:0b:f2:02:6f:6e:eb:79:ca:e8:57:05:03:
ea:fc:93:bd:33:df:d0:70:00:0a:83:49:46:99:5e:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D8:6B:AB:B9:86:B3:93:2D:51:15:0A:13:17:2A:F2:48:A6:E1:5F
X509v3 Authority Key Identifier:
keyid:E9:05:74:70:FD:56:F1:B7:73:B2:E4:0A:BA:EE:79:F9:96:6E:44:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QV0cP1W8bdzsuQKuu55-ZZuRDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/7thrq7mGs5MtURUKExcq8kim4V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/45772a-a10f-429d-b5db-9218f92f3036/1/6QV0cP1W8bdzsuQKuu55-ZZuRDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.20.0/22
164.138.192.0/21
IPv6:
2a00:bac0::/32
Signature Algorithm: sha256WithRSAEncryption
86:db:88:3a:8b:c6:c1:03:17:4e:b9:5f:4e:4c:f5:8b:7b:2e:
70:c4:52:bb:44:0e:c9:d5:2c:01:e1:cc:67:d7:0c:f1:80:cf:
c2:e2:e0:83:eb:66:b9:49:ed:d3:0e:fc:3a:da:71:d6:8a:6b:
9c:aa:ac:e9:aa:a5:11:7e:7a:f3:ab:dd:b9:13:70:63:2d:4a:
9f:41:35:0c:12:25:ce:85:da:ac:1d:13:c3:49:22:36:d9:77:
31:ff:52:d2:c7:82:99:65:99:39:36:a1:37:18:58:1f:12:8b:
47:87:bc:4e:2c:fc:98:e0:e1:38:0f:00:b5:da:55:89:1b:e5:
1a:4a:9c:85:3d:0f:ac:33:cc:bb:17:6d:a6:05:fe:ef:9f:f5:
f8:34:ff:57:d1:e4:e6:8a:74:bf:8f:60:c6:cf:18:a5:fc:76:
08:32:da:9b:3a:a3:31:e7:9e:42:da:a4:dc:07:a4:c8:42:c1:
35:52:71:c1:e0:a7:b9:db:b1:21:c7:c5:92:45:d1:b6:d4:b0:
6f:7c:ae:89:6e:27:70:14:32:59:ad:7e:a3:4f:a3:66:99:a9:
d3:28:1d:d0:62:d0:d1:9f:2b:d8:49:0e:fc:8b:84:93:49:bb:
a1:b3:19:d1:82:fb:2a:e4:98:10:cb:67:6b:e0:c9:c5:44:07:
c7:89:c5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:56 2025 by rpki-client on console.sobornost.net