Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa
File: 7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa (raw, json)
Hash identifier: W6gsf8oTn0VsRjkJRSnQZjA1UWhDIyT1LhfUV5ExzMo=
Subject key identifier: ED:95:10:FE:FF:81:21:3F:CA:C0:0C:FA:34:35:F4:B7:F2:BB:63:FA
Certificate issuer: /CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Certificate serial: 019421B1AFFCAC4264C39559718029DED70A
Authority key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa
Signing time: Wed 01 Jan 2025 11:48:00 +0000
ROA not before: Wed 01 Jan 2025 11:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199969
IP address blocks: 195.88.122.0/24 maxlen: 24
195.88.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:af:fc:ac:42:64:c3:95:59:71:80:29:de:d7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed9510feff81213fcac00cfa3435f4b7f2bb63fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0f:0b:4a:ab:1b:75:2a:69:79:df:28:c5:66:
08:17:fb:4a:a1:aa:16:67:2b:93:62:d2:22:4e:2c:
02:d7:74:87:55:63:7f:5c:b1:dd:06:74:ba:39:0b:
a3:42:0a:56:ad:a4:8a:99:6f:12:af:00:f4:0e:5b:
79:32:28:fb:3e:be:7b:dd:8d:59:26:c6:2e:bd:f0:
af:78:f6:a9:11:b4:d5:f9:c5:ce:7a:a3:7e:4c:01:
27:0a:c5:12:54:ac:5e:43:d1:03:14:d2:86:55:47:
fd:ad:bb:18:15:58:7e:15:a7:e1:f9:d5:d8:dc:b3:
09:68:37:3d:33:a8:3f:f9:13:e3:11:22:92:50:ce:
6b:42:04:02:d8:ce:5a:cf:92:95:5f:eb:54:57:65:
b7:09:21:7d:ca:dd:fd:b6:50:c1:3e:f7:d2:b0:c3:
8e:45:fa:e0:cd:74:5f:50:d3:eb:51:6f:28:71:7f:
ae:38:0b:33:00:15:4e:80:be:9b:c7:52:34:ce:0f:
9f:4f:61:9b:68:72:a9:11:cb:1d:6a:59:5b:7f:93:
53:42:9b:ab:86:82:5d:c7:ee:ba:db:02:a9:f0:2c:
e2:67:97:0f:6f:55:83:55:c0:14:8e:b1:6c:e3:33:
7b:d3:9d:c1:c8:10:c2:ec:f6:a8:19:75:71:6d:e0:
fb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:95:10:FE:FF:81:21:3F:CA:C0:0C:FA:34:35:F4:B7:F2:BB:63:FA
X509v3 Authority Key Identifier:
keyid:7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/7ZUQ_v-BIT_KwAz6NDX0t_K7Y_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.122.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:1d:1b:0f:a1:d7:5b:9f:aa:4f:6c:a6:52:b0:70:8d:ef:69:
8b:1a:7c:10:13:f8:91:42:19:b9:92:37:ec:d6:b4:b1:b6:9c:
f9:e2:f2:20:ed:4e:c9:da:43:df:b8:3b:4d:bc:a7:68:f0:90:
55:f4:51:7e:86:60:22:91:e6:c5:27:4f:85:2e:83:9b:ba:35:
f2:48:12:24:20:9a:d7:cb:83:e2:e6:bb:e3:7c:f3:05:cd:d1:
1f:a4:52:ce:95:ce:80:8e:b2:f8:5a:ce:29:22:c4:6c:9f:b9:
1a:2f:be:45:3a:a8:6d:3a:3e:01:40:83:39:fb:f1:df:a5:4f:
2b:42:05:09:d3:41:04:9d:c6:e5:9b:8c:9a:39:8c:e6:67:fe:
a2:0d:26:68:b6:34:0e:0e:ae:ce:36:c1:1c:08:2c:cc:45:1f:
ab:5c:6e:9f:05:70:bb:c3:ee:0e:08:bf:a9:32:e8:e8:71:92:
2e:90:91:90:05:b6:f1:19:38:4b:0f:5b:bd:8c:30:27:bc:f7:
79:2e:b0:e5:83:e8:c8:3d:f2:57:d8:ac:d9:83:2d:d9:6c:79:
68:11:41:0e:f0:2e:5b:1c:32:40:bf:da:41:c6:b9:0c:0b:6b:
b4:9f:50:13:95:ca:da:5b:1f:08:2c:f1:f1:a4:92:a1:8a:e9:
51:11:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net