Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/7IomEO57DDrl4ZBLVKDC6qP3KEE.roa
File: 7IomEO57DDrl4ZBLVKDC6qP3KEE.roa (raw, json)
Hash identifier: AwCfU2h4jJPaAJIb84vSAgUR4ElWsWxd3ZUQNOuBkOc=
Subject key identifier: EC:8A:26:10:EE:7B:0C:3A:E5:E1:90:4B:54:A0:C2:EA:A3:F7:28:41
Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Certificate serial: 019424B3A713DAEC9782D8DB35CEDE449AF4
Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/7IomEO57DDrl4ZBLVKDC6qP3KEE.roa
Signing time: Thu 02 Jan 2025 01:49:00 +0000
ROA not before: Thu 02 Jan 2025 01:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41916
IP address blocks: 195.138.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a7:13:da:ec:97:82:d8:db:35:ce:de:44:9a:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Validity
Not Before: Jan 2 01:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec8a2610ee7b0c3ae5e1904b54a0c2eaa3f72841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:aa:86:69:8e:63:74:70:67:67:fd:dc:56:50:
a1:45:66:b8:eb:bc:4e:67:63:af:dd:81:0d:cb:2d:
98:28:86:d6:e2:24:d3:14:ee:56:b4:ae:c5:ee:c1:
12:3e:c9:74:07:94:6a:9f:71:82:44:c3:ab:f4:42:
90:3b:63:03:4e:f0:89:6f:ab:ad:42:ab:ca:c7:50:
5c:30:60:01:8b:9a:7c:5f:81:be:da:6b:a4:29:ee:
72:ca:a6:83:6e:59:34:7e:69:b8:5c:95:29:4c:22:
c4:e6:6d:89:fa:47:aa:be:e0:26:72:af:18:c9:a2:
88:87:f0:d0:ef:e2:f1:78:f8:dc:ee:9e:af:26:db:
c0:9e:ed:29:15:4e:f1:ca:01:80:2b:3e:df:11:8e:
a9:21:02:a5:20:9c:88:6d:84:18:d2:e7:91:2e:12:
97:fa:7c:3c:f3:8e:db:0f:8f:52:d7:40:41:86:0a:
b7:0a:cf:b2:a8:8c:3c:d6:23:6e:4e:1d:c7:f3:1b:
4f:f3:67:9f:9e:ef:3f:cb:ba:34:59:32:ad:92:58:
bb:f8:71:55:c5:8a:5a:c5:e8:d5:59:09:15:a4:bd:
9a:66:29:ba:43:b2:6b:6a:53:a4:d0:24:7c:5e:66:
98:e0:b5:cf:f3:f4:af:f4:b3:4e:66:7d:43:1d:b8:
1e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8A:26:10:EE:7B:0C:3A:E5:E1:90:4B:54:A0:C2:EA:A3:F7:28:41
X509v3 Authority Key Identifier:
keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/7IomEO57DDrl4ZBLVKDC6qP3KEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.196.0/24
Signature Algorithm: sha256WithRSAEncryption
73:98:db:38:10:bf:a2:0c:f7:60:fd:b6:32:52:99:58:36:09:
6d:57:d7:23:ea:03:a5:11:db:02:ef:bc:6a:f5:8c:c7:97:df:
e0:fe:c4:77:79:88:41:1b:62:cb:04:6e:78:d0:a8:f9:0b:ae:
62:81:43:0b:bc:23:c9:14:4c:12:57:59:1c:6f:7b:f3:44:a0:
4b:62:8b:b0:e8:5b:9c:5f:ba:e1:bd:95:5a:0e:27:57:cd:ae:
da:b4:2f:61:7d:e3:75:6b:af:7b:b6:9b:08:9c:b7:6c:84:e6:
ca:c8:d2:04:f3:92:a9:9a:c1:e1:b6:9f:0b:d6:48:d3:59:6a:
3e:f4:94:00:9c:23:73:04:c3:df:ee:ed:7f:3d:95:49:7a:bf:
d3:02:f3:61:eb:12:4b:2d:47:40:9b:04:27:d1:ad:a0:f6:02:
65:4d:04:4c:65:42:d4:67:4f:56:8b:5d:80:52:c9:52:53:ff:
7b:2a:c0:ef:2b:3b:87:c7:bf:58:75:17:fd:ab:e3:c5:2e:05:
7d:f0:34:72:24:c3:ef:2e:17:49:05:d6:38:f6:3d:0d:07:d0:
80:22:b3:1e:4e:ff:0c:6d:5b:0f:5a:62:ee:fd:72:f2:95:0b:
d0:c4:b5:3e:30:bf:e9:1b:cb:21:e6:fc:8b:04:84:67:20:d2:
16:c4:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:29 2025 by rpki-client on console.sobornost.net