Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/7dcgBIplMkDE9Me9_TBtww4XI9Y.roa
File: 7dcgBIplMkDE9Me9_TBtww4XI9Y.roa (raw, json)
Hash identifier: 8O59mET8aiqW0DpLtIYLTmGhal2eNwvoi0MphoxbxkI=
Subject key identifier: ED:D7:20:04:8A:65:32:40:C4:F4:C7:BD:FD:30:6D:C3:0E:17:23:D6
Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial: 0194E0C0D2415011A1D0BEA1B466CF9DEA65
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/7dcgBIplMkDE9Me9_TBtww4XI9Y.roa
Signing time: Fri 07 Feb 2025 14:12:00 +0000
ROA not before: Fri 07 Feb 2025 14:12:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50407
IP address blocks: 193.105.17.0/24 maxlen: 24
195.191.68.0/23 maxlen: 23
2001:67c:2e18::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:c0:d2:41:50:11:a1:d0:be:a1:b4:66:cf:9d:ea:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
Validity
Not Before: Feb 7 14:12:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edd720048a653240c4f4c7bdfd306dc30e1723d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c8:e5:e3:86:77:2b:a4:7c:7d:4e:e9:e5:66:
56:45:fc:a7:48:67:e7:93:b2:57:71:9f:d2:2c:bb:
b5:84:55:3b:0b:d2:72:0e:68:3f:88:1f:8f:7e:43:
e6:83:04:a5:e9:9a:b7:1d:df:ac:51:0f:b0:6f:86:
e8:9e:f6:aa:8f:a9:9b:3c:cb:f1:3a:f2:a8:2d:d0:
b1:ca:a6:a9:85:58:65:c0:f5:a8:d3:4d:09:7c:0f:
83:15:6c:53:89:0e:f2:bf:f3:e6:8b:52:5d:e2:48:
23:13:f9:cb:77:04:e3:00:d1:e1:40:94:bc:84:58:
f9:f3:0a:3f:7f:d9:66:38:6d:16:8a:6e:75:b3:3a:
78:af:a0:09:0c:a6:5b:9d:fe:d4:8c:3c:83:ea:a7:
ee:6f:2e:01:21:6d:91:bd:de:b5:46:86:85:12:bf:
64:bd:e0:f3:fa:84:5b:39:01:83:39:de:fd:ab:2e:
1b:f7:29:fa:97:42:f6:1a:81:5d:3c:fd:93:b0:8c:
0d:58:02:e9:9b:20:53:3f:a0:57:9a:ee:04:a9:d6:
9e:f4:aa:ff:19:9c:31:a4:ab:b7:16:2b:e9:46:6e:
ea:12:b4:a9:b8:ad:af:a2:26:f4:d6:31:2f:2e:c2:
dd:57:77:54:45:15:5a:a3:32:c1:f6:1d:5d:b3:9d:
9b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:20:04:8A:65:32:40:C4:F4:C7:BD:FD:30:6D:C3:0E:17:23:D6
X509v3 Authority Key Identifier:
keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/7dcgBIplMkDE9Me9_TBtww4XI9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.17.0/24
195.191.68.0/23
IPv6:
2001:67c:2e18::/48
Signature Algorithm: sha256WithRSAEncryption
73:3e:27:66:fb:60:09:b4:25:53:72:8f:ed:97:6b:d3:2e:6e:
13:75:b8:ae:7a:f9:51:45:64:8c:36:fd:e0:60:8a:4a:0f:ac:
43:7e:99:ca:1d:a4:3c:bd:e7:33:a5:67:fb:dc:cb:bb:6e:b4:
8b:ad:44:18:ab:c6:4c:e9:73:2a:cd:12:c2:04:66:1a:c7:da:
ad:f5:95:a6:95:69:27:a4:d8:48:b5:56:3b:c4:cb:56:52:f9:
82:0e:90:75:10:b0:46:7a:74:72:77:05:82:26:57:5e:b8:ac:
3e:0b:fd:21:80:b0:1c:95:a9:e1:3d:e9:c7:b6:0a:a6:db:c4:
3d:d6:54:86:4c:8c:51:fc:d5:d7:09:23:87:07:a7:ad:04:06:
ef:99:9e:0d:ff:4a:27:74:73:06:8f:63:60:d5:b2:98:03:90:
e7:61:53:78:68:c2:64:63:42:48:c8:74:c0:77:7a:5f:1a:c5:
e8:0a:c8:cc:2a:fc:bc:0e:ce:bb:f7:22:8e:2e:93:cc:64:55:
83:f0:77:7b:fd:76:cc:82:2d:11:1b:83:0b:35:6f:6e:32:50:
f0:2c:47:15:00:81:6c:09:43:07:a3:74:62:44:f0:9c:1c:fc:
fc:e2:1e:61:a8:90:00:4c:f3:2e:10:d2:09:2c:d3:df:b9:c6:
bd:5b:f5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:06 2025 by rpki-client on console.sobornost.net