Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k9Dleoyyn6QjQtukOPDvn85GBnA.roa
File: k9Dleoyyn6QjQtukOPDvn85GBnA.roa (raw, json)
Hash identifier: Aj2LtZRb/jik4DeTqRAHcElubj858ioOBV7j+7Qn5UQ=
Subject key identifier: 93:D0:E5:7A:8C:B2:9F:A4:23:42:DB:A4:38:F0:EF:9F:CE:46:06:70
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824F6DE9108F3714D204AFF025CE287
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k9Dleoyyn6QjQtukOPDvn85GBnA.roa
Signing time: Thu 02 Jan 2025 17:51:38 +0000
ROA not before: Thu 02 Jan 2025 17:51:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 146943
IP address blocks: 194.87.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:f6:de:91:08:f3:71:4d:20:4a:ff:02:5c:e2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93d0e57a8cb29fa42342dba438f0ef9fce460670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:5c:6c:b2:1f:14:89:0e:86:d7:0b:4f:8e:
0d:83:87:d8:ee:07:28:90:c5:71:d2:4b:d7:d8:a2:
8a:5e:7e:d1:cf:79:a1:b8:27:90:f5:6a:8c:8e:a0:
ec:7b:fc:c6:00:c1:a7:3f:1c:84:0a:8b:ff:c2:7e:
b7:96:04:04:e4:93:64:f3:09:05:58:c0:db:8d:58:
82:27:c2:3e:a5:70:36:06:30:8f:7c:d5:13:64:c0:
a1:9c:8a:58:73:6c:59:ba:11:b3:07:78:62:09:00:
23:3c:ea:21:92:a4:e5:b6:84:28:37:af:f9:60:b9:
8e:9d:7a:bb:a4:a0:f9:e4:3b:cc:3f:d4:5c:22:6d:
e2:5b:b5:f6:75:06:b1:a9:a5:98:83:44:f9:b3:40:
c5:e3:1a:8a:9a:84:47:35:0a:98:2b:57:63:bb:37:
0a:19:15:b9:1b:00:21:67:58:d7:1f:22:2b:a9:47:
e0:25:f1:8d:55:79:88:54:e9:70:ac:90:b4:e9:ac:
51:ef:4e:83:80:1f:18:2b:b4:ca:62:06:2c:63:38:
81:dc:74:e1:d7:ca:2d:35:74:b2:25:f6:7c:e4:08:
48:92:f8:e3:d5:a5:7a:44:cf:3d:80:f7:e2:b8:c9:
fc:ef:47:ab:d9:82:85:5a:0c:4a:93:00:55:87:f4:
42:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:D0:E5:7A:8C:B2:9F:A4:23:42:DB:A4:38:F0:EF:9F:CE:46:06:70
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k9Dleoyyn6QjQtukOPDvn85GBnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
53:86:eb:47:06:d5:c9:9a:48:6d:cd:26:6a:dd:be:b5:9b:d8:
73:6a:4e:27:c9:cf:ef:ac:33:70:f4:55:f8:d8:4c:91:60:d7:
fc:e0:67:ef:7e:4e:18:30:65:e1:30:c4:d3:3e:48:9c:e3:fd:
f1:b4:e9:9b:5b:7c:7d:80:67:f7:09:ae:43:7c:56:7b:9a:16:
ff:14:80:7d:19:0d:a6:52:2a:da:dd:0d:99:50:da:70:14:68:
08:0c:8c:c0:03:30:89:88:25:6e:8d:0c:6f:b5:e5:97:fd:48:
eb:18:76:84:bb:a8:2c:20:30:8b:f6:ec:79:06:6d:5c:17:6b:
21:36:c9:6f:98:ae:f4:e6:6c:4d:51:fd:34:e2:99:4b:56:5a:
51:97:b9:40:08:a8:9d:09:54:c2:3b:ae:0a:ec:67:bd:9f:d9:
90:76:d6:85:04:f0:80:3f:e7:e8:f7:90:f8:ea:a3:d3:0c:44:
f0:50:ea:a2:a0:d0:6b:94:34:d7:a4:5f:80:af:b4:d4:4d:1b:
e1:70:e5:76:7c:25:17:ea:38:ee:5d:fe:dd:9b:1c:4b:43:87:
2b:20:a2:2a:9d:44:ab:9c:2d:ab:66:a3:03:56:0d:d5:81:f9:
14:2b:43:15:44:b2:5e:b1:83:57:d3:e2:de:6a:c9:28:2e:2f:
c2:36:b4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:25:02 2025 by rpki-client