Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/9VQnH-9sd7nGshve_4r1C2nYakY.roa
File: 9VQnH-9sd7nGshve_4r1C2nYakY.roa (raw, json)
Hash identifier: Z02F3WYNcnzG8yizQnWEGco/cel18dqYBCQHGg9DCTg=
Subject key identifier: F5:54:27:1F:EF:6C:77:B9:C6:B2:1B:DE:FF:8A:F5:0B:69:D8:6A:46
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 019425216119CE55DE63E8A960303F24D7D4
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/9VQnH-9sd7nGshve_4r1C2nYakY.roa
Signing time: Thu 02 Jan 2025 03:48:52 +0000
ROA not before: Thu 02 Jan 2025 03:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202391
IP address blocks: 194.147.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:61:19:ce:55:de:63:e8:a9:60:30:3f:24:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: Jan 2 03:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f554271fef6c77b9c6b21bdeff8af50b69d86a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:77:be:3e:52:14:b7:72:98:43:7d:f9:83:
9b:1a:f0:a8:84:44:46:75:b4:cd:1e:62:98:05:d6:
14:57:83:4b:ab:4a:51:c6:b7:0e:38:ad:b9:a2:62:
35:d1:4a:ed:17:da:70:bf:5e:43:32:d5:ab:e9:7b:
bc:4a:81:7c:df:a9:1c:67:d9:3a:b8:ae:d4:76:08:
8c:23:98:7f:95:b6:16:8f:af:40:f6:db:62:ce:a5:
9b:6e:db:73:80:39:91:d6:07:ac:4c:cd:ed:7a:41:
93:d9:86:04:c6:60:85:73:14:77:88:16:f5:42:fe:
b9:1b:80:5e:85:b0:c8:29:5c:70:e5:ec:f6:c2:a6:
f4:19:3b:cb:f6:99:56:4d:e5:6f:02:4a:75:af:09:
5c:46:00:a3:b5:63:49:00:74:8f:8e:45:6d:d7:a1:
7c:0c:57:5e:9f:89:5d:fe:dc:44:0e:dc:67:00:46:
6f:cd:a9:7a:63:54:38:0a:9e:74:1e:4b:34:76:e3:
b0:ef:ce:1e:72:3d:49:06:ca:ab:2b:b6:ba:34:8d:
37:c1:7c:2f:86:4a:1b:d6:0f:42:74:ba:cd:ed:01:
83:56:92:2b:ba:75:28:de:1e:c2:bb:5b:30:35:08:
a1:d8:0f:a1:91:71:c4:07:8e:08:bd:1f:5f:22:e3:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:54:27:1F:EF:6C:77:B9:C6:B2:1B:DE:FF:8A:F5:0B:69:D8:6A:46
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/9VQnH-9sd7nGshve_4r1C2nYakY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.164.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:30:12:0b:42:16:5f:29:50:83:1a:e5:bf:76:b9:96:b1:44:
3e:79:43:13:35:84:59:23:9d:ba:af:15:ea:2f:b8:41:53:4a:
99:b5:d0:e7:f4:0c:30:bc:36:5e:14:44:ab:61:e2:d1:b2:ea:
b0:79:29:b4:b0:c2:e2:0f:e3:da:a3:a6:1f:8c:39:b6:f3:fe:
38:86:53:77:47:b0:e2:a1:53:33:7a:0e:e3:a2:b0:95:67:ca:
2a:1a:6b:f7:8c:ca:1b:19:31:04:60:c5:d4:35:50:74:de:98:
1f:86:06:41:f9:61:a8:8b:36:da:ee:b6:6f:b4:cf:3c:10:2f:
c2:40:8f:55:ba:65:84:65:d3:30:30:1c:c7:f1:09:9a:72:9b:
f5:19:1f:d3:a1:70:d7:03:7a:95:59:1f:ee:c8:bb:2b:12:a7:
61:24:33:72:88:6e:42:3d:80:07:3e:4a:00:51:a3:72:41:4c:
d1:74:31:e4:a6:bc:94:fe:5e:6a:52:97:17:eb:66:3c:4f:95:
b9:1b:4f:44:01:48:00:61:00:dc:14:76:e5:c0:4c:1c:0b:cd:
5e:75:ca:0c:88:ec:c2:c5:4f:3e:95:c6:09:5c:da:73:7e:3a:
dc:99:d2:89:32:b8:d0:be:29:19:bf:96:19:a3:1a:a0:e9:9a:
a2:ac:6b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:31 2025 by rpki-client