Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa
File: EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa (raw, json)
Hash identifier: sAVxmU6pnEn88UNK22PTFUDf8gXcyDueVttcLFRxFqg=
Subject key identifier: 12:81:35:EE:DF:0F:4D:FA:D4:B9:77:CB:F4:2E:59:92:AC:43:84:9F
Certificate issuer: /CN=d4ff51891ad44c166deeba1315966c9a1d839097
Certificate serial: 01942521F1A80241541ADBAE95F2128664BF
Authority key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa
Signing time: Thu 02 Jan 2025 03:49:29 +0000
ROA not before: Thu 02 Jan 2025 03:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28959
IP address blocks: 194.126.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f1:a8:02:41:54:1a:db:ae:95:f2:12:86:64:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Validity
Not Before: Jan 2 03:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=128135eedf0f4dfad4b977cbf42e5992ac43849f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:85:dd:e7:b1:bd:bc:fb:3e:e4:dd:79:20:a8:
02:e0:41:6e:1f:de:ee:ab:77:2b:84:7a:7a:40:89:
c0:6f:11:2e:99:93:70:23:9f:d1:b8:d9:c4:89:8a:
7f:c4:fc:d7:2a:9b:0b:06:49:bf:e8:4d:ff:ba:41:
e8:79:e1:87:e4:68:e9:f1:a6:2b:8b:5f:00:73:1f:
ff:01:f6:e9:79:21:ee:90:39:fe:3e:ef:c0:3b:ed:
6f:58:56:ff:e6:6d:33:d6:2a:52:ac:46:ac:af:c9:
71:17:ae:bd:92:39:b1:27:f8:4c:28:85:9b:2d:f5:
0d:b8:b0:77:51:87:50:5a:06:a2:77:0c:16:d5:a5:
21:92:e8:72:17:67:f6:1a:84:7c:3b:d1:ea:a9:05:
0b:f7:01:43:67:6f:54:03:da:23:b5:36:e3:39:47:
e3:18:ea:ca:f9:e1:b0:87:9a:ad:14:ad:c8:cd:29:
e5:f3:e0:77:26:7a:bf:ce:9a:29:35:fd:7f:a1:2d:
22:d7:c7:84:d6:b8:16:ed:57:a6:4c:66:c3:db:95:
d4:42:18:e2:7e:de:e7:c3:44:55:3e:4c:b6:c8:00:
58:4a:ad:f2:c0:96:49:12:35:b2:8d:92:fa:14:9d:
46:74:0a:ce:d7:2f:ab:41:75:b9:c4:c6:75:aa:c6:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:81:35:EE:DF:0F:4D:FA:D4:B9:77:CB:F4:2E:59:92:AC:43:84:9F
X509v3 Authority Key Identifier:
keyid:D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/EoE17t8PTfrUuXfL9C5ZkqxDhJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.209.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ea:8c:77:e1:5c:bc:3d:c8:de:4b:a2:8e:56:01:c9:04:8a:
ba:fc:87:f5:7a:ba:b0:bf:56:f9:74:7f:20:6d:29:5e:6a:e1:
56:eb:4c:8c:37:59:5b:3b:da:69:ee:c9:e7:3f:8b:60:d7:bb:
7a:47:2b:ca:b3:3f:e6:0e:19:ba:0c:fd:52:6f:d4:b3:1b:f1:
a0:59:dc:90:f1:00:8f:63:14:04:38:a0:26:ac:57:85:5f:40:
c1:f9:10:e2:d5:74:57:45:30:7e:4a:90:5c:bd:67:89:9c:22:
fd:fc:8c:ac:81:53:88:40:ed:f0:da:db:23:17:08:51:08:16:
2c:f2:49:80:b3:7a:d0:af:38:c8:9e:71:09:37:96:9d:8a:21:
04:a4:59:55:79:71:ec:2a:80:ea:49:8b:da:14:94:64:0e:86:
46:96:be:9a:76:dd:f2:af:e3:3e:d7:c8:6b:94:3d:99:00:56:
30:d3:25:65:0e:9c:84:76:0f:61:79:7c:90:f1:ae:da:36:f7:
50:0e:8b:54:0d:e5:67:4f:62:55:e3:50:b6:f2:0b:9e:be:8c:
c2:18:dc:d9:18:41:9d:cd:86:b0:fe:b1:e9:d3:c7:10:eb:fb:
1c:46:28:6c:47:a6:21:bf:5d:94:59:df:ce:d5:2a:65:0b:10:
97:8b:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:40:53 2025 by rpki-client