Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa
File: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (raw, json)
Hash identifier: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=
Subject key identifier: 3A:BC:F5:6F:2B:E2:E1:6D:A0:12:CD:17:43:12:EA:49:15:75:09:DD
Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8
Certificate serial: 0194221F47363DEBCD3FC0BD86ED0BB63F5D
Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa
Signing time: Wed 01 Jan 2025 13:47:42 +0000
ROA not before: Wed 01 Jan 2025 13:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8220
IP address blocks: 194.76.2.0/23 maxlen: 23
194.76.4.0/22 maxlen: 22
2001:67c:424::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:47:36:3d:eb:cd:3f:c0:bd:86:ed:0b:b6:3f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8
Validity
Not Before: Jan 1 13:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3abcf56f2be2e16da012cd174312ea49157509dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:8c:fa:ca:87:1d:f8:fc:b2:ac:8d:c0:dd:
21:49:16:90:0f:43:f7:41:2c:65:8a:a1:8f:d4:fb:
eb:02:97:9a:ef:b6:89:5c:96:f1:f3:53:f1:96:fc:
10:85:86:6b:48:5f:e9:a6:59:fb:db:9a:0b:98:28:
78:60:e6:c2:2e:e3:26:2f:41:e8:ea:96:95:f1:24:
5f:bf:b6:08:24:28:cc:9d:59:39:c2:82:dc:d2:63:
d8:e5:77:3d:eb:e2:ae:f9:15:6e:13:da:40:5f:8b:
c7:fa:db:e5:a8:0a:11:49:84:6b:e7:56:78:c5:71:
07:2b:a9:89:e3:1f:2c:13:bf:48:01:8d:92:f0:91:
75:0d:b0:d8:d7:0e:7f:a6:10:89:c5:11:94:42:f8:
9e:d6:89:cf:f1:fc:22:81:66:6d:39:aa:c9:5a:89:
26:6a:18:1d:d7:8c:92:06:d7:18:ed:0c:87:04:5c:
6c:70:5a:76:4f:e3:53:e5:5f:89:df:9a:7c:03:0e:
19:3f:37:e0:7b:04:27:07:56:08:62:42:69:5b:c7:
4b:48:3f:a9:e3:7a:5f:59:46:b0:c4:5c:1d:62:91:
07:cf:64:f5:f7:d6:02:aa:e2:08:f2:47:dc:fe:fd:
5d:12:9a:a8:0c:67:79:81:85:37:0b:43:35:00:be:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BC:F5:6F:2B:E2:E1:6D:A0:12:CD:17:43:12:EA:49:15:75:09:DD
X509v3 Authority Key Identifier:
keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.2.0-194.76.7.255
IPv6:
2001:67c:424::/48
Signature Algorithm: sha256WithRSAEncryption
05:f6:8d:56:29:a2:d3:0c:03:f4:a4:c7:02:fa:7d:c0:3e:f3:
9b:69:4d:ee:28:67:86:b9:2c:69:e6:21:c6:05:1b:24:0e:97:
ea:a0:8b:b3:b0:57:d5:af:a1:82:22:46:9f:10:d1:c3:dd:f3:
fb:a5:f9:a4:71:91:b1:2d:5f:6f:29:5b:d8:12:d5:29:ce:9a:
d4:44:1a:f9:e6:58:79:a3:5b:4f:91:1f:41:0b:96:32:d8:c9:
54:d7:df:7c:e3:1c:53:05:7c:73:4e:52:98:03:43:01:2d:e1:
0f:31:30:94:a9:80:68:29:80:9d:f2:a7:8f:9b:30:1b:a3:04:
8e:24:99:34:50:ed:a7:52:40:bb:81:2e:5f:ea:13:01:d2:9e:
7a:dd:c5:28:11:e8:11:58:e2:06:c8:51:ec:54:3c:62:bc:54:
db:07:2e:12:61:e5:ee:b1:32:96:0b:0e:e1:a9:34:1f:f1:aa:
f0:ec:38:4c:1c:c2:de:e8:0b:61:06:6b:06:0a:ec:13:06:ba:
f0:fe:c9:1f:b4:5d:46:86:7f:7c:3e:88:c0:0e:31:10:13:d9:
50:a7:8b:a2:f7:b4:de:6f:ec:64:11:96:11:10:5e:e2:8a:f7:
50:e5:40:fb:67:2e:d9:12:c1:79:2d:01:b3:bc:a3:a9:1f:74:
da:97:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:40:36 2025 by rpki-client