Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/8ofg2JoTyb5e1GIiVqV2PdSesOU.roa
File: 8ofg2JoTyb5e1GIiVqV2PdSesOU.roa (raw, json)
Hash identifier: z/SuBS1vMLBWp74A2t3I4/K0L71UAtSRqfDU9yXXBww=
Subject key identifier: F2:87:E0:D8:9A:13:C9:BE:5E:D4:62:22:56:A5:76:3D:D4:9E:B0:E5
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 0194258FBCFDC5593E943D814EF5835CB324
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/8ofg2JoTyb5e1GIiVqV2PdSesOU.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15987
IP address blocks: 194.39.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bc:fd:c5:59:3e:94:3d:81:4e:f5:83:5c:b3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f287e0d89a13c9be5ed4622256a5763dd49eb0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:38:49:bc:97:7c:43:46:ab:dc:b3:ab:77:c8:
8d:b0:9c:aa:be:e9:de:15:2f:1e:35:5a:47:89:14:
88:e6:25:ab:d8:4c:c1:71:ea:6c:a5:4e:32:de:f6:
5a:65:bc:6b:89:1f:13:ad:e5:46:26:a7:ea:52:4b:
99:b7:57:96:1b:7a:e6:f0:52:54:61:94:c0:44:30:
67:57:bb:d0:c2:ae:5b:01:8b:5e:0a:8c:f2:e0:ea:
4b:8d:05:b7:5e:f3:e3:36:c1:ea:30:69:c0:85:c0:
b1:81:b4:07:c3:94:74:9e:18:44:cb:ec:41:94:46:
fa:ea:4b:11:55:0c:15:be:0b:71:0c:f5:b7:e7:3f:
11:f2:21:04:b5:63:b6:51:3c:a9:ae:9a:0b:57:67:
a5:68:78:dc:86:7c:ca:fb:80:f9:3d:9e:e1:da:9b:
77:83:f9:ba:24:7c:c6:f8:f6:68:df:7c:bc:3d:39:
d3:fe:08:f6:8c:48:c0:39:9b:37:fc:26:b4:b9:a2:
37:c0:e0:1e:4d:9b:04:d7:bd:e5:74:fc:2d:ed:fd:
6d:0b:a3:ee:75:09:59:91:50:94:1b:62:37:76:02:
93:fc:fa:11:28:d1:0f:32:23:2b:0f:e5:39:2a:ed:
0b:58:e1:99:4a:9e:33:23:d5:7d:dc:c4:25:a8:81:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:87:E0:D8:9A:13:C9:BE:5E:D4:62:22:56:A5:76:3D:D4:9E:B0:E5
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/8ofg2JoTyb5e1GIiVqV2PdSesOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.186.0/24
Signature Algorithm: sha256WithRSAEncryption
77:97:89:56:36:8e:ed:68:38:0f:4c:e8:14:8f:d8:46:cf:42:
66:21:27:30:55:c0:67:09:82:5d:2c:73:70:6d:24:c0:c4:c1:
38:31:c7:db:b8:7a:95:26:ae:76:76:d8:3e:5d:51:b1:aa:5f:
c7:2b:83:48:24:56:12:43:7d:01:54:6f:e0:2f:ff:60:90:17:
a5:7b:ac:23:e0:c6:60:f4:2b:92:64:db:ab:ca:f1:01:19:4b:
62:33:e4:18:a7:24:f6:78:a0:4f:c7:1b:58:2a:24:be:53:b3:
a9:17:fe:a0:6c:55:ec:d9:00:72:2d:3e:c7:a1:9b:6c:47:2c:
ce:ee:c6:35:43:c6:e4:55:fe:4c:f9:70:ed:9a:74:b7:73:24:
a0:cb:e1:f4:a8:b9:32:93:4c:ea:08:fb:36:e9:ae:eb:d3:40:
6f:a7:26:1f:7d:0a:b9:02:11:44:9c:11:27:13:3e:43:83:e5:
a5:6f:1c:35:0a:c1:1e:d3:0c:79:af:d0:3e:8b:6c:6f:73:18:
62:a1:a5:33:7e:b7:a6:1e:e6:55:77:6b:98:9e:92:36:8e:9a:
2a:0a:e3:93:70:25:79:fe:f0:49:08:35:ea:0e:b8:87:57:5e:
af:f8:44:f2:ea:41:4b:16:05:15:ed:f3:0c:42:c9:29:bf:36:
bc:ab:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:41 2025 by rpki-client