Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/66ywR3ba4enexaVdWoqndnOvp4U.roa
File: 66ywR3ba4enexaVdWoqndnOvp4U.roa (raw, json)
Hash identifier: Qkz3r6su/bj0dLkhbVaX1i/95TsjjuS65tg9qxOjli4=
Subject key identifier: EB:AC:B0:47:76:DA:E1:E9:DE:C5:A5:5D:5A:8A:A7:76:73:AF:A7:85
Certificate issuer: /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial: 0194282658DA2945DE2B9A015D6B0D1EB59A
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/66ywR3ba4enexaVdWoqndnOvp4U.roa
Signing time: Thu 02 Jan 2025 17:53:09 +0000
ROA not before: Thu 02 Jan 2025 17:53:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 194.102.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:58:da:29:45:de:2b:9a:01:5d:6b:0d:1e:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Validity
Not Before: Jan 2 17:53:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebacb04776dae1e9dec5a55d5a8aa77673afa785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:b3:a7:9b:1a:a1:9f:09:c1:fb:c0:05:83:
fa:e7:54:d5:62:79:50:fc:ec:e9:de:ec:85:4e:ce:
12:a4:96:b2:cb:ae:9e:ef:30:b2:85:72:29:bc:8f:
c3:36:c7:bb:f3:ad:a9:39:06:6b:73:ce:87:4c:90:
b9:54:28:e1:9d:fa:fa:11:4f:91:a3:16:4b:c4:db:
88:08:57:14:21:67:fc:be:cb:7c:be:0c:29:ed:d1:
35:b2:b2:78:19:b4:4b:a1:d6:b4:ef:a4:bd:01:d4:
c1:c0:9b:00:ef:5e:5f:89:a1:10:69:58:7e:02:33:
e5:6f:74:d7:d7:c7:c6:05:7b:72:3f:b6:78:b2:e7:
fe:d7:54:60:bd:b5:5f:57:37:0a:7d:90:72:91:4a:
45:02:f9:04:a6:8d:77:14:94:25:72:53:18:40:37:
a0:24:96:d0:74:1d:5b:75:bb:33:11:07:89:87:c1:
0b:68:12:00:68:97:f0:2a:3e:69:f8:7d:65:cc:8c:
52:bd:30:35:6c:a0:b4:10:7d:c2:e5:13:b2:db:b1:
cb:ac:bb:db:21:7b:64:b7:0c:27:30:99:a8:66:f9:
63:6c:7e:77:69:5e:65:4a:09:6b:89:c9:cf:07:87:
4a:b8:b6:81:b9:2c:8b:e5:73:e5:ea:52:45:de:48:
60:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AC:B0:47:76:DA:E1:E9:DE:C5:A5:5D:5A:8A:A7:76:73:AF:A7:85
X509v3 Authority Key Identifier:
keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/66ywR3ba4enexaVdWoqndnOvp4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.102.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d3:b3:2f:97:ed:59:8c:19:d1:95:e3:65:9b:fe:22:49:98:
f1:89:b8:49:ca:87:5f:78:93:4d:f2:4e:bf:ad:7c:29:64:86:
e6:1d:28:b7:47:3b:93:ff:8c:cb:ab:81:d0:25:83:61:3d:99:
fe:3d:5e:05:9b:3a:4c:53:01:ef:e5:f7:a8:4a:d7:3b:3f:71:
e1:56:17:75:d4:fa:2a:bf:59:c4:ed:8d:24:08:80:a1:42:24:
aa:6e:99:34:bd:5c:d1:70:2a:61:57:83:aa:ef:4a:31:53:90:
57:38:5e:10:91:18:ae:38:b0:63:8d:91:d2:26:88:e7:19:b3:
2b:40:92:72:f9:2a:b5:02:fe:df:a5:f8:1b:3a:d8:b8:d5:e3:
01:b5:0f:eb:46:9c:46:50:a7:24:3f:12:d7:9b:5f:f0:b3:5f:
ea:1a:33:81:cf:d3:d1:dc:dd:c3:a9:48:53:bd:d3:8b:bd:20:
a9:c1:2b:d4:32:c1:3e:88:a9:60:48:7c:6a:31:76:11:4c:10:
db:d1:47:cf:a7:d5:93:f5:f3:53:57:78:51:19:19:2c:27:b2:
0d:51:02:c6:c3:56:e9:b0:01:b5:e1:ad:db:eb:a2:2c:82:d1:
a2:eb:f1:0d:b8:f5:4b:17:e4:41:d0:9f:91:2f:29:92:15:bf:
93:7f:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:18:34 2025 by rpki-client