Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa
File: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (raw, json)
Hash identifier: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=
Subject key identifier: 13:F8:29:45:7B:35:C3:22:63:D4:23:2B:B7:83:FA:1B:35:45:B3:85
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 019426D95AA87B898B969EBC9DEA711B5275
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206813
IP address blocks: 194.113.54.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5a:a8:7b:89:8b:96:9e:bc:9d:ea:71:1b:52:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13f829457b35c32263d4232bb783fa1b3545b385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:82:e5:96:05:28:f3:c4:d7:f6:b1:72:f1:
eb:69:8c:85:8f:e7:45:4c:14:85:36:92:51:26:39:
ad:cc:ce:d1:64:0f:7a:71:e5:f5:90:e6:5a:73:4d:
1a:57:78:74:4a:49:d8:3f:29:a7:92:b6:3e:15:88:
e2:c1:fd:09:99:db:27:62:92:ab:78:e8:76:cc:71:
7c:8b:f8:37:92:e1:79:1c:4b:46:86:9f:b1:45:50:
6f:66:a9:e7:a6:fe:b2:14:c3:e6:0b:f4:89:cf:a2:
cc:d8:92:c7:11:4a:1d:a8:52:50:ac:ad:7a:6d:29:
6a:5a:67:85:c3:73:7d:2d:04:b1:39:8b:99:b7:12:
27:9a:2f:4e:a3:da:11:a1:17:98:27:ba:80:97:80:
68:3f:02:ac:82:7d:8e:7e:4c:48:68:47:49:0a:36:
f6:fe:55:62:0a:ee:59:76:e5:ec:86:a7:4f:52:29:
e5:73:2e:fd:30:9d:56:66:17:d1:87:d4:35:ea:5a:
4d:7f:d5:6c:e6:50:9a:e8:d9:36:13:14:89:31:94:
f2:6e:c1:fc:a1:d0:b8:45:35:fb:5a:c9:e8:15:0d:
d9:46:7a:83:5a:73:25:d0:9b:3e:d7:b8:b8:6e:90:
b6:88:87:4a:73:68:e3:19:69:54:4f:12:95:5f:ed:
af:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F8:29:45:7B:35:C3:22:63:D4:23:2B:B7:83:FA:1B:35:45:B3:85
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.54.0/23
Signature Algorithm: sha256WithRSAEncryption
83:a3:6b:b6:0a:28:1d:48:8f:8a:9c:a2:27:a2:22:6d:0c:1e:
e4:f7:97:b9:5f:44:47:ff:58:4c:45:c1:71:2b:ca:f5:e5:41:
5a:db:88:b9:63:af:91:3e:72:08:5c:7f:c2:5a:26:db:c8:8b:
86:0b:8d:05:eb:74:ac:36:75:6d:72:10:f7:c0:69:47:03:51:
84:85:33:18:c4:7f:cb:0f:02:d2:44:b2:e9:03:02:90:bf:58:
4d:90:6a:97:b0:58:21:f1:f3:b7:7d:87:c6:fd:20:40:e9:a0:
63:68:ea:31:08:c5:d9:46:07:b8:5f:d9:43:c7:00:d8:08:f4:
5e:f0:c4:69:7d:55:46:65:83:96:2d:20:6f:c5:4d:77:a2:d0:
db:ef:90:f0:7c:f9:3e:b5:5d:a4:64:57:c8:fc:3b:c9:70:14:
73:3a:75:0d:7b:01:e1:1a:5c:ee:0c:74:7c:11:18:db:01:65:
d3:29:61:cf:eb:9f:27:e9:a1:2c:91:89:03:05:32:d6:c6:17:
b7:4a:d3:41:44:d7:ef:66:1f:7e:54:73:a6:44:e2:bf:8f:c4:
64:6f:b3:0a:03:34:0d:69:1e:03:ed:c8:e9:a7:8b:69:ab:63:
0d:2c:0b:bc:b7:62:9f:e8:d9:9e:11:60:a5:b8:18:c7:53:e5:
93:a8:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:54:57 2025 by rpki-client