Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/40yCVkYGTOMJYURdKu5OL8q7Bzw.roa
File: 40yCVkYGTOMJYURdKu5OL8q7Bzw.roa (raw, json)
Hash identifier: h/nti1hzbLvvpfXJilPwqQ4MgoCvDWVJCjnc6zF6lIg=
Subject key identifier: E3:4C:82:56:46:06:4C:E3:09:61:44:5D:2A:EE:4E:2F:CA:BB:07:3C
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019423D6FAD027D22012A261FB5C380CC726
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/40yCVkYGTOMJYURdKu5OL8q7Bzw.roa
Signing time: Wed 01 Jan 2025 21:47:58 +0000
ROA not before: Wed 01 Jan 2025 21:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.35.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:fa:d0:27:d2:20:12:a2:61:fb:5c:38:0c:c7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e34c825646064ce30961445d2aee4e2fcabb073c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:7c:50:87:08:84:b7:e8:16:11:fc:4c:e5:
76:c1:c9:00:d7:4f:11:1f:ef:d6:e7:f6:a3:0b:75:
2a:27:40:9e:30:8d:ee:7a:1d:72:66:0a:38:19:aa:
09:ee:78:fc:7d:32:58:d5:d1:83:80:a3:ed:67:ee:
db:f3:e0:ac:57:06:1d:08:ad:1b:ce:45:3a:82:4a:
08:3f:8f:89:30:62:f0:18:59:18:40:77:27:d3:28:
3b:e4:7a:77:bf:4a:84:0c:cf:78:7d:c7:83:3f:c1:
b6:c5:f8:c6:3e:3d:0e:97:e3:ee:f1:3c:bc:8c:54:
30:19:81:35:8e:32:e6:f4:51:a8:66:c7:d4:fa:37:
94:a6:04:a6:3d:e3:82:25:43:a5:8b:52:46:25:9d:
d2:dc:df:4d:9a:b1:b7:d6:1c:ba:a3:dc:af:5a:d6:
0a:49:89:63:19:f5:16:da:d1:9f:62:eb:41:fb:ba:
2f:92:d6:8e:39:d2:60:7b:3f:93:fa:ff:f7:f5:00:
f2:c9:2b:29:06:6e:a3:c1:bd:b9:ae:0b:76:90:e5:
9c:07:94:d4:19:47:7b:85:1f:36:2d:dd:81:77:f1:
ae:fe:66:a9:89:d6:e8:f7:0c:e2:36:c7:9b:1c:d1:
dc:4b:1a:91:74:03:46:e0:12:88:af:fd:cd:57:2b:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4C:82:56:46:06:4C:E3:09:61:44:5D:2A:EE:4E:2F:CA:BB:07:3C
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/40yCVkYGTOMJYURdKu5OL8q7Bzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e7:ce:78:38:d9:f4:88:78:6a:6c:8d:3e:a4:b5:4d:19:e8:
80:c6:b9:74:8d:cc:2d:c2:78:c9:ef:20:9b:44:bc:fd:51:ac:
94:b5:ef:ea:75:33:ff:1b:23:ac:4e:b5:7d:6f:97:9c:e1:bd:
fc:e4:db:9a:b8:2e:b8:cc:75:ca:30:de:18:b6:37:d7:a9:eb:
85:bc:98:eb:af:31:54:5f:53:54:5e:d9:c9:9f:9a:47:62:93:
ef:66:72:c5:1f:94:66:8b:5f:0e:a6:8e:88:37:98:70:ef:e3:
4c:05:b3:41:b0:2d:dd:11:e5:e9:41:6f:40:11:1c:8c:2c:20:
9f:64:aa:49:3f:08:8d:79:00:53:c0:a3:17:69:7f:cb:2d:e6:
86:33:2b:56:c1:bc:6d:f5:52:7a:31:af:0c:d4:45:11:60:df:
bb:ac:bc:20:a3:db:71:4d:a6:1b:2f:a9:b5:b2:f0:b3:ca:6a:
03:42:ec:c1:80:c7:4c:71:f9:62:10:e8:f6:f0:4b:58:6f:77:
ff:0a:5d:e8:9c:07:dc:f2:ef:cd:b0:7f:81:ae:3f:8c:bf:65:
b4:e2:8f:7e:f9:0a:71:c8:98:e2:43:ab:31:2b:13:81:3d:71:
0a:1f:62:24:24:17:7d:f0:f6:57:e4:26:b7:d8:ed:ef:a8:6d:
54:04:01:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:48 2025 by rpki-client