Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/56FwlKZ7KIhARLPC6HlmmMABBnU.roa
File: 56FwlKZ7KIhARLPC6HlmmMABBnU.roa (raw, json)
Hash identifier: Z+1GZvGlxeBEP1crVQ4oVXjpJKgbOm4WDdf1clBCOOM=
Subject key identifier: E7:A1:70:94:A6:7B:28:88:40:44:B3:C2:E8:79:66:98:C0:01:06:75
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 019422FC49636D2CCB212AB4DF827FABD0A7
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/56FwlKZ7KIhARLPC6HlmmMABBnU.roa
Signing time: Wed 01 Jan 2025 17:49:06 +0000
ROA not before: Wed 01 Jan 2025 17:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.29.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:49:63:6d:2c:cb:21:2a:b4:df:82:7f:ab:d0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Jan 1 17:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7a17094a67b28884044b3c2e8796698c0010675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:39:e2:32:ee:14:3a:4d:0a:a7:b9:06:e0:4a:
67:db:e6:95:2f:9c:1f:86:6d:93:28:04:32:34:a2:
ed:72:04:dd:8a:85:c3:ac:80:20:c4:61:3f:e6:df:
00:1a:05:31:34:e8:e1:8e:d2:b1:93:33:d3:b2:8c:
24:7d:fe:78:f7:39:a5:7a:88:5a:62:b5:80:55:ed:
3d:81:f3:ed:e7:bd:d1:d7:81:8c:b1:90:6c:66:c8:
0f:98:1d:f8:5c:d0:b3:fb:dd:4c:ad:91:42:ab:d5:
df:90:af:56:12:2c:5c:e4:38:11:bb:1c:de:d7:ba:
92:89:9b:43:8a:0b:6c:3f:af:c7:ee:93:ed:00:83:
9c:6e:47:79:5b:14:f9:59:57:7e:b4:95:55:c1:b9:
c3:95:ac:dc:50:65:b8:d6:31:56:95:14:43:c6:9f:
92:54:67:d2:62:85:9c:84:72:86:3d:20:6e:ec:80:
ff:b0:46:37:34:3e:b1:9f:7c:e4:44:5d:1f:a5:82:
14:ce:13:21:eb:3a:cb:7a:6c:9c:13:d5:87:96:d5:
e9:73:51:ea:70:e2:46:be:2b:c7:58:7d:54:c2:5d:
4f:3d:55:17:91:7a:67:21:34:14:ed:78:dc:48:cd:
a0:4b:40:49:e5:2d:16:e8:f1:c0:7e:11:a6:73:cb:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A1:70:94:A6:7B:28:88:40:44:B3:C2:E8:79:66:98:C0:01:06:75
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/56FwlKZ7KIhARLPC6HlmmMABBnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.29.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ac:84:9d:b3:88:3d:15:c1:43:4d:63:fc:35:25:f4:1c:a0:
43:76:ff:28:28:55:ac:39:f7:18:3c:a3:83:d5:a2:56:22:2b:
61:f3:32:81:d6:4b:21:fe:2f:fd:78:5b:54:15:07:e2:8b:9e:
2b:a2:26:f3:ba:c4:60:bc:8e:fa:7b:21:11:61:5d:c1:60:71:
64:5b:b4:95:9b:9f:d6:b0:ba:b9:84:90:c8:4d:54:8f:b1:2e:
b2:a6:78:f8:4b:cb:90:09:3f:14:b7:fc:b8:33:f2:b1:77:c3:
b6:66:2f:de:b0:b1:f5:c5:ad:a2:16:40:5d:a3:78:b9:bd:34:
07:b3:f9:9f:f7:3d:74:b9:aa:66:8e:e5:48:69:de:11:ca:15:
c2:16:d2:82:12:2b:83:67:0b:e6:da:0b:dc:08:e0:f4:52:71:
8a:99:e2:90:05:6e:4c:25:e5:1a:e8:43:27:1f:f2:25:9c:70:
b8:71:60:d1:67:8e:76:35:01:ac:2d:d4:b2:17:28:a6:77:9e:
09:21:ba:f4:10:04:4a:de:19:f8:19:c2:18:32:85:b3:42:c7:
aa:70:bd:2d:5d:ae:cc:db:d0:80:69:5b:49:10:5c:3d:ab:4e:
7d:05:44:aa:5f:ae:88:9f:8d:06:b2:9a:ee:16:d6:23:fb:86:
64:3e:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:45:41 2025 by rpki-client