Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6iualezP1C3Qp1AntUo25nlZCaU.roa
File: 6iualezP1C3Qp1AntUo25nlZCaU.roa (raw, json)
Hash identifier: SnjQ4oyxFRIkxexUT6ZLCWPwDyPIclvEb5jOXDT5GVA=
Subject key identifier: EA:2B:9A:95:EC:CF:D4:2D:D0:A7:50:27:B5:4A:36:E6:79:59:09:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019446651D69BCBFDC03563C95B97593FE78
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6iualezP1C3Qp1AntUo25nlZCaU.roa
Signing time: Wed 08 Jan 2025 14:50:19 +0000
ROA not before: Wed 08 Jan 2025 14:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198037
IP address blocks: 192.124.189.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
194.87.25.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:65:1d:69:bc:bf:dc:03:56:3c:95:b9:75:93:fe:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 8 14:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea2b9a95eccfd42dd0a75027b54a36e6795909a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:aa:17:b0:92:fe:65:d6:dd:4f:e4:b9:be:
a3:16:e7:6c:c9:4e:26:8a:a5:54:09:2b:2d:7f:dc:
b7:84:cc:c2:47:91:7b:4e:1f:70:7b:0b:c3:fb:0b:
e9:f7:95:01:34:ba:e2:17:6f:d3:9d:4f:e2:ae:48:
37:27:33:af:25:09:96:26:08:5c:c2:82:b1:e1:b6:
ed:1f:40:e5:ac:cf:4b:5b:82:02:23:5c:82:87:44:
63:70:13:0c:b2:da:e3:10:b6:19:ad:42:f4:c7:82:
03:06:0b:17:bf:e5:e3:be:d5:d3:54:44:cb:7d:3c:
1a:ee:60:93:c8:77:b3:e4:e5:43:2b:7c:dc:9e:26:
2a:f2:8b:87:60:22:8a:b2:7e:b3:a0:6b:28:bd:48:
99:c3:36:51:1d:86:00:cd:76:73:94:b8:c2:9f:ef:
ae:13:33:7f:82:6e:98:19:c9:03:a9:77:74:ea:de:
70:e8:d3:b0:fc:2a:66:be:37:7d:b4:4e:fb:0f:d3:
31:8a:1c:8b:21:5c:74:f8:7e:7e:b3:7e:e2:f7:a2:
81:93:e1:bc:5e:1a:89:f3:59:03:63:03:89:5c:36:
92:ad:18:59:6d:31:eb:71:ef:92:e8:cc:45:3a:de:
34:e0:2d:a8:41:d5:5f:86:0f:b4:9c:19:7a:63:e0:
d3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2B:9A:95:EC:CF:D4:2D:D0:A7:50:27:B5:4A:36:E6:79:59:09:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6iualezP1C3Qp1AntUo25nlZCaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.189.0/24
194.58.41.0/24
194.87.25.0/24
195.133.84.0/24
Signature Algorithm: sha256WithRSAEncryption
28:15:7d:e5:8c:72:db:50:a5:ec:cd:7f:7d:17:7d:1d:80:d5:
0f:fa:d5:05:83:18:82:a3:bf:80:8d:ad:d3:b9:3c:f8:ba:0d:
91:04:5c:b6:bb:c4:e6:cc:4a:b0:6e:44:b5:63:1d:d2:94:85:
37:91:9f:0a:7c:3f:22:8f:7f:f5:6d:81:e2:00:ee:43:50:15:
b9:c2:80:ae:33:d4:e1:45:db:d0:f8:5b:98:ec:19:6c:3c:7a:
1d:55:99:41:f6:51:2b:26:0b:d2:6c:5b:2a:ec:05:d9:eb:cc:
9b:0d:b5:56:5b:34:d4:f5:de:8b:c0:ef:2a:17:1f:f3:4d:6d:
d3:67:65:57:59:96:53:fc:46:a3:ce:8a:4d:f6:e4:69:5f:3e:
49:90:10:8a:c9:2c:1f:d3:02:87:d6:2f:e0:d0:39:8c:5e:a6:
f0:dc:39:8c:62:2e:ea:9a:8f:e5:89:b1:91:b1:07:82:2d:35:
0e:74:71:38:ba:23:d1:ec:24:d1:1b:cc:ae:19:e6:34:5a:c6:
aa:ce:a7:b8:a9:22:81:2c:09:91:7e:1d:08:45:38:cd:38:1c:
3b:eb:04:74:e5:0f:77:3f:3b:a3:f8:1b:c3:36:c1:f6:8c:05:
c4:06:a1:77:80:29:fd:14:48:32:37:fd:02:75:7c:20:a7:14:
3d:0a:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:07:39 2025 by rpki-client