Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DEqIS-W_48c1fEHH-o6ksuRomQ4.roa
File: DEqIS-W_48c1fEHH-o6ksuRomQ4.roa (raw, json)
Hash identifier: hMG/UhB4v5tZQW1inX9aqniPrvbcQpiAYUZ5DPEpft8=
Subject key identifier: 0C:4A:88:4B:E5:BF:E3:C7:35:7C:41:C7:FA:8E:A4:B2:E4:68:99:0E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0194282504DF01B3001C6432105620234F66
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DEqIS-W_48c1fEHH-o6ksuRomQ4.roa
Signing time: Thu 02 Jan 2025 17:51:42 +0000
ROA not before: Thu 02 Jan 2025 17:51:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208226
IP address blocks: 194.87.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:04:df:01:b3:00:1c:64:32:10:56:20:23:4f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c4a884be5bfe3c7357c41c7fa8ea4b2e468990e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:85:36:88:36:04:f7:40:f9:90:9f:26:ad:44:
f9:3e:f0:e3:9e:c3:06:96:0a:00:d1:a2:75:8a:f7:
cb:39:f4:a4:33:06:9e:68:1b:1b:29:23:1e:f3:e6:
d5:70:75:dd:fb:bc:6b:cd:34:92:fa:6f:cd:c0:f8:
1f:9c:00:5a:85:27:92:12:bd:67:be:76:e0:eb:30:
58:86:a1:a9:38:b9:68:17:70:67:97:7d:28:8a:8a:
06:72:23:b3:ff:66:fd:05:11:6f:f0:b4:75:92:80:
ed:cf:0f:b5:38:e1:e9:b9:b7:88:49:26:fd:52:02:
b8:f7:3e:68:f2:b2:33:7e:ef:99:db:96:d8:25:eb:
6a:b1:33:64:39:6c:94:de:c1:7b:9f:ee:5f:ea:d4:
67:cd:ba:fe:70:8b:5d:12:32:d4:64:23:11:5f:6f:
95:1d:d7:1a:0e:22:5d:25:2c:af:76:b1:28:23:30:
a4:ba:fa:b7:d8:e7:a2:e0:48:f9:dc:30:92:ca:11:
bc:3f:ec:9b:fd:32:98:f5:2f:03:8c:a2:b4:84:aa:
c2:0f:0d:34:cb:e0:00:63:94:6f:71:d8:ea:6e:f3:
0a:a6:38:be:d0:88:09:1e:58:ec:b2:d3:eb:5a:87:
91:90:53:c0:a7:2d:bc:eb:d5:7f:9a:de:c8:12:4d:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4A:88:4B:E5:BF:E3:C7:35:7C:41:C7:FA:8E:A4:B2:E4:68:99:0E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DEqIS-W_48c1fEHH-o6ksuRomQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.217.0/24
Signature Algorithm: sha256WithRSAEncryption
62:91:48:5a:97:96:f2:6b:0d:89:91:06:16:b7:56:74:da:2c:
af:6c:56:11:1a:d1:3c:d4:5e:87:4d:f0:0d:46:55:02:71:9d:
52:de:31:4e:23:6a:0c:4e:16:32:87:07:ec:66:ba:ad:bf:04:
3e:34:88:7b:74:ba:4d:2e:44:a1:ac:7f:75:41:cf:57:ab:97:
82:c2:2e:aa:e1:38:0d:b8:55:32:db:bd:71:f9:fb:79:a4:da:
9a:62:37:62:df:9c:06:a1:39:7e:b0:b8:2c:7c:29:ff:e7:c5:
8b:3e:f1:b9:cb:b3:e4:56:f9:de:a4:68:78:61:bb:61:1f:2e:
e1:20:23:4a:6f:c2:af:f6:e3:a5:50:cb:18:42:bc:9d:bc:f3:
8f:1a:ff:e1:8d:85:0b:13:ae:13:d0:d8:3e:4b:60:42:c4:0e:
4d:bb:69:47:e3:21:9e:2e:67:ff:55:88:f1:dc:70:9d:cc:46:
9b:91:3d:8d:37:0d:f1:d5:89:65:f0:35:9f:91:97:a2:69:a8:
40:d2:cc:9d:00:89:84:0c:3e:1d:25:ac:b2:ca:a4:39:55:27:
e6:a5:35:bc:c7:8a:29:1f:90:ff:d0:19:72:bd:57:7a:f9:e5:
93:3f:34:e7:fb:a4:5d:df:92:69:75:56:fc:f4:b2:e8:fa:16:
98:7d:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:32 2025 by rpki-client