Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cEPGA8aDtA474orBbrCMZ3Gi1W8.roa
File: cEPGA8aDtA474orBbrCMZ3Gi1W8.roa (raw, json)
Hash identifier: pausTXeXRNX3K1Us65H9IMpkBD2TRrUopZeOUd6W0po=
Subject key identifier: 70:43:C6:03:C6:83:B4:0E:3B:E2:8A:C1:6E:B0:8C:67:71:A2:D5:6F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824FD634CF9E6BE3C88D2A8F5EE0C12
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cEPGA8aDtA474orBbrCMZ3Gi1W8.roa
Signing time: Thu 02 Jan 2025 17:51:40 +0000
ROA not before: Thu 02 Jan 2025 17:51:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203172
IP address blocks: 194.87.20.0/23 maxlen: 23
194.87.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:fd:63:4c:f9:e6:be:3c:88:d2:a8:f5:ee:0c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7043c603c683b40e3be28ac16eb08c6771a2d56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:69:e3:ba:fb:3f:d4:e3:b3:86:e3:3f:c8:
25:05:22:79:61:7c:8d:06:01:51:69:5c:34:d6:c5:
48:e1:c1:b9:a6:1c:20:ec:83:ed:a0:47:6b:44:2a:
5b:c6:dc:cd:ae:15:d6:18:c3:bd:7a:3a:b2:53:54:
45:84:2c:5c:bf:a1:b2:3e:79:45:4f:00:18:74:f1:
ec:51:0b:28:a7:a0:e3:87:87:dd:37:19:d9:1a:74:
c5:97:0f:86:70:44:40:d8:b3:16:9d:bc:a7:33:58:
f4:62:1f:d5:59:55:ae:58:f1:90:a5:f7:95:2c:ee:
ad:1d:57:d9:dc:b3:d3:de:dd:2b:ce:8d:46:c3:48:
b2:2b:e5:17:3a:1c:19:f9:c5:d6:05:c4:b2:84:37:
e8:bf:c5:6e:fe:03:7f:18:97:7f:ad:41:46:0e:e2:
9d:fb:fb:92:9c:e4:e7:95:15:6a:a1:a5:6e:bd:09:
a4:30:c3:7b:2f:da:15:58:a8:e2:00:b8:68:be:7c:
ad:fb:35:38:2f:fc:78:eb:36:bd:1a:f4:13:85:d5:
f5:42:af:59:c3:bb:5c:45:66:4c:5e:38:8e:5d:41:
5e:28:ca:14:b3:52:52:1b:6b:80:68:06:3b:3d:7a:
4b:2c:f1:47:22:9c:87:bc:ee:d0:34:44:04:9b:43:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:43:C6:03:C6:83:B4:0E:3B:E2:8A:C1:6E:B0:8C:67:71:A2:D5:6F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cEPGA8aDtA474orBbrCMZ3Gi1W8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.20.0/23
194.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
23:81:b4:52:ee:aa:a7:75:50:9e:ad:cd:f6:4d:6f:f1:7b:5e:
67:1a:c6:22:b7:9c:14:59:06:58:3a:e2:86:5c:28:2c:a1:c9:
bc:f3:a2:1e:2b:7b:59:80:1f:fa:45:e0:06:c9:e2:a5:7e:5f:
b3:92:49:f4:d4:56:13:8a:05:24:a5:0a:08:3a:7f:21:27:4c:
93:49:de:ff:95:00:f9:b5:bd:21:81:e3:54:6f:39:b2:2c:43:
7d:7e:68:b1:c4:5c:02:59:90:4c:d2:08:ff:dd:23:c4:bd:2c:
a7:0b:7f:a1:52:53:20:f6:aa:17:6d:1a:a7:af:6f:94:e1:c4:
59:df:07:2f:52:23:ef:33:dd:90:f4:ff:4f:60:d2:49:b2:43:
70:32:f1:d9:2b:72:09:62:da:3a:a6:7c:1e:53:61:20:31:d9:
7d:2c:b7:f1:ec:0f:32:94:17:35:1a:c7:7a:65:a8:6d:40:6b:
c5:45:eb:e9:c4:58:c1:9b:7b:b2:e7:01:34:87:aa:9e:96:72:
0c:2c:53:e8:a1:c8:fb:9c:b8:98:72:b4:f6:27:71:8f:f8:9e:
f2:da:fc:7d:6f:de:da:58:e9:77:e3:cf:94:31:f6:7d:44:37:
86:c2:1f:cf:e3:76:f5:cf:37:a7:7f:d8:0b:ab:7c:c1:e6:b6:
bf:73:23:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:14 2025 by rpki-client