Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m7rYVaztkM8Jswo39Xw4c9Juv5I.roa
File: m7rYVaztkM8Jswo39Xw4c9Juv5I.roa (raw, json)
Hash identifier: X/aBM73n/92ox8dS1CMjDSIS38eY0r9gSndSqHxv1PU=
Subject key identifier: 9B:BA:D8:55:AC:ED:90:CF:09:B3:0A:37:F5:7C:38:73:D2:6E:BF:92
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01942824FB2C468717625D345EC82D2FF946
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m7rYVaztkM8Jswo39Xw4c9Juv5I.roa
Signing time: Thu 02 Jan 2025 17:51:39 +0000
ROA not before: Thu 02 Jan 2025 17:51:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200113
IP address blocks: 194.87.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:fb:2c:46:87:17:62:5d:34:5e:c8:2d:2f:f9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:51:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bbad855aced90cf09b30a37f57c3873d26ebf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:c6:40:a4:4c:b0:0d:fa:00:02:4e:67:5b:
88:e5:34:c9:78:80:a3:e0:82:3a:65:89:3b:76:c4:
14:93:15:51:0d:2c:26:4c:8f:bf:e3:74:c3:1b:9c:
f9:ff:5e:ea:b5:7b:b5:f7:42:d9:69:c7:c2:20:0d:
dd:bd:99:31:1f:b8:f0:aa:4f:94:78:93:5c:98:7b:
1b:d1:a5:05:e5:73:4a:ad:31:95:bb:b2:f8:93:0b:
7a:f8:fb:03:b8:1f:78:bb:d1:73:e9:64:08:28:ae:
4d:68:e1:b3:e4:35:db:a2:e0:51:13:e8:7a:92:0c:
d1:30:7d:4f:89:9f:a3:39:38:b6:a3:ad:fb:91:5b:
5d:44:d5:14:f5:06:2c:ee:e5:8f:52:dc:87:71:34:
32:b0:b7:ab:3b:26:28:08:41:dd:c9:d8:0d:45:9b:
9a:f2:69:b5:05:02:4d:fc:08:07:81:ac:e4:bc:8a:
61:05:d0:0c:c8:64:8f:3d:d5:b8:4d:f5:fe:d2:a6:
d6:9a:8f:43:9d:2f:8d:1d:14:ed:1a:27:79:9f:17:
a3:39:ab:58:75:0e:e3:1b:d7:52:9b:25:bf:f8:8d:
e9:24:db:2f:18:d0:68:08:42:74:6e:63:96:c0:88:
f2:2e:1d:c4:42:42:af:b4:34:cc:c8:dc:12:b4:e1:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BA:D8:55:AC:ED:90:CF:09:B3:0A:37:F5:7C:38:73:D2:6E:BF:92
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m7rYVaztkM8Jswo39Xw4c9Juv5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.251.0/24
Signature Algorithm: sha256WithRSAEncryption
21:52:c7:80:04:f3:d7:e6:f9:f4:cf:d9:02:30:2e:7d:9c:59:
6e:af:e5:4c:7b:9b:9c:79:ef:18:32:b8:1a:df:32:10:55:f4:
c1:c7:d2:49:f0:86:fc:b7:96:48:e0:46:28:b0:52:40:f8:aa:
31:88:92:aa:01:4e:44:b9:4b:5b:6e:2d:31:ea:7f:85:e3:5b:
1d:c5:4a:40:e3:0d:ef:99:5a:87:c3:f6:db:fc:71:5d:96:a3:
08:3e:6c:4c:bd:c8:4e:f5:29:a3:ee:c8:d5:86:5e:ab:16:a4:
1e:03:16:91:e9:db:db:6e:98:9b:4b:da:9a:ec:6b:3a:5e:1a:
92:1b:43:5f:b1:69:c1:3d:26:2d:c8:ae:19:ec:6c:d2:ba:7e:
27:11:34:0c:05:93:4a:8e:17:09:c8:68:9d:51:7f:4f:65:92:
ba:e8:ac:ea:da:94:b4:90:3d:78:d2:68:7c:c0:2f:fb:1e:11:
c3:6b:d0:7a:11:9b:34:82:f7:4a:3c:a1:0b:42:a0:61:3d:b9:
48:b2:fb:1f:f5:8f:e9:20:f9:29:7a:4f:55:7e:07:bd:40:05:
c0:44:44:83:d3:27:70:ac:2e:fa:ef:f2:83:2f:1e:8f:c5:d5:
f3:4b:d9:61:4e:12:0e:91:39:db:c2:49:17:cc:c9:c2:f5:3e:
bd:1d:f4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:56 2025 by rpki-client