Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/pMrmZ3KyK7unt5S4RyO1ymV1xyQ.roa
File: pMrmZ3KyK7unt5S4RyO1ymV1xyQ.roa (raw, json)
Hash identifier: huCovKVCwZRD1Jyuh4oDP9/7mz4WorFE/yOJ4oY3xMM=
Subject key identifier: A4:CA:E6:67:72:B2:2B:BB:A7:B7:94:B8:47:23:B5:CA:65:75:C7:24
Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial: 0194236A28F94EC14D738329C68887E5BE89
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/pMrmZ3KyK7unt5S4RyO1ymV1xyQ.roa
Signing time: Wed 01 Jan 2025 19:49:07 +0000
ROA not before: Wed 01 Jan 2025 19:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44400
IP address blocks: 194.33.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:28:f9:4e:c1:4d:73:83:29:c6:88:87:e5:be:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Validity
Not Before: Jan 1 19:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4cae66772b22bbba7b794b84723b5ca6575c724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:0c:51:90:8c:cd:00:97:94:e7:ed:5e:e2:
71:62:8c:8c:34:91:f2:24:09:0a:f3:28:67:16:82:
b2:3c:27:e4:a5:b0:88:2c:3b:17:43:29:0c:1d:a9:
d9:40:1f:27:2e:9a:ca:7d:26:18:88:5f:8d:07:da:
66:68:bd:8d:8b:31:40:91:66:26:82:d0:05:70:9e:
a8:b7:76:3f:61:a2:fb:34:d4:94:fc:7f:01:cc:d0:
3f:10:65:74:75:e7:d2:86:39:11:b8:6e:11:ee:d3:
fd:d2:9d:fb:04:b3:b5:42:49:9b:96:9c:d8:3f:dd:
94:99:b7:bb:d5:28:00:36:6b:a6:de:2a:45:4a:81:
41:e7:f7:d7:63:d3:ec:08:35:10:9c:d2:a9:91:a8:
4a:04:1b:86:f7:22:51:c7:47:94:97:14:6b:d5:eb:
28:1f:b4:c5:46:24:04:b6:b8:7f:6b:5d:14:cc:84:
2b:75:79:8d:10:f4:bc:80:4b:a4:60:a5:9c:be:d4:
bb:bd:50:2f:40:af:3a:d3:8f:e4:46:80:64:6b:18:
62:ef:ea:7f:7f:8c:a8:0b:92:76:0f:28:7c:b7:eb:
1b:97:f5:4b:40:85:07:e5:24:c4:a9:2a:d6:f4:e6:
aa:42:5d:17:07:31:57:2b:ee:58:0b:a1:fe:18:d4:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CA:E6:67:72:B2:2B:BB:A7:B7:94:B8:47:23:B5:CA:65:75:C7:24
X509v3 Authority Key Identifier:
keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/pMrmZ3KyK7unt5S4RyO1ymV1xyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.106.0/24
Signature Algorithm: sha256WithRSAEncryption
14:74:ed:d8:21:61:09:58:f5:af:18:0d:88:0c:0c:ab:d8:10:
e2:e7:09:0e:c0:95:df:56:df:6f:99:8d:7f:9c:66:10:ee:fd:
7e:da:37:e6:39:e9:2a:f2:62:ca:af:32:f2:03:58:50:b3:44:
f8:73:05:57:13:83:59:cd:3c:10:80:67:96:54:05:ff:56:8d:
94:8d:c1:5e:5c:36:1d:50:1d:fa:95:c2:45:bf:f3:6a:2a:41:
18:58:f7:28:0c:d6:a9:df:59:f6:0e:20:12:fd:94:d8:2f:95:
2c:98:84:2a:90:62:ce:31:aa:5e:eb:a0:09:af:88:09:0c:63:
3c:ab:e3:d2:7e:0d:09:f5:f0:65:eb:aa:a7:02:af:4f:65:5c:
23:b8:45:d5:d3:32:ad:3d:2f:f2:0d:4e:57:b3:1c:48:c3:6b:
a2:fc:57:8d:49:9d:97:c5:72:76:54:c8:b2:26:cd:ef:c6:37:
88:59:c0:f7:3e:c9:3c:31:79:a4:3a:60:9b:b0:16:d4:0e:44:
82:10:ce:14:51:bd:ea:82:90:84:96:dc:cd:7f:37:f2:03:4a:
c1:60:1e:c8:3b:7f:44:26:3e:01:9d:20:50:1b:23:81:71:5c:
fc:24:9f:6c:1d:86:ef:00:5d:49:e0:87:2e:6e:f0:8b:b2:a5:
09:44:a5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:07:55 2025 by rpki-client