Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u79p1mJqH8_kcHTW4sY5nD69l-U.roa
File: u79p1mJqH8_kcHTW4sY5nD69l-U.roa (raw, json)
Hash identifier: Fcct8gluXzp3IHveI/kMat20Zm7szn50gXn3vOOvVUg=
Subject key identifier: BB:BF:69:D6:62:6A:1F:CF:E4:70:74:D6:E2:C6:39:9C:3E:BD:97:E5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247ABDA203A508A70FCFBC36B094CE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u79p1mJqH8_kcHTW4sY5nD69l-U.roa
Signing time: Thu 02 Jan 2025 17:51:06 +0000
ROA not before: Thu 02 Jan 2025 17:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43391
IP address blocks: 194.180.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:7a:bd:a2:03:a5:08:a7:0f:cf:bc:36:b0:94:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbbf69d6626a1fcfe47074d6e2c6399c3ebd97e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:09:09:24:43:c1:7d:90:ac:6b:8d:67:29:
4f:77:f0:0d:2d:21:8a:0a:ef:11:53:5c:42:17:ab:
12:87:24:c9:8b:ad:d3:77:7c:3f:02:de:c3:0d:c9:
ea:5b:c3:f3:0d:17:a0:a4:72:00:09:84:e7:45:58:
9a:7e:42:32:7b:7a:1f:fe:94:74:90:2a:41:01:8e:
5e:c1:94:41:2b:68:b7:b0:3e:03:03:57:40:d2:e5:
b7:14:7a:5f:88:d3:36:a7:44:c4:24:42:a8:7a:bf:
5d:0c:45:02:7f:0a:ae:e6:66:8a:03:93:08:11:23:
aa:d8:ca:38:ca:ec:ee:c3:c8:6b:23:cb:15:28:3b:
59:54:00:5e:15:d1:70:e1:92:31:ff:57:86:22:29:
8e:21:0a:17:89:cf:9a:0b:85:d9:40:d7:c6:89:63:
78:ac:bb:5f:eb:06:62:3b:27:d8:a6:ee:75:4d:ce:
c5:02:88:a7:19:74:34:67:2f:c6:13:51:95:76:10:
33:87:56:95:87:d7:52:b4:47:be:da:5f:ee:b3:c3:
4f:5e:36:78:93:51:b6:66:34:ca:3d:4e:0c:5f:2a:
24:b6:b8:90:ab:0b:35:0d:ed:f6:08:5a:07:c7:ac:
9a:29:ca:e8:7a:de:47:70:58:89:a3:06:6d:7c:88:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BF:69:D6:62:6A:1F:CF:E4:70:74:D6:E2:C6:39:9C:3E:BD:97:E5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/u79p1mJqH8_kcHTW4sY5nD69l-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:1d:f5:8e:4e:39:e2:56:89:16:e4:59:87:7e:1e:9d:9d:09:
66:96:20:24:57:2e:67:8b:97:8f:93:bb:b5:b4:10:61:74:3d:
f2:13:c9:70:af:da:f4:5f:84:2a:ab:59:c4:71:d9:80:13:e9:
18:8b:bb:b9:40:4e:be:5f:0d:a1:be:bb:0d:f9:55:c8:30:ec:
2a:55:e3:be:9f:7f:8d:9f:b4:92:ee:7e:c0:ed:31:b3:49:9d:
54:58:7e:a2:98:1f:4b:51:21:99:f5:62:aa:d6:b7:29:02:8b:
84:15:8d:0a:d9:3c:81:5b:de:db:83:21:3c:61:bc:8e:0b:34:
a2:fd:f3:78:ef:0d:99:1b:5b:93:e7:46:13:cf:9a:fb:d1:69:
ba:22:b1:cc:be:95:9d:f2:6e:d1:e6:c9:d9:aa:fc:ba:dd:37:
88:fd:f8:a8:cc:eb:8a:1b:61:7c:cd:b8:37:8a:ad:43:80:41:
ad:d5:9e:4f:4d:8f:b6:aa:4a:77:e8:17:65:34:e8:e4:e5:f1:
8e:5f:c1:d1:ed:30:47:24:03:e0:f1:b0:a9:44:2f:f8:1b:5b:
96:3a:5c:d8:f7:73:55:35:88:7d:10:c9:df:53:43:ab:86:67:
56:ca:d7:d5:e4:05:81:97:b4:fc:b3:43:1e:2b:3d:cf:03:6f:
fe:28:3c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:14:44 2025 by rpki-client