Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/8DzD2uq5lN_KH_22IY31T_I5eUA.roa
File: 8DzD2uq5lN_KH_22IY31T_I5eUA.roa (raw, json)
Hash identifier: YwlgZskvfXHSFdpGYunNlSWojU8CZ8UtlqZ7vcZMWHk=
Subject key identifier: F0:3C:C3:DA:EA:B9:94:DF:CA:1F:FD:B6:21:8D:F5:4F:F2:39:79:40
Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Certificate serial: 019425FDE33C09E421B61E4201145B7A4199
Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/8DzD2uq5lN_KH_22IY31T_I5eUA.roa
Signing time: Thu 02 Jan 2025 07:49:43 +0000
ROA not before: Thu 02 Jan 2025 07:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59497
IP address blocks: 194.44.90.0/24 maxlen: 24
194.44.96.0/24 maxlen: 24
194.44.97.0/24 maxlen: 24
194.44.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e3:3c:09:e4:21:b6:1e:42:01:14:5b:7a:41:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f
Validity
Not Before: Jan 2 07:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f03cc3daeab994dfca1ffdb6218df54ff2397940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:02:35:a0:68:9a:8e:78:45:90:55:67:ee:
8d:eb:e4:42:c8:7b:e9:98:91:56:a2:17:ba:a1:03:
62:87:46:1c:bc:2f:ee:b4:a8:2f:9f:c2:37:ef:14:
8a:5a:e2:37:96:39:bc:ff:c7:70:90:87:ab:68:ea:
5e:3c:48:b3:5e:2b:8e:95:8a:cb:12:ad:c4:4c:bd:
24:92:a4:05:02:d7:1f:b8:9f:a9:94:10:7c:10:46:
b1:6c:5e:e1:c7:45:ac:69:ac:2c:17:4b:0b:fe:b5:
b2:59:ac:62:db:08:68:b7:f4:9b:52:61:a6:f2:f7:
89:39:e5:57:d3:6c:a2:63:d5:4a:18:1d:7e:6f:2f:
ae:ef:aa:24:a2:81:65:4b:a6:04:68:b5:2c:eb:9e:
01:bd:16:c2:76:25:ef:12:e0:ae:3f:61:c4:98:e5:
9f:6a:03:b7:55:fd:8b:31:23:71:af:f3:f8:ca:99:
e6:30:c4:00:0d:55:7e:0b:14:f8:df:6b:42:ff:7c:
08:06:71:1e:fb:6e:1c:ab:39:ea:f8:36:d6:17:ce:
6c:29:7f:0e:f8:cd:b2:de:72:95:40:19:53:f8:8b:
d3:c3:fe:9c:dd:a0:bf:03:60:c8:13:c7:d5:6b:92:
72:6f:64:83:3c:2a:56:e9:88:f1:2d:17:21:d1:53:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3C:C3:DA:EA:B9:94:DF:CA:1F:FD:B6:21:8D:F5:4F:F2:39:79:40
X509v3 Authority Key Identifier:
keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/8DzD2uq5lN_KH_22IY31T_I5eUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.44.90.0/24
194.44.96.0/23
194.44.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:6d:3b:d9:86:53:d3:33:4a:9a:05:93:29:51:ae:72:0d:79:
3b:13:c0:c7:ae:8f:3f:38:21:0e:48:c8:f2:4b:0b:4c:9a:8b:
33:de:e3:aa:43:26:f5:ac:0f:3e:88:7e:58:b2:81:fe:cb:e4:
0b:a5:cf:8a:0b:f9:8f:86:2d:4c:41:d0:f5:5b:4f:09:d1:74:
23:89:f5:88:77:27:ad:e4:c6:28:37:f6:70:57:9c:3f:19:3f:
74:71:5a:27:96:2a:22:ce:a9:3c:c3:b6:bd:11:07:50:6b:a4:
28:8c:00:1a:ef:e3:b9:b9:c1:c1:29:ad:6c:1d:e8:50:81:37:
91:06:55:b2:10:b1:7b:e2:03:cb:56:82:11:36:af:43:93:77:
3b:53:ca:23:5e:0c:ef:c6:d5:a0:b5:ac:46:6a:cc:84:98:11:
17:35:b2:3f:d4:1d:f0:6f:21:5c:b2:4e:a3:f3:31:34:cb:f4:
64:54:28:5c:da:ee:32:24:bd:ba:c9:6f:13:98:be:de:87:a0:
4c:ee:6a:d7:fe:23:e6:31:50:9a:6d:e2:00:24:10:05:49:26:
30:5b:bc:44:08:5c:f6:c9:51:f8:8b:aa:35:ed:cb:40:37:7d:
a3:a7:ac:f3:5e:21:c4:42:d4:bf:de:8f:02:f7:18:1b:6c:e2:
ac:5d:7b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:53:56 2025 by rpki-client