Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/casId6bSRHTNn5PL96DuG2TJvlE.roa
File: casId6bSRHTNn5PL96DuG2TJvlE.roa (raw, json)
Hash identifier: L+JMLEBjCTLo3pT1VkKD/pB+PbvKkE5XXjy3KroLN1g=
Subject key identifier: 71:AB:08:77:A6:D2:44:74:CD:9F:93:CB:F7:A0:EE:1B:64:C9:BE:51
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 01943BEE4748803CA1A736A6F13A2E415E47
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/casId6bSRHTNn5PL96DuG2TJvlE.roa
Signing time: Mon 06 Jan 2025 14:04:19 +0000
ROA not before: Mon 06 Jan 2025 14:04:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41745
IP address blocks: 194.147.33.0/24 maxlen: 24
194.147.34.0/24 maxlen: 24
194.147.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3b:ee:47:48:80:3c:a1:a7:36:a6:f1:3a:2e:41:5e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Jan 6 14:04:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71ab0877a6d24474cd9f93cbf7a0ee1b64c9be51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:94:f9:3d:82:f1:ac:c6:a3:a9:e3:d7:fb:
5c:2a:6c:35:61:7d:1d:a0:0e:a2:1a:c4:4f:b2:58:
a2:51:88:19:e4:e0:71:d9:c2:ee:ac:15:08:fb:39:
8c:9e:c3:f4:72:06:ca:b3:97:fd:85:51:bb:7f:48:
8b:ea:7d:c9:cc:6f:2f:6e:85:db:29:73:12:ab:8e:
be:2c:fb:e3:a7:08:48:d5:e9:4c:7b:cc:b3:ca:30:
5c:bd:1e:7c:92:86:3a:5f:dd:44:ba:79:1d:cd:cc:
dc:83:5e:71:18:d9:1a:87:13:f8:67:9a:09:37:24:
d2:49:52:e8:74:ee:d9:03:b0:40:f4:9c:ef:f6:bd:
fe:89:10:a2:84:aa:8b:06:4d:fc:24:4f:6e:3d:f0:
f9:f9:6d:a1:4b:f2:17:0f:6b:88:40:5c:9b:57:3e:
11:c6:65:88:c6:12:b7:0e:a6:bd:80:98:99:44:df:
37:1f:1b:f7:ca:d0:2c:fb:e0:99:71:c8:f8:3a:65:
60:4e:9c:89:1e:d5:c2:d5:06:25:fe:23:78:e0:c1:
59:a8:21:24:f6:ba:31:45:f8:d1:e0:90:c0:d1:05:
94:90:38:68:d3:c5:4d:f8:dd:d4:43:09:e4:0e:c1:
47:15:99:21:97:c1:50:df:5b:d6:e3:e6:b1:13:31:
09:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AB:08:77:A6:D2:44:74:CD:9F:93:CB:F7:A0:EE:1B:64:C9:BE:51
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/casId6bSRHTNn5PL96DuG2TJvlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.33.0-194.147.35.255
Signature Algorithm: sha256WithRSAEncryption
40:59:2a:ae:db:b0:50:b2:e6:bf:f8:42:32:61:67:0b:4a:9f:
a5:ee:84:a6:5a:1f:7e:48:87:76:5e:ab:b3:7a:4d:56:83:72:
21:26:95:ce:78:a9:3b:43:52:2f:f3:21:2b:c3:69:9b:83:e6:
19:e6:4a:b0:dc:0a:01:d5:94:c6:14:59:24:39:ee:b5:4c:34:
a8:b8:02:4f:8c:a4:ef:25:12:f5:55:af:61:7e:07:88:d9:51:
9f:4f:79:19:41:89:7f:bd:19:05:23:1b:9f:07:c1:04:71:9f:
c1:6d:a3:1c:86:3f:4b:f0:7e:1b:56:09:c5:20:ec:7e:26:80:
6b:15:9b:33:33:45:cb:5f:d9:c0:6b:b2:61:7e:16:36:61:6d:
05:23:ad:bf:de:0f:6d:14:b7:0d:2d:3a:a8:93:d7:73:d8:52:
94:25:67:30:11:74:29:5d:5a:ae:d6:6b:73:2a:0e:d6:f9:a5:
2e:f7:48:b9:eb:a5:ca:ad:6c:99:47:ba:8e:09:55:22:28:00:
32:18:cf:aa:cc:9b:f7:79:bb:d7:87:42:ca:b9:9a:52:f9:8f:
37:cc:d8:53:dd:76:73:8c:66:a2:ce:dc:19:70:87:47:62:48:
28:77:2e:8a:68:bd:2e:25:d0:42:49:78:29:71:63:45:c3:b1:
e3:41:26:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:16 2025 by rpki-client