Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa
File: 86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa (raw, json)
Hash identifier: 3J5NqPkKkcPBxfbwq2fM/SjV37VEXbNMo9GruUt6NNo=
Subject key identifier: F3:A5:0F:F7:FC:DF:5A:B9:BC:23:6C:0A:56:7E:27:A9:CC:3B:B6:04
Certificate issuer: /CN=0a203c6eff9e7422603093f83e6211da98c75829
Certificate serial: 019422202279602C967EEB90E472F1C97521
Authority key identifier: 0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 194.126.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:22:79:60:2c:96:7e:eb:90:e4:72:f1:c9:75:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a203c6eff9e7422603093f83e6211da98c75829
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3a50ff7fcdf5ab9bc236c0a567e27a9cc3bb604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:99:eb:2a:3b:38:cc:a2:74:c8:ce:62:c0:
1f:41:96:65:1d:50:71:df:70:f1:68:f6:eb:fa:27:
51:ab:81:6e:b4:5a:8b:61:0f:c5:52:f1:5d:af:ee:
a6:52:35:f5:60:34:cd:ff:bf:2a:31:f1:f1:dd:d8:
0e:4d:14:4a:27:2a:f6:f5:c4:f4:61:cf:e0:40:0a:
a0:75:fa:b0:ab:43:e1:31:4c:4b:5b:11:b5:72:2c:
6d:8f:ea:71:be:a6:6f:c7:45:7f:26:66:cb:10:3f:
c6:d6:58:a2:22:70:d5:ed:45:cb:6e:26:0a:9e:81:
23:cd:87:ad:f1:72:9d:25:c4:e4:0a:1a:f0:4e:06:
91:6f:36:0d:8e:3e:0a:e3:41:1f:1c:c5:8e:36:fb:
1c:7e:d9:e1:6a:db:10:85:da:fb:cd:a3:82:0b:da:
2c:2d:24:34:da:d1:1c:77:dc:cd:c0:25:67:c0:d7:
25:84:45:60:e6:c6:b0:73:e5:b2:88:4a:cf:2a:c2:
8f:21:7b:20:db:dc:59:50:5e:8d:e2:61:b9:6d:41:
ae:c9:7c:ac:39:c6:f2:2a:0e:81:c6:8a:6e:3e:28:
58:53:ac:56:03:52:6e:c1:cf:60:b1:30:dd:20:47:
a2:64:3a:1d:d8:94:62:0a:7a:7d:c5:36:52:c5:13:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A5:0F:F7:FC:DF:5A:B9:BC:23:6C:0A:56:7E:27:A9:CC:3B:B6:04
X509v3 Authority Key Identifier:
keyid:0A:20:3C:6E:FF:9E:74:22:60:30:93:F8:3E:62:11:DA:98:C7:58:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiA8bv-edCJgMJP4PmIR2pjHWCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/86UP9_zfWrm8I2wKVn4nqcw7tgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/77f4df-c3b9-4859-8bb2-08774b6c6bb3/1/CiA8bv-edCJgMJP4PmIR2pjHWCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.242.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:96:a8:4d:9e:8a:15:92:12:a9:79:1d:7e:08:d7:5a:82:3b:
e4:30:f1:f7:a1:21:9e:8f:43:bb:c2:c3:16:01:6d:88:43:5a:
36:4a:7c:97:e3:95:0f:50:91:59:b3:7e:ee:86:5d:49:84:f7:
42:b3:14:80:b0:7a:7d:c2:9d:c1:ad:22:5a:86:ea:2a:db:74:
7f:e7:55:ea:92:7a:60:8e:4f:cd:b6:bc:c5:67:d2:73:67:2f:
64:a0:91:45:f5:51:4a:d2:fd:bf:2f:e8:95:10:a4:0c:94:f4:
1e:7b:b3:3d:bc:03:5f:10:12:29:a9:3b:f2:e2:4e:ee:a4:35:
75:ec:fa:94:3f:0f:d6:3d:15:57:58:fe:4e:2d:0d:5d:b8:2b:
c5:30:2e:02:ab:b5:f5:a6:47:5a:a5:53:68:ad:65:4e:19:cc:
dd:28:d5:cb:b7:59:d5:69:f9:e3:f7:f7:3c:f5:a6:b1:9c:dc:
1d:27:a0:c3:e1:4b:49:13:49:73:3a:db:44:98:3a:fa:87:ab:
5d:88:af:46:44:b3:18:0b:bc:e3:76:af:17:43:c3:34:40:ab:
8b:8d:c3:14:38:50:41:57:78:b4:da:06:5b:f8:9b:10:5f:30:
76:a8:5c:8d:5e:5d:5f:f0:5a:6b:8e:b4:cb:68:d1:c4:52:a7:
72:3d:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:53 2025 by rpki-client