Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/_Ehrq3F22eZQSCUZ41NXs1Mis4w.roa
File: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (raw, json)
Hash identifier: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=
Subject key identifier: FC:48:6B:AB:71:76:D9:E6:50:48:25:19:E3:53:57:B3:53:22:B3:8C
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019421B245E6E20835AB5C2949EF78B24874
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/_Ehrq3F22eZQSCUZ41NXs1Mis4w.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 194.36.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:45:e6:e2:08:35:ab:5c:29:49:ef:78:b2:48:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc486bab7176d9e650482519e35357b35322b38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:af:d5:bc:78:41:5a:2f:02:99:93:a9:b2:
79:93:70:b7:ce:ba:5b:e6:c5:19:70:f3:81:39:b3:
c2:bf:85:6b:7b:6c:ae:22:5e:63:fc:14:8b:43:1e:
69:a6:73:39:c0:57:b7:a8:67:8c:b9:d9:88:85:1d:
d9:1d:68:d5:5b:55:71:d7:a2:13:ec:ce:d3:1e:8d:
a1:90:fb:ad:75:b7:84:e3:5e:b0:12:a5:8f:e5:96:
fb:f8:a6:f4:24:fa:0a:5d:1c:89:bb:ec:d3:db:0b:
71:be:89:34:e0:8e:0b:32:cd:ba:a4:39:02:9d:00:
28:59:15:22:7a:fc:cf:fb:eb:a5:12:28:5c:4e:0a:
47:a2:8c:c8:ac:96:9d:c8:49:82:ed:f3:c1:59:d4:
01:42:ec:36:21:47:8f:0c:4e:42:20:41:88:ce:7a:
88:0c:af:40:e8:a1:d5:a5:8a:3d:ff:1a:45:36:76:
cf:93:cd:05:04:da:12:44:fe:60:06:c5:1f:7c:cf:
e2:6b:16:41:e0:11:2c:06:50:07:b3:f3:81:bd:10:
d6:db:da:63:76:4c:80:70:40:de:7c:6f:7a:6d:65:
30:c7:3c:11:8d:a7:0f:67:6d:a5:e8:57:97:ea:c4:
68:87:14:74:77:19:f2:c5:37:a6:5e:3e:15:20:6d:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:6B:AB:71:76:D9:E6:50:48:25:19:E3:53:57:B3:53:22:B3:8C
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/_Ehrq3F22eZQSCUZ41NXs1Mis4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.174.0/24
Signature Algorithm: sha256WithRSAEncryption
66:a9:6a:c4:c7:e2:b0:68:70:77:12:96:fb:c3:f5:86:30:a3:
b0:4b:a5:94:f8:4e:9b:39:93:86:ab:54:b6:21:a5:79:ac:9f:
53:0d:f8:b5:22:0d:f9:51:26:ff:7f:07:52:ec:84:e6:4a:b3:
9a:31:71:1b:14:ea:b4:26:68:03:8e:48:34:46:5f:14:30:f2:
2f:e6:60:31:cc:41:11:7d:1f:3f:3c:6b:40:7f:9d:f0:c5:44:
d5:1e:70:37:d8:5a:c3:f1:22:3f:36:a4:b1:7b:cd:9c:83:d1:
2f:2f:5f:c9:f9:96:52:4b:9c:f3:24:95:b1:f8:75:01:4a:7b:
48:08:50:79:89:c0:33:2e:ce:02:9d:e9:d2:03:87:46:72:ac:
ff:aa:9f:ad:bf:1c:d2:de:af:45:b1:e4:5d:55:d3:c1:0e:7c:
d0:fa:75:3e:56:06:b4:d6:09:c3:38:d5:25:9d:44:82:63:9a:
75:37:6b:81:69:5b:6b:33:08:a0:cc:cf:2c:41:bf:f5:23:0d:
32:83:43:a5:c8:b0:4b:ab:03:ca:0e:3c:18:d7:4b:68:ce:f7:
53:fc:94:13:30:96:b3:14:99:e2:ee:f7:6c:85:c2:86:05:81:
f3:73:62:95:c3:8c:e6:b0:96:45:da:1b:7f:1c:26:18:88:14:
ff:ec:c7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:46:44 2025 by rpki-client