Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/buI3YKDrfWPqXXHZRlTS3-bj0cs.roa
File: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (raw, json)
Hash identifier: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=
Subject key identifier: 6E:E2:37:60:A0:EB:7D:63:EA:5D:71:D9:46:54:D2:DF:E6:E3:D1:CB
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019421B24BFFFA88D801D559CB95C8D83208
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/buI3YKDrfWPqXXHZRlTS3-bj0cs.roa
Signing time: Wed 01 Jan 2025 11:48:40 +0000
ROA not before: Wed 01 Jan 2025 11:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214366
IP address blocks: 194.147.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4b:ff:fa:88:d8:01:d5:59:cb:95:c8:d8:32:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ee23760a0eb7d63ea5d71d94654d2dfe6e3d1cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fe:8d:1a:a8:d5:ed:d3:3d:72:df:27:02:d9:
26:90:43:61:2b:a2:34:21:a0:4d:62:ae:46:20:d6:
90:e5:a7:da:5e:d2:06:50:54:ce:ac:32:69:9e:a9:
ea:f8:23:89:98:d9:16:81:c0:04:50:9d:2d:51:41:
0a:87:ca:c2:ab:58:2b:97:44:ef:25:24:1d:6d:1a:
07:dc:ba:7a:cc:e1:09:26:bf:e4:26:b0:65:ee:0f:
5a:47:a4:55:09:49:48:ff:36:36:85:a8:ee:b4:3e:
cd:77:08:94:3f:ef:4a:61:f4:bf:64:e5:49:8d:16:
37:13:8b:76:60:7d:77:25:fa:e8:47:b0:22:da:9b:
ca:ce:a6:fd:66:e5:c7:0b:6c:4e:4a:e7:a8:28:71:
ad:4a:af:c1:f9:60:0d:93:dd:c8:73:dd:2e:b3:2a:
74:42:0b:f3:42:dd:7e:12:4e:fe:a2:7b:b2:d2:4d:
22:ef:26:38:f0:98:82:5c:47:9e:80:fb:7e:5c:70:
80:e5:75:b3:c9:36:00:d7:84:3b:84:78:76:78:9a:
87:3f:12:ea:b4:fb:c9:e4:76:51:02:cc:df:e7:f3:
f0:55:25:5f:ec:e0:f8:53:78:64:f3:36:ea:8c:51:
bd:68:b4:3c:83:ee:a2:99:f3:62:64:6b:78:2a:d7:
55:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E2:37:60:A0:EB:7D:63:EA:5D:71:D9:46:54:D2:DF:E6:E3:D1:CB
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/buI3YKDrfWPqXXHZRlTS3-bj0cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.140.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:7c:0d:6f:2d:83:b7:b0:8f:a7:79:7f:3b:0a:61:e8:58:87:
fb:f4:b4:92:da:72:c8:1e:10:36:ab:93:d4:a4:ed:3d:2c:25:
2a:e3:67:40:dd:f8:92:82:76:50:9e:83:11:42:fd:d3:35:91:
2c:1c:f7:69:b1:ad:07:7b:63:c9:78:21:78:7a:81:40:ca:4f:
09:8d:a2:35:9c:49:61:c5:dd:13:3b:ac:10:0a:1a:ca:17:64:
7d:4e:e6:c2:0d:50:be:97:95:68:81:69:f2:b3:1b:c4:ba:8f:
77:9a:57:8d:9a:56:6a:72:6e:4b:bf:dd:99:78:b9:85:60:19:
32:a7:a5:ad:22:ab:12:59:90:b1:ca:17:8b:a9:10:c5:ac:85:
3e:b5:6c:b8:d2:45:aa:7a:e3:be:34:bc:8f:d7:60:45:74:32:
d3:8e:fc:96:42:51:47:71:ac:87:2f:12:ee:dd:12:ec:cd:f1:
88:01:9c:04:ec:74:11:27:a4:60:e8:65:39:25:57:e7:d0:81:
0d:a8:52:17:71:23:89:69:ac:e1:51:5d:87:bb:3f:4c:64:77:
23:7f:2c:ad:43:d0:01:01:7d:d2:04:82:8b:f4:89:be:c7:9c:
0a:ab:58:73:3a:2e:4b:64:aa:e7:bc:45:5f:bb:63:f3:4e:94:
0b:ef:35:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:11:07 2025 by rpki-client