Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/qu7kmExCuDOLhLu5jIOipsHVZUU.roa
File: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (raw, json)
Hash identifier: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=
Subject key identifier: AA:EE:E4:98:4C:42:B8:33:8B:84:BB:B9:8C:83:A2:A6:C1:D5:65:45
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019421B24B0338AF0BA3E7B8453848613DB2
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/qu7kmExCuDOLhLu5jIOipsHVZUU.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209428
IP address blocks: 194.180.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4b:03:38:af:0b:a3:e7:b8:45:38:48:61:3d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaeee4984c42b8338b84bbb98c83a2a6c1d56545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:08:3a:3e:aa:60:b9:d6:3e:57:5a:0a:c9:8d:
4b:32:86:c4:8d:a7:a7:bc:4f:7c:0d:dd:00:41:85:
aa:3b:a4:86:9e:61:a7:8e:cb:c8:b2:ed:cc:39:b2:
97:3c:39:b5:68:42:dc:23:05:98:72:7b:89:22:46:
49:47:b1:ac:7c:6b:d9:9f:07:29:db:5f:b6:d5:24:
49:c6:b8:21:10:1c:c9:47:fc:bd:39:f7:0f:e3:01:
08:29:a1:c2:78:b1:05:bb:19:dd:ee:96:38:6a:e3:
bf:d7:ac:03:bf:d2:32:d3:26:14:ea:ab:a2:4b:19:
bb:14:d5:5c:2d:9d:c8:2d:31:e9:fc:28:31:1f:6d:
3b:44:02:6c:88:12:9c:09:a6:5f:b6:0d:d6:ec:f4:
7d:c4:64:77:78:63:ee:71:7d:c9:ff:31:6a:10:db:
9b:3a:26:55:96:3e:cf:df:e4:d3:87:8d:a2:f9:78:
fd:75:20:7b:94:2d:c6:d5:4e:a6:54:46:7c:c6:80:
68:da:db:05:1d:41:16:06:1d:d3:78:3f:64:79:5c:
6b:67:44:b7:47:3f:b0:1e:3b:24:30:7d:37:f9:e2:
50:74:47:8d:cd:cb:b5:17:4d:31:05:77:66:82:88:
35:73:47:5e:03:72:f4:4a:74:60:e6:9e:45:ea:ba:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EE:E4:98:4C:42:B8:33:8B:84:BB:B9:8C:83:A2:A6:C1:D5:65:45
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/qu7kmExCuDOLhLu5jIOipsHVZUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.225.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4f:6c:fa:c9:a9:17:d1:49:fa:ea:7a:c1:2c:c2:b0:62:04:
d3:be:96:79:dc:00:be:a1:2f:f5:a6:f0:0b:63:b4:96:40:55:
c0:58:c6:3e:e2:bc:b8:0a:ad:53:ff:23:d4:70:55:1a:24:b9:
3e:7b:17:5d:27:1f:a4:90:e2:e7:5d:09:59:b9:47:90:7e:47:
29:f4:f7:31:69:32:1c:77:10:93:89:d3:ae:03:77:9f:8e:38:
e5:43:a3:a6:cd:75:4f:39:cb:28:80:fd:ff:1f:2c:38:5e:c9:
ff:8c:29:6d:1c:e6:c4:85:1e:21:ff:a8:3e:2b:b6:6d:40:6b:
b3:c5:52:7a:08:c5:bb:c4:d3:df:0c:1e:1d:66:9e:ae:04:c2:
7a:9d:56:a4:c9:97:d1:27:07:fb:9b:d7:4e:e1:ad:84:76:19:
a2:cf:ae:b2:20:b2:ee:73:1f:96:b3:52:f9:f4:27:fc:9a:eb:
d0:a9:6f:65:22:32:df:25:3b:a3:39:d8:ef:d0:b5:02:a1:3b:
57:c1:5f:82:85:e9:92:d6:7c:57:49:aa:14:0b:32:69:d2:a3:
c3:57:83:50:4b:97:ef:7f:d4:89:a9:13:93:0a:3e:3c:be:30:
34:78:3b:94:96:be:59:86:21:f0:a2:67:a0:40:f8:a8:1e:64:
bb:93:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:04:06 2025 by rpki-client