Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/eDgbQxfoQbs1b3JIJ6SKJOfz-58.roa
File: eDgbQxfoQbs1b3JIJ6SKJOfz-58.roa (raw, json)
Hash identifier: 0cvzDo/8Q85v6bkj8KMq0vsZWXEubtGPZaPvBe6D4tk=
Subject key identifier: 78:38:1B:43:17:E8:41:BB:35:6F:72:48:27:A4:8A:24:E7:F3:FB:9F
Certificate issuer: /CN=b236f231f35beef1bc6c2fc241750b4460f468c3
Certificate serial: 0194244554093490A8B200DAEE7AFA3BF1DA
Authority key identifier: B2:36:F2:31:F3:5B:EE:F1:BC:6C:2F:C2:41:75:0B:44:60:F4:68:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjbyMfNb7vG8bC_CQXULRGD0aMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/eDgbQxfoQbs1b3JIJ6SKJOfz-58.roa
Signing time: Wed 01 Jan 2025 23:48:30 +0000
ROA not before: Wed 01 Jan 2025 23:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25193
IP address blocks: 194.150.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:54:09:34:90:a8:b2:00:da:ee:7a:fa:3b:f1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b236f231f35beef1bc6c2fc241750b4460f468c3
Validity
Not Before: Jan 1 23:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78381b4317e841bb356f724827a48a24e7f3fb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:f3:d0:bb:3c:d4:9e:c4:19:a7:20:e7:62:
9e:48:ee:20:b6:6d:9d:54:17:11:5f:c9:02:29:5a:
d2:d7:4e:c8:5b:c0:f5:c4:df:59:35:5a:11:be:4b:
8e:ab:69:30:0d:e9:3e:f9:7a:f5:fe:ed:81:99:27:
7b:e7:bf:bb:40:40:99:77:2a:1b:d4:a9:62:b3:ff:
fb:c5:e2:d9:3d:47:18:f7:b6:30:41:6e:2b:2f:7a:
c0:c4:d6:fd:62:de:0d:ed:c9:ec:e8:67:52:9e:9a:
30:9c:45:0c:a8:45:8d:8b:e1:a0:5c:01:b4:ac:ef:
d4:41:b0:82:cd:c8:20:3c:8d:8e:97:8e:92:fd:89:
69:63:d0:70:81:32:46:5f:aa:84:df:c6:d9:33:f1:
c5:75:ac:9f:be:38:bc:75:ae:58:e1:c4:50:7c:c1:
b1:0b:5c:dc:7c:67:74:60:38:2a:09:80:b1:61:a9:
c1:e9:37:c1:ba:87:83:5b:d1:c1:15:cf:bc:c4:9d:
24:f4:0c:f7:c2:80:63:94:70:54:03:65:d9:d5:f4:
77:6b:8b:a5:6c:92:94:85:45:fb:08:01:8d:20:82:
91:80:64:99:b0:ce:d3:43:b7:ae:9d:ad:a7:36:54:
bc:fa:cf:9b:46:3b:f5:74:d6:87:33:84:79:8d:71:
61:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:38:1B:43:17:E8:41:BB:35:6F:72:48:27:A4:8A:24:E7:F3:FB:9F
X509v3 Authority Key Identifier:
keyid:B2:36:F2:31:F3:5B:EE:F1:BC:6C:2F:C2:41:75:0B:44:60:F4:68:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjbyMfNb7vG8bC_CQXULRGD0aMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/eDgbQxfoQbs1b3JIJ6SKJOfz-58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/117b96-fe6d-4ac3-b499-23399b128639/1/sjbyMfNb7vG8bC_CQXULRGD0aMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.233.0/24
Signature Algorithm: sha256WithRSAEncryption
53:19:f6:58:8c:43:2d:1a:c8:c3:8c:1e:26:78:d6:7d:11:b3:
da:1d:cb:28:7b:74:a9:69:bf:74:a6:a3:fb:aa:09:6a:85:e7:
18:8c:6c:aa:38:58:08:cf:36:83:e1:97:91:0d:d8:fb:65:b8:
e0:4f:d9:45:0b:1c:09:44:45:9f:1b:c0:72:3c:a9:f5:bc:5c:
4f:16:63:a3:b6:9b:2f:de:cf:ab:a8:5d:0a:cb:ce:d1:aa:16:
40:24:66:5c:b3:3e:5a:19:d3:3b:13:b3:b8:f3:4a:a6:3e:b5:
75:00:c3:ce:a2:61:d0:cf:de:d8:ae:18:8b:0c:e0:f7:9a:4a:
e0:3d:05:97:1a:a5:7d:c2:e8:bd:71:8a:9e:ef:f1:e3:2b:e7:
01:20:f0:67:7e:b8:51:1d:be:17:1d:2f:bc:cb:a6:8b:67:f9:
a1:8c:57:6c:47:e1:14:de:bf:37:8e:4e:6e:2f:75:54:c0:f4:
cc:43:d2:f5:8e:96:e0:39:2a:40:fc:77:d2:ac:98:fd:c2:f1:
ae:ba:a9:c5:92:24:24:cb:30:2c:cc:01:fe:f1:7b:52:d5:10:
0f:00:cb:68:c3:d8:ef:33:c8:44:c9:f0:5f:70:b7:ab:3a:99:
e8:8b:a5:44:ab:28:aa:a8:d7:00:c7:62:0b:cf:b9:c8:4a:c9:
74:8e:2c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:25:28 2025 by rpki-client