Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/IG5xDKVSBF6_ftu0zt-Q2A8e45I.roa
File: IG5xDKVSBF6_ftu0zt-Q2A8e45I.roa (raw, json)
Hash identifier: 6H+abuzVCnAQquoCObCbTAtCV9qqM6bi3Fx7YQZ6gQI=
Subject key identifier: 20:6E:71:0C:A5:52:04:5E:BF:7E:DB:B4:CE:DF:90:D8:0F:1E:E3:92
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCACA7F81BF85085BFAD164CEECFD8
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/IG5xDKVSBF6_ftu0zt-Q2A8e45I.roa
Signing time: Thu 02 Jan 2025 07:48:23 +0000
ROA not before: Thu 02 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41406
IP address blocks: 194.9.24.0/23 maxlen: 23
194.9.24.0/24 maxlen: 24
194.9.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ac:a7:f8:1b:f8:50:85:bf:ad:16:4c:ee:cf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=206e710ca552045ebf7edbb4cedf90d80f1ee392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:52:ed:87:b5:c1:46:ed:9c:aa:ff:ee:4c:
f2:62:54:21:7c:20:40:c2:8e:7b:05:65:cc:ac:87:
2a:0b:2d:1a:85:a9:03:4f:2f:f6:2d:a3:c7:b6:2c:
b3:fc:71:46:55:03:bc:a5:f4:c5:47:d1:63:a8:88:
3b:86:f3:29:5f:85:64:b0:1d:ad:93:ae:59:69:66:
49:27:e3:5d:83:24:10:65:f7:07:12:23:c3:dd:64:
a0:56:68:89:5e:1f:a6:67:f1:7a:f5:3e:4d:46:11:
87:c1:9c:ee:c3:36:6a:ea:9d:31:64:74:51:fc:ad:
d3:9f:63:27:88:60:29:ee:53:4a:6b:a0:fe:d0:d2:
9c:65:f9:fa:af:04:74:eb:86:b0:e7:8d:78:83:ec:
80:fd:03:87:5b:d7:bf:51:bd:b7:50:ee:9d:32:61:
16:50:ea:f1:4d:5b:b1:bf:dc:8a:0f:2a:f2:ed:48:
38:ff:2b:86:ad:65:ef:06:9f:53:88:24:4a:67:46:
b8:4c:f6:f7:53:54:e7:ae:a3:73:93:e9:89:06:ea:
2e:61:6e:f4:f3:27:fa:76:8c:f4:a4:72:93:26:fa:
7f:85:13:72:45:20:47:a3:1b:99:1c:02:15:df:fb:
70:b9:93:da:43:73:c5:7a:01:61:f9:ef:c7:19:a4:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6E:71:0C:A5:52:04:5E:BF:7E:DB:B4:CE:DF:90:D8:0F:1E:E3:92
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/IG5xDKVSBF6_ftu0zt-Q2A8e45I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.24.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:35:e5:7c:4e:48:ac:32:46:42:dc:e8:0f:7f:c7:22:38:4a:
c4:db:e8:b2:7e:25:c0:bf:6d:63:78:d0:dc:20:ee:45:fa:19:
4b:f0:bc:31:1c:06:8f:c9:b0:79:09:e2:2a:c5:da:ee:79:42:
2a:66:d8:27:4e:eb:3d:7f:68:c0:0f:c8:2b:b0:52:85:94:06:
fd:4a:65:cb:9c:e0:60:97:a2:05:d1:4d:dd:76:48:26:60:22:
14:7d:91:48:56:56:ea:8b:d6:fb:cd:db:85:55:81:3c:0f:6c:
6d:2d:24:5d:5c:42:67:38:2d:39:9a:53:00:53:69:3c:dd:00:
1b:7c:a9:23:45:18:a7:64:6c:11:32:43:54:ae:9e:79:51:22:
88:78:b0:04:0f:1a:f2:49:49:c6:cf:f4:11:58:62:14:08:d3:
8b:2f:14:e1:f8:a0:f5:6b:c1:56:c8:d3:db:9e:a0:62:cd:b0:
9f:05:87:9b:5c:1f:f4:51:ec:41:08:b6:ce:d5:16:65:14:7d:
fb:f7:30:ea:49:66:e2:f6:cd:f9:3a:e1:d7:a1:6c:24:ec:c1:
e5:dc:93:5b:e7:0a:81:f1:8f:20:5e:64:c3:73:da:67:dc:c5:
fb:bc:6a:2a:3e:6d:20:09:27:59:ab:cd:97:45:67:51:70:95:
b9:85:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:16 2025 by rpki-client