Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1s1yTfnPqFN2jrhENo4tdYROBw0.roa
File: 1s1yTfnPqFN2jrhENo4tdYROBw0.roa (raw, json)
Hash identifier: ZLZIFez/0biGI59uYkxkT7N9wY/7zfCHD3QYbX06TC4=
Subject key identifier: D6:CD:72:4D:F9:CF:A8:53:76:8E:B8:44:36:8E:2D:75:84:4E:07:0D
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0193BF8325F88B6A4562F219CEA174F8905B
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1s1yTfnPqFN2jrhENo4tdYROBw0.roa
Signing time: Fri 13 Dec 2024 10:14:23 +0000
ROA not before: Fri 13 Dec 2024 10:14:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 194.38.48.0/24 maxlen: 24
194.38.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:83:25:f8:8b:6a:45:62:f2:19:ce:a1:74:f8:90:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Dec 13 10:14:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6cd724df9cfa853768eb844368e2d75844e070d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:a8:0e:73:78:5c:87:d6:99:53:fd:40:2b:
89:e1:1c:d6:de:cc:63:d5:a6:64:97:62:79:47:2f:
76:64:5e:8f:36:e1:27:3d:36:ed:53:8d:85:dd:ef:
b5:ca:94:5d:45:ba:e6:5d:28:33:75:61:39:87:20:
b7:09:dc:f8:e9:b0:8b:47:bf:41:4f:df:a5:7d:2e:
14:7d:bf:a0:f0:8b:fc:79:5c:f9:60:9d:d5:90:aa:
76:42:5e:f5:9f:b3:63:c0:b2:5b:68:29:23:d5:7d:
86:f6:5d:00:14:06:d4:8b:18:ad:e9:a2:d8:77:c8:
4e:92:10:bc:f1:47:64:07:fa:85:c3:57:1e:be:aa:
80:60:47:43:9d:8f:71:fe:2e:8c:82:38:9f:5c:39:
41:b6:b4:86:28:6d:a3:f8:71:9b:5e:1c:2e:b8:69:
d0:c7:01:74:5b:4d:79:99:55:6a:b0:50:ba:8a:6e:
a3:7a:86:9e:34:37:bc:9e:db:06:39:71:93:c1:83:
df:80:d2:be:70:ae:d1:0b:0a:91:fc:a9:8b:85:f8:
0c:51:fa:21:d2:29:2c:41:98:d9:ad:47:cd:d8:4b:
d7:5b:5f:fb:62:fe:0d:02:4b:1e:18:7f:90:a9:be:
a6:06:2a:d4:59:6a:d1:1b:e6:7b:5e:ab:9a:03:24:
2b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CD:72:4D:F9:CF:A8:53:76:8E:B8:44:36:8E:2D:75:84:4E:07:0D
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1s1yTfnPqFN2jrhENo4tdYROBw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.48.0/24
194.38.50.0/24
Signature Algorithm: sha256WithRSAEncryption
68:59:b8:b4:09:a6:8e:7f:d7:34:96:6c:05:25:58:63:a3:96:
31:68:57:52:0b:77:9e:86:93:ec:8d:c8:c1:75:46:cb:f8:27:
80:67:d6:e4:5b:43:97:8d:40:cf:17:1d:5e:41:2c:a3:a9:c6:
b5:90:b0:4d:ec:1a:c7:35:44:2c:c7:37:b8:10:c9:c2:93:52:
cb:1f:ff:5e:5f:86:bd:c7:7a:ee:59:ff:33:69:bd:23:c0:70:
a2:5c:f0:ff:41:8c:5c:dc:fe:31:ee:3f:f2:27:4a:99:b7:0e:
d8:3c:ab:6a:29:7b:8e:1a:d3:b7:da:91:60:15:0d:97:62:42:
d3:29:15:88:d3:0d:a0:42:b5:3e:8b:c0:c1:9e:28:a0:35:45:
51:78:e0:84:52:ca:86:39:46:a3:b8:a2:50:8f:77:fe:9d:42:
a7:27:a4:3a:64:43:21:ca:e5:18:cd:0b:40:2f:64:72:ee:ad:
09:8f:25:b1:b1:56:a9:50:64:6e:11:6d:85:7b:e6:c1:61:74:
f8:ef:a9:c1:da:58:c2:50:c9:f9:9a:41:d1:50:2a:30:ae:ee:
f3:98:9b:54:c3:29:64:06:ad:f0:52:a8:5f:1e:1c:57:26:2d:
12:49:46:ae:7e:00:6e:d0:cc:35:43:f0:12:7d:3f:28:94:22:
b8:c9:79:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:53 2025 by rpki-client