Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/T7jb3VKQmKxb_hUshflvh5MIDCs.roa
File: T7jb3VKQmKxb_hUshflvh5MIDCs.roa (raw, json)
Hash identifier: jbLxURfMGrqFJlERtfyC3AuM42PXRkscle6+mhW8AX0=
Subject key identifier: 4F:B8:DB:DD:52:90:98:AC:5B:FE:15:2C:85:F9:6F:87:93:08:0C:2B
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0194221FEBF6E32ADD0455FA3CEF50532F1C
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/T7jb3VKQmKxb_hUshflvh5MIDCs.roa
Signing time: Wed 01 Jan 2025 13:48:24 +0000
ROA not before: Wed 01 Jan 2025 13:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5089
IP address blocks: 194.38.49.0/24 maxlen: 24
194.38.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:eb:f6:e3:2a:dd:04:55:fa:3c:ef:50:53:2f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fb8dbdd529098ac5bfe152c85f96f8793080c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:2d:51:8b:d8:28:cd:db:4d:be:f4:5c:a8:
e6:84:1b:97:c6:20:b6:66:e5:02:85:73:bf:d7:d9:
ef:4f:a3:dc:f4:0a:b4:8d:dd:f4:83:b4:32:65:d6:
85:4a:a2:a5:c5:fd:8e:f7:51:f4:59:03:2f:2a:a1:
39:a8:af:dc:63:46:5e:d6:60:39:82:3e:06:61:6e:
a8:bb:1b:68:44:68:99:fc:9b:e3:a8:4c:f8:68:72:
b2:24:60:f8:f3:c5:05:a7:df:af:12:ee:a9:f9:94:
ec:69:88:f4:bc:76:6c:f7:d0:7d:2b:49:61:04:4e:
17:17:3f:8e:7d:98:91:65:14:58:3e:f3:a0:98:fe:
28:57:da:57:42:ad:ba:a8:ea:7f:b8:a4:6a:ba:3d:
dd:82:49:29:6f:30:6b:3d:8b:3e:d6:39:a2:90:92:
81:9c:46:f9:5c:28:d7:81:16:4e:fb:82:35:61:f7:
58:c0:c5:42:c4:5c:f2:5c:4a:c9:cb:8a:ca:a4:85:
15:55:3c:d0:b0:6f:0e:6e:2d:56:ce:d9:47:fe:de:
10:2b:22:6d:5b:c3:06:be:e2:fa:70:ad:ba:cd:5d:
64:4b:d3:9b:ce:da:3a:dc:69:df:4c:52:e7:02:44:
ce:b8:65:04:c3:82:43:cb:bb:ea:ec:de:95:b3:6e:
88:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B8:DB:DD:52:90:98:AC:5B:FE:15:2C:85:F9:6F:87:93:08:0C:2B
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/T7jb3VKQmKxb_hUshflvh5MIDCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.49.0/24
194.38.51.0/24
Signature Algorithm: sha256WithRSAEncryption
66:91:3d:29:44:c1:3c:7b:69:b2:bb:9b:87:9c:c6:30:14:8c:
42:03:01:d1:9d:61:86:15:e5:44:c4:b8:99:83:80:cf:cf:72:
70:75:ab:a0:1f:23:ea:cc:22:f8:0e:20:aa:6e:de:42:62:d3:
b0:58:15:01:71:70:16:6a:40:09:25:81:21:59:c4:40:89:98:
bc:c3:06:e1:39:09:08:b7:e4:0b:4c:c3:5f:4f:d8:03:83:1f:
22:0b:7a:37:4c:c9:d0:9e:36:4b:39:80:01:36:75:97:36:39:
59:bd:7b:e1:cc:16:22:e9:53:22:92:df:91:d7:ea:84:84:cb:
a5:69:b1:4d:dc:37:d5:fb:f7:b2:82:b7:9d:ec:41:ca:5d:f0:
62:9c:e5:ab:cf:e1:27:1d:69:42:28:08:07:a9:71:3b:07:90:
97:d5:d9:e9:0e:78:14:9f:d5:dc:e4:a6:41:89:0a:cd:56:a6:
2c:89:15:ea:77:d2:17:fd:70:90:19:99:28:c3:0a:ba:41:82:
92:fe:df:de:3d:ce:d8:f4:3b:b2:55:c4:4f:72:82:cd:75:94:
ea:8c:42:03:1c:b0:93:57:2a:29:11:2e:3e:95:70:36:6f:f2:
15:07:af:3f:1b:cd:d0:77:46:7e:bf:f0:a3:78:09:fc:5d:f5:
6c:83:3f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:31:49 2025 by rpki-client