Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/X_m5ZAvxIpZScImZ01eKwHRPNDY.roa
File: X_m5ZAvxIpZScImZ01eKwHRPNDY.roa (raw, json)
Hash identifier: beEA3W7SColLkSlnHacB1waBPlogRmM3jPPLz78ItOg=
Subject key identifier: 5F:F9:B9:64:0B:F1:22:96:52:70:89:99:D3:57:8A:C0:74:4F:34:36
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 0194244573AE253FD1049E45E6EAA4E0178C
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/X_m5ZAvxIpZScImZ01eKwHRPNDY.roa
Signing time: Wed 01 Jan 2025 23:48:38 +0000
ROA not before: Wed 01 Jan 2025 23:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.140.230.0/24 maxlen: 24
2001:67c:144::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:73:ae:25:3f:d1:04:9e:45:e6:ea:a4:e0:17:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Jan 1 23:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ff9b9640bf1229652708999d3578ac0744f3436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:c5:78:3f:ad:ba:f7:d7:61:5b:4a:2d:91:
bf:fc:fb:63:46:0b:90:fe:c1:56:de:b6:53:da:1b:
38:12:b1:de:a4:63:6d:94:49:d2:fa:d7:49:07:ec:
92:c4:1b:b8:06:d4:af:f8:07:87:ca:3e:ac:06:e2:
8a:7f:6a:04:19:49:73:a7:cb:de:11:22:d6:5e:d2:
e0:59:af:91:6e:5c:c2:49:c2:07:35:e9:28:b1:21:
15:62:92:0e:c1:3e:68:54:45:1b:df:f8:81:e8:16:
90:47:f9:2e:d5:68:c8:30:ad:48:04:67:7c:49:18:
82:0c:2b:ab:2f:db:45:87:fa:f5:fb:07:5e:7c:03:
bd:a1:7b:22:4d:79:cd:96:fb:ff:f3:df:70:5f:e5:
9e:a0:13:43:f5:6e:e8:25:a7:b7:7e:ba:28:46:4f:
5a:0c:97:c1:6c:ed:a9:b3:b4:b6:2e:f9:9a:2b:4c:
b2:63:0d:ea:7f:af:13:ec:b5:33:d8:9e:2e:19:41:
68:21:ea:90:4e:ff:c8:f3:3f:20:72:58:6b:7e:73:
03:dc:e5:4e:05:47:3c:39:a1:90:27:fd:c3:58:4f:
2b:d1:d8:c5:62:db:1a:a0:bf:a2:5b:86:b9:7f:84:
21:9d:35:e7:84:b1:a1:69:c9:12:29:66:9f:db:97:
43:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F9:B9:64:0B:F1:22:96:52:70:89:99:D3:57:8A:C0:74:4F:34:36
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/X_m5ZAvxIpZScImZ01eKwHRPNDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.230.0/24
IPv6:
2001:67c:144::/48
Signature Algorithm: sha256WithRSAEncryption
9d:56:f9:d3:e8:44:62:e9:73:2c:a8:77:b6:09:00:ae:19:ab:
ac:dc:bb:b1:77:79:9d:d9:31:a8:93:39:e7:4d:67:13:1f:2a:
6a:88:ef:da:c3:76:83:1c:fb:de:11:8a:99:a7:bd:f5:bc:5f:
76:49:ed:dd:24:be:20:55:2a:d6:8d:64:bf:3a:a8:a5:f8:5a:
6f:8f:35:e3:65:96:32:ff:50:3c:7e:9d:8e:64:bc:e7:d4:97:
6e:95:80:a1:92:5e:1e:90:0c:15:7b:b9:d2:d8:c6:da:d8:39:
90:1c:16:71:68:9a:f4:04:e2:d4:56:99:5f:4d:eb:41:8b:9d:
c7:95:60:14:05:4f:e1:48:9b:a5:ba:94:7c:46:31:3e:4a:69:
6d:d2:7c:4c:36:bc:16:e0:96:a2:93:ef:e5:9d:e7:c9:10:bc:
f8:c7:b6:eb:ee:63:48:af:ed:71:99:5c:30:33:0e:c1:3e:c7:
c6:78:01:f3:02:7f:80:33:29:d7:ec:93:d1:05:23:14:96:f6:
48:65:23:bd:46:30:00:db:a1:f4:4e:63:e2:02:f9:6b:24:73:
10:71:bc:b8:dd:e2:84:f5:f1:04:fc:cc:f5:52:d8:f0:17:0e:
a3:0d:73:d6:18:a2:bb:9f:6f:1f:5d:d0:ef:db:0c:7d:1d:bf:
94:d4:c1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:01 2025 by rpki-client