Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/V1xvVOGY5BJ_I9u5C9ObZ-YSnJg.roa
File: V1xvVOGY5BJ_I9u5C9ObZ-YSnJg.roa (raw, json)
Hash identifier: NClt/SHG+/tXhhv3Y/klJlIO43Syulf2MR3J6Q5EBlA=
Subject key identifier: 57:5C:6F:54:E1:98:E4:12:7F:23:DB:B9:0B:D3:9B:67:E6:12:9C:98
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 01941F8C83457C08DF505F445C75FEEEB503
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/V1xvVOGY5BJ_I9u5C9ObZ-YSnJg.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 194.48.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:83:45:7c:08:df:50:5f:44:5c:75:fe:ee:b5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=575c6f54e198e4127f23dbb90bd39b67e6129c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:77:02:af:17:ae:d7:c4:d2:02:c3:95:be:da:
fb:d0:42:05:9d:f4:b6:bb:dd:a6:ef:79:fa:3e:3d:
73:70:fc:3a:11:7b:0e:e9:ef:4d:45:b1:c2:60:56:
54:42:ad:47:a8:eb:90:f1:2a:40:83:be:90:91:98:
aa:73:a7:3b:07:48:4e:16:30:79:4f:99:41:ce:c3:
42:11:7d:3a:8e:c5:8c:74:ff:8a:a5:f8:77:3e:73:
a9:18:e6:97:8b:68:f6:1b:f6:0c:e8:64:18:f2:5d:
55:2a:d1:4a:b6:07:06:8f:0b:b4:e5:d5:1f:6e:da:
a6:2d:4d:8a:31:77:50:26:1b:7d:d4:f6:f8:60:63:
1b:96:40:81:fc:0c:9a:cb:0c:0b:a7:bc:c9:68:38:
d9:4e:52:b3:49:30:6b:e6:06:23:32:1b:ec:57:46:
8d:ea:f3:92:fb:57:38:c1:b2:19:8d:d7:33:a9:b2:
9a:a8:7f:4c:48:9e:e5:d0:2b:b3:73:12:c9:46:ba:
52:44:98:88:f5:b8:e7:dc:d4:cb:08:0e:a9:f4:f6:
e6:f3:db:d0:2e:ab:52:3c:3e:73:0e:b9:b7:77:e8:
b6:d0:17:fa:0e:ba:20:56:43:ac:7e:df:04:14:0a:
29:90:95:55:03:ef:49:8f:c2:7c:05:dc:d1:6c:18:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5C:6F:54:E1:98:E4:12:7F:23:DB:B9:0B:D3:9B:67:E6:12:9C:98
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/V1xvVOGY5BJ_I9u5C9ObZ-YSnJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.198.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9f:bc:04:9e:99:13:bd:c9:a8:e0:1e:28:c1:cf:3f:5d:7f:
c3:88:4c:40:d5:15:7d:d3:14:17:ff:aa:46:43:55:5f:22:4c:
2f:16:9f:94:2d:6f:d4:2b:3c:e9:3e:56:65:f6:f1:72:ca:04:
90:db:9a:b0:74:b7:e1:b1:16:ff:4d:e2:79:0d:09:bf:67:f1:
b6:d1:ae:45:64:e5:06:d8:3c:af:e1:ec:b7:b0:a9:56:76:0e:
a9:b2:39:f8:72:2c:ea:ba:2f:52:1f:02:75:99:5b:d2:48:51:
67:25:04:3d:c8:4e:75:6b:dd:63:c6:7c:44:27:e0:e1:e6:c0:
c2:4b:ca:a2:01:1e:86:ba:45:b5:02:0b:1f:83:07:28:39:55:
43:8d:22:c3:ea:03:f9:e8:88:70:3c:e6:49:ef:28:35:56:d6:
dd:54:eb:d0:8a:e3:34:45:32:80:06:c2:37:58:c1:c4:3b:86:
9f:c6:56:50:c2:b1:c6:39:8d:17:39:90:13:86:ec:8e:a5:67:
9a:18:d4:8d:df:fa:91:ef:f2:92:0b:4a:c8:2d:b6:ac:ea:91:
78:92:54:e1:27:f3:e0:55:88:a1:1a:13:18:b7:0f:fc:82:df:
72:39:cc:df:1e:eb:e8:ae:c8:2d:59:22:8f:fa:f3:7d:a4:51:
32:0b:34:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:46 2025 by rpki-client