Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/AA2twhj3JjqNeEtfXh_nvFIhwUI.roa
File: AA2twhj3JjqNeEtfXh_nvFIhwUI.roa (raw, json)
Hash identifier: 7pwyUMMRmENXJp1YdVN9DBuKjXp76GQ7r0RF+5Zw+oI=
Subject key identifier: 00:0D:AD:C2:18:F7:26:3A:8D:78:4B:5F:5E:1F:E7:BC:52:21:C1:42
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 0195131426D863C2C8B526B827303892F546
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/AA2twhj3JjqNeEtfXh_nvFIhwUI.roa
Signing time: Mon 17 Feb 2025 08:44:02 +0000
ROA not before: Mon 17 Feb 2025 08:44:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48283
IP address blocks: 194.0.28.0/24 maxlen: 24
194.0.30.0/24 maxlen: 24
194.0.31.0/24 maxlen: 24
2001:678:2c::/48 maxlen: 48
2001:678:34::/48 maxlen: 48
2001:678:38::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:14:26:d8:63:c2:c8:b5:26:b8:27:30:38:92:f5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: Feb 17 08:44:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=000dadc218f7263a8d784b5f5e1fe7bc5221c142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:83:23:3f:a2:ac:ad:de:d3:38:cf:0c:22:b4:
e8:23:48:d6:26:14:37:a9:44:ba:74:5d:6d:ae:6a:
33:e1:f5:58:b9:cf:67:75:de:08:2a:d8:c4:b3:3c:
71:5a:b0:a8:33:8f:30:75:e6:3d:dd:56:be:cd:1a:
a8:57:71:05:7e:23:c5:5f:6b:c1:3b:7b:8a:d7:0f:
92:4c:b8:5c:32:76:06:a2:b7:0f:44:bd:96:71:ec:
32:18:36:3e:6e:11:3d:a8:73:4f:82:7e:e0:5f:18:
c4:40:5d:1f:4f:89:4c:88:61:19:57:b8:32:b1:4a:
fe:12:b0:fe:48:d1:07:b6:6c:61:09:4c:df:c2:f6:
28:30:44:30:22:1f:4c:6f:dc:50:c9:a0:38:5d:9e:
04:68:3b:84:dc:10:b3:5f:d4:bc:ff:07:ea:d8:5e:
f2:eb:60:5b:2a:1b:ae:2a:45:34:14:7d:99:9b:c4:
2d:99:2d:1c:ef:81:47:60:f4:a6:da:1d:f2:bd:98:
20:14:1a:b9:28:99:76:5e:10:ac:04:0c:06:30:93:
8f:bc:2a:dd:5c:c9:00:ba:67:92:b2:d7:1c:5c:42:
c5:36:16:0e:1f:db:22:45:51:c1:d4:9d:22:75:e5:
00:87:2a:ca:50:1c:25:80:07:f5:af:0c:04:2e:9a:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0D:AD:C2:18:F7:26:3A:8D:78:4B:5F:5E:1F:E7:BC:52:21:C1:42
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/AA2twhj3JjqNeEtfXh_nvFIhwUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.28.0/24
194.0.30.0/23
IPv6:
2001:678:2c::/48
2001:678:34::/48
2001:678:38::/48
Signature Algorithm: sha256WithRSAEncryption
26:3a:20:3d:79:22:3c:cd:96:03:33:42:6a:36:61:6b:d9:e5:
e9:23:8f:13:43:fc:a9:20:ca:23:d9:8d:83:3d:bf:5c:3d:01:
20:eb:71:13:cc:3c:bf:1d:18:62:ce:82:24:02:e6:94:ec:ce:
e8:90:f7:54:b8:c6:86:7a:57:e6:ab:16:db:a2:de:e8:0e:26:
ad:c6:a9:65:3f:b7:e9:a7:24:68:cd:2b:f3:f4:c4:4a:3c:9e:
28:39:6a:33:3a:30:12:4d:7e:2c:07:ce:44:f1:5a:50:3d:92:
cd:da:68:60:c9:29:5e:ba:1c:a2:53:23:1e:dc:f0:72:a7:62:
df:64:ea:bd:2c:4c:22:6d:15:83:01:5e:f0:0e:18:63:57:6c:
ca:b4:b9:7a:8a:b5:02:cf:ea:8d:28:a4:8f:99:5d:bc:23:3b:
d3:b2:08:73:56:2c:36:14:eb:8e:4c:32:a8:62:86:5a:05:8a:
69:3a:01:27:e6:23:48:5e:0a:03:d9:c1:f5:0e:7f:ca:5a:48:
33:72:54:31:ce:fa:47:a9:2a:b5:7d:83:4c:21:b0:3e:6c:a8:
d7:93:23:ad:49:a5:5c:99:b3:d5:42:a9:6f:90:b0:6f:38:96:
30:3a:9c:2d:6c:d3:07:2a:11:f9:10:0c:27:28:aa:68:85:5d:
d9:be:ec:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:56:44 2025 by rpki-client