Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa
File: 9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa (raw, json)
Hash identifier: 26YW4jX+yyct0IS6KpfO0MNuSdKZWiF48vsQnmBErMk=
Subject key identifier: F4:38:3A:B4:EA:3A:3B:8E:32:AF:B8:DE:59:ED:5B:6B:D5:63:08:5B
Certificate issuer: /CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Certificate serial: 0194258E6D683BD9C144AFAA7B94CA341ED9
Authority key identifier: 9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa
Signing time: Thu 02 Jan 2025 05:47:58 +0000
ROA not before: Thu 02 Jan 2025 05:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42568
IP address blocks: 194.0.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:6d:68:3b:d9:c1:44:af:aa:7b:94:ca:34:1e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a085e06f2e2a2e304256f88135ff13de72d0736
Validity
Not Before: Jan 2 05:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4383ab4ea3a3b8e32afb8de59ed5b6bd563085b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:68:a7:32:73:76:9b:79:64:7b:ae:f3:25:
ee:7c:06:6c:20:fd:2e:be:88:cb:73:50:56:d5:ad:
64:96:af:b0:2f:c1:4e:5e:bc:40:ea:9f:5c:8c:7a:
f9:18:e7:89:c7:92:f2:b8:a5:58:f1:af:7a:0a:bd:
93:c1:a0:41:56:2a:20:bf:e4:54:0b:26:e3:63:a0:
e2:5a:51:e3:57:d8:48:77:b2:71:dd:e1:c3:e2:ae:
a5:20:69:4c:c0:e8:dc:e1:63:a9:74:b9:d0:2a:b2:
9b:08:17:00:94:2f:ff:55:ff:4f:8a:12:b4:3f:87:
33:6c:23:bb:0d:23:a1:11:23:dd:37:ab:e9:e4:51:
71:e4:a9:90:2f:81:bd:ee:da:0c:57:30:bf:33:c9:
cc:d3:d1:27:1b:80:d2:c1:d3:3b:a7:e0:a5:9f:95:
fe:d8:00:e6:b6:5c:17:e5:8f:5d:ac:88:32:b2:60:
27:44:f9:91:2e:cb:b5:75:d2:0a:1a:c3:c1:22:66:
d1:8a:b5:7a:a0:ad:36:f5:98:82:b8:8c:ad:d5:bd:
95:fa:88:11:d2:4f:a3:b1:ec:8a:0b:2d:de:81:01:
0a:3c:83:d2:78:37:8d:db:84:18:93:8b:31:30:24:
0f:69:c8:d4:09:e3:21:9b:fc:eb:05:0b:50:ee:6a:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:38:3A:B4:EA:3A:3B:8E:32:AF:B8:DE:59:ED:5B:6B:D5:63:08:5B
X509v3 Authority Key Identifier:
keyid:9A:08:5E:06:F2:E2:A2:E3:04:25:6F:88:13:5F:F1:3D:E7:2D:07:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mgheBvLiouMEJW-IE1_xPectBzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/9Dg6tOo6O44yr7jeWe1ba9VjCFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/10fce0-ee47-4ed4-a03d-0d4542920bcb/1/mgheBvLiouMEJW-IE1_xPectBzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:1a:ce:0e:cc:60:5a:20:f2:34:6a:ef:d7:3f:8f:25:45:18:
3b:f9:5d:5f:90:40:ca:7e:0c:17:6f:d6:4c:d3:59:f6:66:18:
89:b5:67:a8:54:fe:fd:f0:77:f9:55:23:80:65:06:da:a2:8c:
fd:b3:3d:b4:0f:97:11:81:5f:f7:0e:5a:55:8b:fa:36:30:10:
f2:f4:67:76:07:b2:d8:f1:f9:11:ca:ea:49:c7:bd:a8:e1:50:
d3:8c:d7:59:27:70:b8:1e:aa:c0:58:bb:14:1e:77:51:31:73:
d5:2e:ac:19:9b:41:1c:a5:17:3f:44:de:c2:cf:0f:40:62:a3:
f6:1a:d4:8c:07:95:ee:71:1c:39:e6:c9:21:d3:99:23:d7:f7:
30:e0:4d:6b:e3:18:a7:3c:f0:bc:65:28:93:45:3f:6a:5d:54:
fe:3c:9f:84:99:9e:79:b5:64:e1:6e:c1:a5:28:16:64:0e:03:
32:7c:e1:4b:55:33:50:e6:39:6c:8e:09:25:9b:4a:6b:40:11:
ae:f9:81:fc:8f:61:f3:8a:f5:b4:16:9f:a0:53:2a:05:16:ef:
fd:36:90:a6:b1:92:88:8b:2e:6d:98:28:ee:ab:13:e8:bf:45:
92:7d:9e:60:b3:9e:b9:fd:8d:49:55:7e:c7:7a:3a:b8:dc:cc:
60:43:2d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:53:46 2025 by rpki-client