Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/0GWWmGNWuNJqv5ZG3YSG9WO5g4E.roa
File: 0GWWmGNWuNJqv5ZG3YSG9WO5g4E.roa (raw, json)
Hash identifier: YTHVZYnjvlNIb3Jvy2xlRYLILdB011mbTb/+4idhBg8=
Subject key identifier: D0:65:96:98:63:56:B8:D2:6A:BF:96:46:DD:84:86:F5:63:B9:83:81
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067C9BC5B8C0D374B8A39391BCDE553
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/0GWWmGNWuNJqv5ZG3YSG9WO5g4E.roa
Signing time: Wed 01 Jan 2025 05:47:40 +0000
ROA not before: Wed 01 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35276
IP address blocks: 194.6.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c9:bc:5b:8c:0d:37:4b:8a:39:39:1b:cd:e5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d06596986356b8d26abf9646dd8486f563b98381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b2:8a:3f:dc:72:8a:03:49:56:36:c8:0a:b6:
c2:89:85:77:f7:e8:2c:cc:33:d2:97:3b:1b:01:63:
12:c1:8a:3d:0e:33:c8:9d:92:87:37:92:c5:7f:60:
b3:d6:5a:dd:ce:66:df:74:7b:7e:27:05:3c:62:38:
12:98:fc:a6:71:72:f9:2d:e0:bd:c7:0d:9a:44:30:
7e:54:0b:86:c2:82:64:b5:11:c2:0a:56:51:e9:37:
48:75:ce:5e:5d:80:78:e4:80:f9:7d:10:a0:7d:48:
9f:9f:f1:68:18:8d:5e:b1:fd:1e:fd:e2:13:e9:5d:
4f:1f:c2:4b:fd:fd:6d:c6:1e:4b:73:df:a3:c4:bc:
bd:c1:ca:e0:5d:25:56:6a:8e:98:97:8f:a4:8c:e7:
4e:61:14:36:14:90:73:dd:74:2c:23:58:aa:a1:cf:
0f:db:6b:c7:67:b2:9e:d4:15:72:7d:1e:c2:bc:7a:
98:d3:2a:c0:5c:8e:df:18:d8:ba:f8:d0:3d:83:2b:
6e:4e:24:c7:ac:21:99:f1:fc:dc:aa:87:9a:91:e1:
21:bf:83:5c:ee:26:aa:c2:b7:77:7a:07:87:33:1d:
1e:38:e3:ca:0e:1c:6f:e6:aa:38:78:e3:4a:78:93:
83:f0:86:f1:6f:b0:87:10:3f:85:6d:ea:d8:b5:fd:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:65:96:98:63:56:B8:D2:6A:BF:96:46:DD:84:86:F5:63:B9:83:81
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/0GWWmGNWuNJqv5ZG3YSG9WO5g4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.179.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b3:72:8c:af:6a:f7:9e:71:85:fb:b4:9c:fe:24:0f:d6:54:
d3:6f:25:fb:42:76:93:93:24:8f:d2:10:fc:ab:da:bc:3c:4a:
e9:9b:1b:a6:c0:82:97:b6:e8:97:42:fc:62:67:a7:81:35:de:
b6:5f:79:80:2c:86:d6:e5:76:8a:19:c5:2d:3a:c8:78:ef:bb:
00:83:65:ff:e1:d5:8d:1c:45:e9:e4:3c:b8:f7:0a:30:f6:ee:
68:19:0f:d1:fc:1c:80:95:d7:0b:cb:ef:d7:3e:7b:8a:61:0c:
67:4d:63:fd:12:c9:a5:53:82:f7:61:ff:48:4b:79:28:37:56:
5b:b9:74:35:6b:2f:53:2f:89:22:76:40:33:50:eb:ee:24:0b:
e0:b6:d7:bd:df:8e:39:45:b9:ca:4f:d1:19:b1:d1:19:85:b5:
63:86:57:f1:98:b5:bd:9f:62:66:3b:77:a8:49:7f:01:89:4c:
f4:62:a6:42:2f:47:98:6d:10:3d:9a:69:7a:20:84:cc:f5:92:
b8:43:36:5f:6a:1d:b5:8c:55:a3:04:b3:79:43:08:18:30:ec:
6d:a6:85:ef:b6:2f:ce:e3:55:97:69:e4:55:55:10:c8:18:d9:
20:e3:4d:3f:71:68:72:2e:e1:57:ea:db:b4:57:d7:17:20:79:
b0:66:39:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:19 2025 by rpki-client