Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/A-wDA3Lh78xB_I_JVDc1AEaW6DY.roa
File: A-wDA3Lh78xB_I_JVDc1AEaW6DY.roa (raw, json)
Hash identifier: 6qoNBItoFI1iL70pmkNWONGc+BROfgZppq/TDKw/JI4=
Subject key identifier: 03:EC:03:03:72:E1:EF:CC:41:FC:8F:C9:54:37:35:00:46:96:E8:36
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 50EC17C3
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/A-wDA3Lh78xB_I_JVDc1AEaW6DY.roa
Signing time: Sat 01 Jan 2022 16:02:01 +0000
ROA not before: Sat 01 Jan 2022 16:02:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208813
IP address blocks: 194.209.6.0/24 maxlen: 24
2001:918:fff2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1357649859 (0x50ec17c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 16:02:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03ec030372e1efcc41fc8fc9543735004696e836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:97:2f:f5:21:d8:ec:66:8c:ae:5c:b7:8c:15:
36:92:08:d6:8f:04:80:12:f3:e2:df:a4:b7:ae:78:
2e:08:23:86:5d:b1:e0:4e:87:21:39:e4:92:87:89:
f8:63:3e:e5:4e:d5:0c:8b:92:d6:85:ab:06:3d:5f:
a3:b4:4f:bd:ad:12:3a:37:66:02:78:1c:ea:8f:a9:
54:20:08:59:3a:0b:1e:a9:87:8b:70:1c:4b:e9:59:
b3:43:97:8f:b7:ef:d9:ed:44:c0:92:77:21:41:51:
8d:57:21:90:5c:5e:b6:82:03:ac:43:a6:26:a5:29:
d6:aa:b0:7b:51:c5:d9:4e:32:59:52:6c:97:97:f6:
c7:2a:9c:67:92:d8:e4:8a:4c:a8:b5:75:cc:51:96:
28:dc:ea:cb:b8:e2:a8:35:1c:48:f5:b2:8b:65:35:
6e:43:62:f8:18:9c:73:3b:a7:ee:0b:17:c0:f8:ab:
9b:df:8f:a8:eb:a6:ff:aa:c5:f9:d5:c9:0f:fb:b4:
89:21:79:f7:d8:70:e6:11:4e:1c:36:7f:b0:8a:a2:
ca:69:35:80:f8:d3:eb:23:b5:c9:8e:74:45:45:d9:
ef:5e:e7:c5:8d:d0:c0:22:f6:78:02:c8:73:0e:cc:
6f:6a:28:7a:db:98:50:81:82:40:9c:51:d1:42:84:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:EC:03:03:72:E1:EF:CC:41:FC:8F:C9:54:37:35:00:46:96:E8:36
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/A-wDA3Lh78xB_I_JVDc1AEaW6DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.6.0/24
IPv6:
2001:918:fff2::/48
Signature Algorithm: sha256WithRSAEncryption
5f:af:8b:8e:65:2f:7d:81:96:d2:0b:0a:b9:e4:3a:f1:c6:4a:
f5:a0:51:5b:f3:6e:20:bd:87:c4:f5:11:79:41:a2:1d:9a:1f:
0f:5f:25:a1:e1:b3:fa:ce:8d:8a:fc:cd:a4:16:cc:8d:49:f1:
95:3e:96:86:92:fb:da:3a:19:09:5f:65:30:1e:14:95:31:e8:
80:b6:b5:e2:a4:24:b9:b8:f7:a1:fc:b8:06:1f:6c:47:0e:af:
14:04:88:e4:c0:d7:88:70:c5:07:f1:37:de:75:f7:c9:ea:4e:
3e:84:8d:0d:86:61:eb:6b:60:0c:dc:34:41:4a:b8:0f:13:8d:
03:64:00:29:89:41:10:c3:fd:e3:b3:ca:2f:a6:0d:b9:b0:6a:
2b:c2:ef:d8:19:fa:98:09:85:dd:86:48:66:5d:2e:73:07:17:
83:c3:df:51:91:19:91:23:07:dc:b7:8b:cf:a8:aa:50:e5:dd:
09:db:38:d7:b9:28:a6:b1:e6:42:2e:55:8f:86:ee:f4:4c:7b:
a3:b6:36:43:3c:94:93:99:6b:ee:ed:8c:24:6b:be:6a:16:7f:
39:77:b5:e3:33:89:5b:de:7c:af:f8:bd:81:6b:85:8d:ba:e3:
3d:ae:7e:8d:0d:b5:b0:26:1e:cf:bd:c4:10:4b:45:c5:05:64:
34:03:e2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:36:40 2025 by rpki-client