Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sC84Ijb5vvVvPlU2ZGJ2Z3IDOJY.roa
File: sC84Ijb5vvVvPlU2ZGJ2Z3IDOJY.roa (raw, json)
Hash identifier: nuT5PpCemDx8Qc5P2rMY35amUx89nv/IMrHpYBg318M=
Subject key identifier: B0:2F:38:22:36:F9:BE:F5:6F:3E:55:36:64:62:76:67:72:03:38:96
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01856D8B12CB51D2980D4466A63C1E901560
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sC84Ijb5vvVvPlU2ZGJ2Z3IDOJY.roa
Signing time: Sun 01 Jan 2023 13:35:08 +0000
ROA not before: Sun 01 Jan 2023 13:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204970
IP address blocks: 194.209.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8b:12:cb:51:d2:98:0d:44:66:a6:3c:1e:90:15:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 13:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b02f382236f9bef56f3e55366462766772033896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bb:3a:34:b8:72:97:3c:e0:44:15:86:8f:14:
e2:91:ad:b2:34:d1:e9:9b:10:f6:b1:60:f9:f0:9e:
93:19:15:11:c9:d8:24:c1:40:dd:1e:f6:eb:aa:47:
a7:a8:4b:c1:ff:61:41:2a:e4:b5:94:ff:42:b7:8a:
b9:3c:8f:cc:e1:b1:31:34:9b:a2:03:19:42:0a:41:
5d:6a:65:67:3b:b6:53:93:c2:a5:cb:f3:46:54:da:
a3:8e:25:fc:e7:64:8d:14:7c:c6:14:05:36:9e:e3:
94:4f:eb:38:8b:b2:af:49:12:ff:06:6f:7c:67:d7:
35:3f:7e:05:9a:46:36:38:fa:85:40:79:8b:9c:40:
0b:35:9b:e7:5f:3d:ba:81:9f:20:09:41:a8:6b:d1:
0f:52:70:5b:73:16:d2:aa:44:4d:de:03:af:08:4c:
5a:27:c6:47:3d:da:c1:7a:42:1e:3b:3d:80:f0:eb:
26:0d:7a:1e:4c:e8:9e:e1:7c:1c:eb:0c:1a:07:55:
86:22:b8:e6:2d:88:b6:ca:8c:14:cc:9f:41:18:a8:
40:5a:83:f8:50:3b:bc:36:a7:74:fb:b6:e1:ae:ec:
e3:9c:98:ea:35:ca:1d:df:ee:b3:5c:d5:fe:d2:6c:
c6:1b:e0:6a:91:58:80:5c:ac:3d:69:f5:48:19:a1:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2F:38:22:36:F9:BE:F5:6F:3E:55:36:64:62:76:67:72:03:38:96
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/sC84Ijb5vvVvPlU2ZGJ2Z3IDOJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:44:9b:a5:1c:56:e4:a5:1d:ac:46:63:81:97:1e:33:d3:dd:
50:c2:f4:66:a8:46:f0:fc:fe:54:9f:9b:a2:69:02:e9:4e:27:
4d:1d:ba:94:b5:ab:6d:1d:69:c0:15:ac:5e:7d:be:5f:83:8f:
b8:02:9e:0a:99:67:28:21:96:ae:39:2b:ae:12:99:a4:e7:ab:
89:03:96:0e:0a:78:2f:55:fc:fc:f4:0a:a6:1f:b3:30:b5:59:
51:35:c6:a5:2e:0a:a4:a8:fc:c3:09:e8:42:3b:46:7e:1d:c6:
ce:4f:fd:2a:a6:0a:ea:66:50:ee:28:ac:c3:f9:b2:68:ab:d9:
39:5a:34:de:13:2f:35:5e:aa:8b:41:9d:0c:6c:6d:32:f4:3d:
7b:16:f4:62:38:d9:78:fd:32:4c:e4:68:52:5b:4b:cf:da:f7:
09:1a:9f:fa:c6:d6:ee:58:93:cf:7a:8c:cf:25:7e:b0:2f:c9:
98:39:69:82:60:78:2f:e8:4d:33:61:93:d5:c8:0c:99:5e:2f:
b7:81:8c:5d:dc:ce:7b:7f:85:ad:a6:09:6c:54:20:5b:6b:23:
db:d1:c8:a4:b0:16:f2:72:9a:99:12:69:ac:05:ad:95:9e:7c:
28:cc:56:21:11:a2:1f:b2:92:e1:84:4b:59:50:18:7a:31:ad:
cb:7c:21:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:32:29 2025 by rpki-client