Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/uRDjQ7aXkbyswxshvZa-I9K4wy0.roa
File: uRDjQ7aXkbyswxshvZa-I9K4wy0.roa (raw, json)
Hash identifier: ToqJKTSt+Ubu52CDctomiucCppfnzATa9RYPDbDS+Qs=
Subject key identifier: B9:10:E3:43:B6:97:91:BC:AC:C3:1B:21:BD:96:BE:23:D2:B8:C3:2D
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01942067C958348B9CC4C93C10DFCC4DE2AE
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/uRDjQ7aXkbyswxshvZa-I9K4wy0.roa
Signing time: Wed 01 Jan 2025 05:47:39 +0000
ROA not before: Wed 01 Jan 2025 05:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31141
IP address blocks: 194.6.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c9:58:34:8b:9c:c4:c9:3c:10:df:cc:4d:e2:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jan 1 05:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b910e343b69791bcacc31b21bd96be23d2b8c32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3b:0f:21:98:5a:65:7d:e4:c9:a1:52:31:50:
ba:53:8e:8d:4a:f1:1d:70:ab:d8:e6:14:25:55:62:
ae:a4:57:2e:4b:09:f5:cb:dd:b1:8e:b2:09:00:f7:
11:9e:55:52:78:9f:1b:e3:10:c6:66:6b:19:a7:d9:
67:e6:c7:41:e3:05:98:55:ef:69:45:6b:90:d4:e4:
00:e0:7f:78:69:ae:00:7c:30:e1:00:10:c7:d4:32:
39:7d:9c:75:06:f2:69:b0:2d:f6:29:46:5f:f4:53:
d0:55:35:0c:65:e4:f0:76:ba:2a:d4:5b:3e:d2:02:
78:21:2e:28:6a:dd:39:52:06:ca:20:76:1a:b1:c4:
ca:6a:fe:d5:38:5c:54:5b:03:57:bc:ee:c7:8c:35:
7a:3b:25:60:f7:a0:2a:70:d0:98:7e:9d:f4:81:b4:
84:21:e5:59:03:59:06:26:06:76:1f:27:40:b6:87:
e4:42:7d:5e:ce:53:2e:41:c9:94:9e:96:69:b7:59:
27:8c:ab:4b:13:6d:7b:e9:3b:56:08:60:f5:02:52:
74:3b:da:d8:f8:68:74:6c:76:9b:e3:f5:3b:d5:c9:
a9:9e:d8:a3:ad:aa:6c:6c:75:a1:ac:df:31:ba:a2:
c7:a7:cb:aa:2d:03:27:58:9e:af:ba:a8:6f:99:9c:
d5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:10:E3:43:B6:97:91:BC:AC:C3:1B:21:BD:96:BE:23:D2:B8:C3:2D
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/uRDjQ7aXkbyswxshvZa-I9K4wy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.188.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:aa:62:6e:57:8c:ce:7c:e5:d8:76:fe:f9:a8:9c:83:15:32:
0d:00:8b:e0:27:33:27:84:40:05:8e:f4:68:17:94:f2:7b:b9:
aa:e7:ab:c8:2a:63:d7:5a:3b:4c:16:3d:14:da:51:f8:dd:aa:
e4:8a:3c:37:2e:6b:11:b2:5c:90:b1:48:d8:c7:ba:8f:2b:6e:
83:65:72:ed:9a:52:ef:ab:c9:61:85:9d:37:53:1a:32:cd:ce:
2e:84:ef:2c:c1:87:c7:ca:4a:a8:cf:6d:ff:58:0b:1a:91:d4:
c5:08:0a:e4:58:ea:5f:90:fc:ef:20:29:a8:0d:72:67:7f:d4:
f4:9c:e0:9b:49:1e:e0:3d:fc:82:37:84:9e:65:65:10:90:06:
47:ce:d4:8b:27:e2:c7:29:aa:66:75:27:92:bc:36:21:fe:b8:
ce:f6:80:b2:c9:f1:f7:8a:2c:2a:4e:9b:32:6c:e3:f7:ab:ff:
21:dd:db:99:2c:22:17:1d:9f:4c:61:3c:96:99:65:98:5e:d4:
d4:df:89:d8:9b:11:a3:6e:e0:27:c2:e7:ff:cb:74:54:c7:a9:
16:9c:9b:b5:15:bc:49:dc:13:8d:0b:0d:ff:57:97:21:94:2f:
d9:5c:37:36:fa:68:24:65:2b:57:d3:62:b9:3f:8a:81:40:6d:
02:77:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:52:51 2025 by rpki-client