Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1nYRpwark3T8Mg9DeolcxqkpG_M.roa
File: 1nYRpwark3T8Mg9DeolcxqkpG_M.roa (raw, json)
Hash identifier: HQ14y7oa8RM2GBoqlygDpD9cA3EldeH/3p5H5haEm5w=
Subject key identifier: D6:76:11:A7:06:AB:93:74:FC:32:0F:43:7A:89:5C:C6:A9:29:1B:F3
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC0F41BFD404FEE5AD7AB9AF79D3F5
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1nYRpwark3T8Mg9DeolcxqkpG_M.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49527
IP address blocks: 194.15.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0f:41:bf:d4:04:fe:e5:ad:7a:b9:af:79:d3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d67611a706ab9374fc320f437a895cc6a9291bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:0e:3c:da:f0:c9:76:f1:06:63:94:e3:3d:
39:a4:ea:52:17:ec:49:f0:6c:ae:d4:4b:46:07:b5:
c5:9e:b2:03:25:ff:86:f4:a8:84:2f:49:08:e3:02:
d1:23:30:bb:3d:ea:dd:17:37:b5:e8:78:87:04:06:
19:aa:bd:bd:69:e4:9f:da:2a:23:e5:bb:5e:96:08:
5d:08:91:6c:52:92:17:e4:2b:53:d0:9a:d5:d7:b9:
1f:2e:70:49:f9:c5:00:bf:1d:9d:d4:c3:0b:7e:43:
cd:99:35:30:73:a1:15:3d:6d:d6:ea:b1:65:af:2d:
2f:6f:be:ba:6b:17:a4:c1:aa:08:d2:41:ca:83:34:
10:ea:d8:03:25:18:49:74:69:67:97:c8:ce:50:20:
08:88:72:9f:67:30:f2:c0:bf:6f:54:6b:f4:57:a1:
6f:27:f6:0f:bc:02:16:f9:a7:48:4e:ea:bf:d9:9b:
f8:97:ea:db:dc:97:ee:e9:33:8c:29:c6:0a:06:71:
a9:84:d9:9e:7e:c9:e6:fe:6c:0c:67:bf:4a:16:16:
66:19:88:5b:28:6d:40:3b:fc:c0:ef:fb:d0:37:00:
ab:1d:e4:39:f7:14:ac:b5:f2:86:11:1f:72:b4:d3:
01:52:d1:78:5a:45:84:c4:8d:de:41:f8:ec:28:e0:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:76:11:A7:06:AB:93:74:FC:32:0F:43:7A:89:5C:C6:A9:29:1B:F3
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1nYRpwark3T8Mg9DeolcxqkpG_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.47.0/24
Signature Algorithm: sha256WithRSAEncryption
69:8c:12:1c:f8:90:11:14:d8:dc:76:c4:a6:63:06:00:79:05:
85:ff:fe:8e:e0:a2:29:d7:9c:7e:db:8d:34:47:82:f0:c2:95:
63:7c:bf:1b:2d:74:f4:76:7c:87:70:c0:4d:67:51:a8:11:60:
72:e4:de:e1:46:3d:82:45:40:22:3a:08:dc:e6:b6:46:ec:64:
95:30:5d:22:3d:0e:5f:0b:25:1c:57:72:fa:9f:f9:be:fc:94:
20:b3:ea:4b:08:d9:23:76:d2:c3:f4:00:5d:87:0c:d8:bb:d6:
63:46:22:a4:0e:9e:09:4e:20:bc:79:ea:2c:47:a2:66:87:b2:
ad:bb:2a:d3:f6:41:4b:fa:6f:86:c0:c3:ae:dd:21:70:e1:fa:
ed:45:5f:4e:f8:2b:5f:48:e4:0c:44:93:8b:f5:18:3a:fa:b4:
81:47:8f:3c:29:6a:7c:27:99:e3:ba:cb:1b:c7:75:da:92:81:
72:fe:dd:2e:c4:cf:7e:ca:90:4c:0f:6c:61:09:27:f8:6d:be:
af:be:7b:b1:9c:f5:8b:b2:2d:63:f9:cc:98:ad:2f:b6:ff:15:
3c:cb:56:0f:d1:69:8a:db:ce:df:ab:f4:98:04:6f:43:ad:6d:
5c:08:3e:7f:a5:a8:d3:00:fe:f8:72:c2:a2:9b:4b:36:79:99:
11:3d:b6:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:50 2025 by rpki-client