Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa
File: 1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa (raw, json)
Hash identifier: gNrv97avvDkank7EdDvcD5kAcTLpL7MBGtGaNujTfjw=
Subject key identifier: F8:A4:37:94:24:1C:F2:DD:24:42:D9:04:EB:EF:E2:42:A5:1B:3F:D4
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 01942826FEF83E4A64199FF8EEF2BC67BEA3
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa
Signing time: Thu 02 Jan 2025 17:53:51 +0000
ROA not before: Thu 02 Jan 2025 17:53:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28883
IP address blocks: 194.240.69.0/24 maxlen: 24
195.237.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:fe:f8:3e:4a:64:19:9f:f8:ee:f2:bc:67:be:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 2 17:53:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8a43794241cf2dd2442d904ebefe242a51b3fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:73:13:fa:55:4b:95:4d:58:8e:18:c9:c5:f7:
d4:2f:9e:ff:94:af:94:d2:b1:f6:d8:89:b0:06:96:
4c:38:12:cd:1f:5e:30:9e:6a:cd:d4:7f:e9:9c:4e:
bb:bb:9d:97:c2:a0:a1:4e:34:9e:67:77:90:c1:bd:
79:d2:4e:82:90:f5:f4:86:37:e5:ba:98:65:2e:e1:
f3:b3:6d:0d:67:42:c2:0c:43:e4:be:50:89:72:b6:
2a:fb:02:bf:6a:d6:e6:95:8a:8f:6b:7f:32:37:01:
d1:12:1d:0c:40:50:74:40:cf:2e:49:4d:75:e2:2c:
02:88:11:41:15:67:f4:85:0b:55:1b:24:56:0d:04:
20:4c:8e:19:a7:64:5d:23:bb:a2:8c:81:52:69:e9:
63:69:4c:ab:8c:42:0f:57:68:a2:ec:df:fa:61:03:
5a:64:c6:5f:d4:ec:c7:59:5a:da:5d:ec:62:15:fe:
f4:ab:9d:61:13:2f:6a:7b:65:c7:c2:a3:9c:19:6b:
fa:01:b3:dd:77:fe:99:33:46:23:b9:7e:7d:1f:d9:
3e:77:21:61:37:94:e8:88:1e:bc:5d:2c:0b:01:08:
16:7c:36:c9:44:de:4b:8a:95:88:42:6f:7e:be:5c:
a7:5e:16:15:ce:dc:db:fd:a5:5f:31:b2:b9:2d:7b:
0d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A4:37:94:24:1C:F2:DD:24:42:D9:04:EB:EF:E2:42:A5:1B:3F:D4
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/1-KQ3lCQc8t0kQtkE6-_iQqUbP9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.240.69.0/24
195.237.80.0/24
Signature Algorithm: sha256WithRSAEncryption
63:92:91:86:c5:8c:f4:7f:6e:af:e9:cf:ea:40:fe:45:00:d4:
c5:d1:af:10:bc:ac:fd:21:16:36:66:8b:9c:5e:f3:79:10:4b:
35:e3:e9:f0:38:3f:86:c6:c6:87:ac:48:35:63:f3:eb:65:f5:
44:2c:a5:bb:f9:f9:d5:b8:4f:47:fc:bd:18:14:74:8b:60:ac:
2a:ee:b3:8c:33:ca:89:52:91:7e:74:71:38:f8:99:71:e5:f5:
83:77:72:3e:65:5f:58:2d:1d:e1:5b:7c:da:64:0e:00:a1:a6:
6a:8e:2d:84:04:7b:e4:a3:23:22:55:3f:0f:a0:ef:e0:87:92:
39:14:d8:6d:fa:17:1e:db:0e:c4:8b:bf:44:38:52:00:1a:6d:
69:c3:f0:9a:72:84:74:6e:01:18:35:03:33:53:db:d6:f4:ad:
b8:49:fa:7f:d2:a8:84:2f:af:f6:f0:1b:d8:93:4f:e4:b4:ea:
a5:18:4c:c1:f5:c9:a3:a8:e3:ae:65:ed:cd:55:1b:47:ea:a3:
c5:b4:c7:d3:fe:49:7f:59:10:87:82:1b:73:28:dc:79:a3:ce:
92:c9:2e:a5:f0:bd:6f:cf:d2:2a:73:f3:87:ea:2b:ad:37:2d:
28:8c:5f:44:c8:e9:39:1e:c5:93:67:7a:84:61:94:67:fe:8c:
d2:7f:16:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:17 2025 by rpki-client