Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa
File: hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa (raw, json)
Hash identifier: KpUX9BCj308/B4B0VQzL1CJw7WHe+Vbo6CVwUR3M9gA=
Subject key identifier: 84:A1:EB:25:97:F2:BE:98:AA:33:33:5A:C6:A5:8C:B0:20:33:77:B5
Certificate issuer: /CN=ea4e028658912e69697c18553b9529f3d1ce405d
Certificate serial: 019426D9AEC80040A32EC35B5CDEFA1AF8FA
Authority key identifier: EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa
Signing time: Thu 02 Jan 2025 11:49:47 +0000
ROA not before: Thu 02 Jan 2025 11:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 194.104.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ae:c8:00:40:a3:2e:c3:5b:5c:de:fa:1a:f8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea4e028658912e69697c18553b9529f3d1ce405d
Validity
Not Before: Jan 2 11:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84a1eb2597f2be98aa33335ac6a58cb0203377b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4c:d8:e2:4e:cd:59:64:cd:3d:17:2b:5c:9b:
95:34:ea:ec:a2:3f:79:93:5a:2a:dd:25:0f:bc:30:
2f:d1:27:67:3c:7f:3f:ad:c3:c5:b8:89:7f:ba:44:
59:3e:a5:b2:85:14:ba:21:50:bf:d9:7a:5a:1c:59:
6d:a0:29:69:b6:db:3a:3d:8f:cc:a0:78:43:d7:37:
d3:2f:35:c9:aa:69:15:8c:30:cb:a7:84:1d:34:38:
56:cf:dc:83:54:38:73:b9:ea:2c:ca:8b:6e:73:1f:
64:d2:2c:5b:d5:cb:76:23:ac:9d:e5:18:54:5b:c5:
56:5a:da:1c:a1:06:67:aa:19:7e:7e:7e:b7:ed:81:
b7:37:1a:13:bb:1e:2e:51:f1:4a:63:11:0f:34:f5:
0f:a3:06:ff:65:5b:2e:a6:59:5f:01:af:67:2a:b6:
b2:43:62:b8:9d:86:d6:f9:a7:48:12:bc:82:76:52:
f7:b1:3c:e8:e2:de:eb:b5:53:42:72:50:cd:3e:66:
35:24:03:c2:74:b7:6e:eb:1c:4d:c0:ae:c4:74:3a:
12:9b:9c:d9:2e:0e:24:c4:1c:fb:e3:6a:d6:65:27:
6c:ad:7e:a0:c1:45:80:63:18:f3:29:11:48:a2:ae:
ab:c8:7f:35:0c:23:11:05:ea:c3:9f:69:63:09:96:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A1:EB:25:97:F2:BE:98:AA:33:33:5A:C6:A5:8C:B0:20:33:77:B5
X509v3 Authority Key Identifier:
keyid:EA:4E:02:86:58:91:2E:69:69:7C:18:55:3B:95:29:F3:D1:CE:40:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6k4ChliRLmlpfBhVO5Up89HOQF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/hKHrJZfyvpiqMzNaxqWMsCAzd7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/145631-b63e-4809-b4ab-bcef9e322f2a/1/6k4ChliRLmlpfBhVO5Up89HOQF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.236.0/24
Signature Algorithm: sha256WithRSAEncryption
31:16:fc:96:2d:12:ab:cc:a1:54:20:c3:40:bc:e9:82:85:c7:
79:32:79:7c:a4:32:c8:9c:a1:b8:a3:57:64:eb:90:dc:81:0e:
ad:28:a7:cc:de:22:b9:b3:66:85:66:3e:dd:21:cc:94:08:9a:
c9:d1:dd:da:9d:ce:fb:52:11:b1:e5:6b:9e:b9:8c:5a:db:0f:
35:6a:5d:9f:94:35:57:8e:c8:b9:d7:1e:55:40:4f:7d:61:3e:
4f:4e:8b:07:7a:76:93:03:76:93:29:ec:07:4f:10:8b:bc:00:
a8:27:d6:3b:bf:d2:f2:27:d9:63:88:ed:14:1c:ae:f5:8e:dd:
0e:b0:a7:42:ff:d3:d0:b9:56:a6:b1:08:3d:56:c9:5a:a9:70:
80:38:cd:96:f8:5f:2e:31:96:32:f0:ff:c5:3a:d9:5f:d4:11:
96:55:89:83:e5:34:d1:4c:93:a6:9a:7e:d2:30:4f:ac:ec:73:
90:3c:e5:f3:4e:be:dc:37:dd:1b:32:c2:64:61:7b:51:05:01:
7c:79:1e:0e:8d:64:0d:6a:15:7f:e6:fc:d4:af:c3:ff:66:4a:
53:8a:74:91:7d:7a:89:34:54:30:8a:e4:66:b8:d3:b7:cb:53:
94:4a:ee:73:31:bd:70:e1:c6:27:e4:11:97:4f:2d:ac:a7:0b:
5d:39:04:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:23 2025 by rpki-client