Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/1-Z1UOZXHudz9pMndWhDGiE0wZos.roa
File: 1-Z1UOZXHudz9pMndWhDGiE0wZos.roa (raw, json)
Hash identifier: j553aDGXg+Mu/H/OVwEn4NDDiMjFpdhHQa+Xk6WS3jQ=
Subject key identifier: F9:9D:54:39:95:C7:B9:DC:FD:A4:C9:DD:5A:10:C6:88:4D:30:66:8B
Certificate issuer: /CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Certificate serial: 019423D7F2E779B8FC1BC215A4123505FCDD
Authority key identifier: 9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/1-Z1UOZXHudz9pMndWhDGiE0wZos.roa
Signing time: Wed 01 Jan 2025 21:49:02 +0000
ROA not before: Wed 01 Jan 2025 21:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208486
IP address blocks: 194.147.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f2:e7:79:b8:fc:1b:c2:15:a4:12:35:05:fc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e481c098a649265291d402f5f02fc43dda0fc8c
Validity
Not Before: Jan 1 21:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f99d543995c7b9dcfda4c9dd5a10c6884d30668b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:06:75:79:78:8d:fa:21:0c:20:d3:cb:0d:
0e:aa:82:a3:e7:77:31:24:de:d1:d2:54:4d:73:1f:
98:41:90:8d:ae:72:2f:96:1a:6f:a5:d0:00:66:70:
ba:80:5a:d5:48:96:21:40:a8:80:54:c6:e4:31:23:
0a:29:55:19:19:12:24:b1:1e:0d:7b:b6:e8:f9:3a:
af:80:07:2d:a7:28:76:2f:0d:31:90:82:be:dd:1f:
dd:5a:98:22:e9:f2:0c:18:cf:05:59:79:cb:56:de:
51:a0:d9:3a:05:06:c1:f6:5d:d4:1c:9b:44:3c:5a:
55:68:10:42:f4:4f:04:d9:e3:cc:6b:2e:ab:3c:92:
e5:83:75:f6:35:6f:a0:08:b2:e5:cd:ee:2b:b8:4c:
16:2c:f9:d0:82:ca:51:a3:1e:c1:92:a8:15:3c:c2:
0d:16:48:b2:94:a7:cf:6f:a7:00:97:ee:89:23:0a:
e2:12:0c:da:f9:63:47:46:96:aa:01:a6:cd:b1:10:
52:b4:39:d4:68:41:19:56:80:80:00:88:83:b7:45:
75:ef:a1:a5:38:6f:06:fa:4e:85:3a:0f:0f:19:7d:
c4:9f:fc:07:a9:c7:0d:a5:06:f2:5d:44:7e:91:78:
69:2b:14:cb:91:a3:14:fe:b0:bd:b3:ca:70:d2:86:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9D:54:39:95:C7:B9:DC:FD:A4:C9:DD:5A:10:C6:88:4D:30:66:8B
X509v3 Authority Key Identifier:
keyid:9E:48:1C:09:8A:64:92:65:29:1D:40:2F:5F:02:FC:43:DD:A0:FC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/1-Z1UOZXHudz9pMndWhDGiE0wZos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/e64169-d2bd-4494-b1f9-d69857ef7d1a/1/nkgcCYpkkmUpHUAvXwL8Q92g_Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.226.0/24
Signature Algorithm: sha256WithRSAEncryption
41:be:65:c5:cf:ef:15:51:56:59:e7:0c:89:1d:ff:36:5e:db:
11:5b:6a:4e:0f:26:90:48:78:2a:48:51:a0:b4:cd:c3:ab:71:
da:2b:a5:2c:5f:47:37:45:1e:7f:f5:6b:2f:12:99:51:f8:03:
20:7a:18:82:c5:72:0f:a6:43:0e:3e:55:c5:99:7d:f0:0e:49:
c2:30:fd:98:e7:8a:eb:68:d0:5a:d6:e8:02:9d:ce:bf:85:84:
b9:e7:95:9b:e3:01:fc:21:32:6c:a6:49:bf:f2:de:bb:a4:3c:
19:c6:4f:5c:18:ad:37:8a:5d:7c:5d:57:c6:96:83:cf:65:1a:
f3:df:e2:1f:4c:01:d6:b2:ce:3c:e7:38:91:46:fb:72:3f:c2:
97:03:04:12:aa:31:3a:48:2f:d9:bf:42:a4:ad:0c:3b:cf:f9:
fd:92:1e:c7:3c:88:3c:e1:5d:0c:c9:f4:fc:3c:a7:33:53:9a:
ff:91:27:6b:b4:89:15:4a:94:0b:33:48:e1:00:94:08:df:88:
65:66:02:b9:8e:71:a6:17:03:68:43:fb:c4:f6:ae:d2:b1:ce:
ac:ac:69:1d:c9:fb:70:29:42:fd:18:a4:88:56:5d:3d:db:c6:
69:5a:53:c3:0a:29:57:c0:c0:ff:fc:7b:b2:d7:eb:28:8a:f4:
90:79:e0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:11 2025 by rpki-client