Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/20RbcG86t8HtXkcLzrMiwyakZOs.roa
File: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (raw, json)
Hash identifier: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=
Subject key identifier: DB:44:5B:70:6F:3A:B7:C1:ED:5E:47:0B:CE:B3:22:C3:26:A4:64:EB
Certificate issuer: /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial: 01942669EF3B7F3CE66A1BA35C27731ED0F2
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/20RbcG86t8HtXkcLzrMiwyakZOs.roa
Signing time: Thu 02 Jan 2025 09:47:44 +0000
ROA not before: Thu 02 Jan 2025 09:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 194.165.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:ef:3b:7f:3c:e6:6a:1b:a3:5c:27:73:1e:d0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
Validity
Not Before: Jan 2 09:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db445b706f3ab7c1ed5e470bceb322c326a464eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:70:a5:03:a5:97:95:77:85:7e:92:3a:f4:
54:77:71:f7:7d:b1:8c:84:13:42:11:62:20:71:10:
a4:3f:b5:17:34:13:19:57:62:a3:8e:08:24:b0:a9:
d2:84:94:0b:4e:00:2b:f5:fe:9a:64:23:ba:8a:cd:
d4:30:35:8a:bc:26:3e:b2:33:a8:5d:74:d1:1c:43:
e4:83:38:5c:0d:88:9e:d9:02:a6:0d:1f:63:7b:75:
66:39:96:c7:b1:e4:c3:8c:f5:93:40:f6:95:72:39:
b9:a3:27:ab:bd:6f:fb:7e:9b:f4:cb:2b:c3:f7:8f:
6a:0f:97:98:ec:61:43:09:c2:f2:11:a2:48:e1:f6:
84:1f:76:52:a3:0e:e8:03:f8:44:a7:6d:50:8c:b8:
f6:3b:41:f9:b7:76:47:c0:f3:4f:d3:c0:13:4d:8d:
7e:09:ec:b3:39:b2:9f:31:02:76:f9:2c:4c:94:01:
57:51:96:40:d2:e2:87:ac:ca:26:3e:a5:dd:2d:42:
e4:f0:24:55:5d:27:1e:d1:29:9d:84:78:f7:c5:0c:
a3:d4:c2:c3:cb:85:58:f8:64:74:36:d2:1c:a7:3a:
36:41:80:66:f3:d1:36:ec:ff:5a:9b:9e:b8:a3:e6:
e0:fe:32:f2:0a:9c:2e:3d:11:a3:1a:f2:09:59:d2:
3c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:44:5B:70:6F:3A:B7:C1:ED:5E:47:0B:CE:B3:22:C3:26:A4:64:EB
X509v3 Authority Key Identifier:
keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/20RbcG86t8HtXkcLzrMiwyakZOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.37.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3a:23:ee:d9:da:c7:e8:1d:cf:e2:f8:d4:72:79:e8:18:02:
e9:d2:bb:67:02:ce:78:70:cb:aa:12:c4:78:9c:c9:bb:fd:f2:
92:59:93:12:74:ac:48:b2:9f:b0:a6:30:32:b8:44:ef:84:6f:
61:ea:06:d9:8a:52:87:72:9f:89:1b:6f:a7:d1:e7:be:90:14:
b2:41:3f:49:b7:6a:1b:b5:e3:e2:34:23:b5:b2:b6:dc:6d:5f:
5b:fb:91:42:c3:96:16:55:1a:b2:89:2a:32:fc:9d:8a:c6:94:
6a:f7:99:52:9e:96:ff:f3:3c:2d:20:8d:18:60:d3:21:c1:ca:
64:97:41:d8:84:eb:cd:34:98:59:78:f6:93:53:07:6d:c7:b2:
87:e6:5d:4b:9a:46:6b:7e:a4:2c:ea:b1:60:2e:4f:c2:5f:0b:
a8:d3:ae:bd:1b:21:02:53:57:79:6d:49:9c:74:37:49:7d:ae:
93:09:5e:69:39:ca:a2:6c:64:e1:4d:89:7e:37:a1:bc:de:27:
f5:e0:7c:15:50:70:a2:8d:9d:53:78:c8:44:1a:78:de:f4:fa:
31:2b:56:33:04:2d:f9:6e:fb:a3:cf:c8:88:b2:ef:43:c5:e5:
cd:92:61:8f:ec:3a:00:ab:67:af:2d:b1:0c:7e:01:03:3d:6d:
20:15:c6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:29:15 2025 by rpki-client