Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/E7on5Vfvg98I2xAlaMeiutbcdZQ.roa
File: E7on5Vfvg98I2xAlaMeiutbcdZQ.roa (raw, json)
Hash identifier: 52cCubbGQVWlaOLXukS3Zd4+5KnclvBfBahudlSwT/s=
Subject key identifier: 13:BA:27:E5:57:EF:83:DF:08:DB:10:25:68:C7:A2:BA:D6:DC:75:94
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 01941F8C21EE4CCF49FC7CE71F365087DD3B
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/E7on5Vfvg98I2xAlaMeiutbcdZQ.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42731
IP address blocks: 194.110.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:21:ee:4c:cf:49:fc:7c:e7:1f:36:50:87:dd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13ba27e557ef83df08db102568c7a2bad6dc7594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:4c:57:de:9e:83:35:1e:9c:95:26:67:f3:
af:30:47:22:58:11:b8:d4:eb:28:aa:94:1f:75:ab:
76:bf:31:3d:23:50:29:09:7d:e8:6a:f1:ae:a8:27:
19:ef:71:3b:d8:00:5f:62:d1:47:d3:8c:1c:93:f6:
0a:3e:b9:d6:cf:b8:79:e4:87:74:cf:f6:7a:ef:51:
2f:2f:54:51:ce:0d:98:07:fb:5e:43:9b:87:56:40:
84:e7:8c:b2:94:81:7c:c6:9a:fa:d0:d6:01:72:bd:
e2:51:c8:bb:54:e1:12:1b:bc:37:c2:60:c3:7d:5d:
95:7e:5f:ff:0a:f0:a3:72:d1:15:23:fe:a2:cb:f1:
46:17:a9:b6:ed:0e:96:89:72:c3:2c:bd:3f:bf:36:
86:3d:a0:e5:28:a8:63:5c:9d:1d:01:34:82:64:40:
e3:2c:78:d4:62:f2:96:a5:46:f9:19:a0:b1:50:5d:
44:64:49:f0:b4:f7:cb:f5:25:1d:cc:a3:a6:fb:de:
23:7e:dc:7d:fd:a2:78:b3:20:55:1e:20:e9:87:fa:
90:4e:ce:79:b3:ce:38:80:0f:29:68:c8:87:10:15:
ec:e3:90:d0:b3:54:3f:67:c1:da:e0:63:6b:c3:dd:
5f:9b:7b:1c:c0:d5:28:17:84:7f:3d:17:83:66:c9:
85:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BA:27:E5:57:EF:83:DF:08:DB:10:25:68:C7:A2:BA:D6:DC:75:94
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/E7on5Vfvg98I2xAlaMeiutbcdZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.212.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f4:a0:6a:ed:09:f0:df:67:84:e1:43:d2:04:77:f9:d2:d2:
42:e6:d4:ff:c4:df:80:de:8b:b4:3b:36:6e:9b:04:83:f5:fa:
0d:09:1a:a9:99:6f:e3:e2:de:04:78:da:08:96:fe:80:4b:93:
cc:a4:c9:2e:a7:4a:77:69:b1:ef:74:c7:49:41:2b:82:e8:fa:
94:d8:45:e6:af:0b:e6:71:0e:f6:85:96:7d:62:ab:8f:af:2e:
25:c2:f7:14:e1:5e:0b:ac:f5:b5:9c:07:2c:c3:ab:89:79:b7:
b9:71:1e:fa:58:06:28:ee:e7:4d:9c:28:fd:18:9c:0a:25:09:
f1:1c:90:26:a8:b7:6f:79:62:5e:12:f6:55:44:99:c3:c8:e6:
87:4c:76:14:6d:d9:3b:c8:61:24:41:16:be:39:a2:56:03:b3:
88:20:39:72:a3:5f:bb:59:a4:7c:85:92:64:c5:18:c2:d9:55:
16:9b:83:08:ac:d3:88:de:8d:b3:dc:f7:39:e9:03:6a:bb:35:
ca:31:aa:ea:45:8c:1c:c0:d2:d8:d0:b0:f2:1c:07:53:93:3f:
72:88:5b:42:af:84:9c:4b:ba:be:15:d7:e0:33:dd:86:a5:d3:
e5:ea:e9:75:b0:ad:5c:25:06:d6:0d:c0:d6:5f:de:4f:66:f6:
8c:92:d0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:44 2025 by rpki-client