Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/St4HRjoesIgHRfExOBffE_pcBIw.roa
File: St4HRjoesIgHRfExOBffE_pcBIw.roa (raw, json)
Hash identifier: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=
Subject key identifier: 4A:DE:07:46:3A:1E:B0:88:07:45:F1:31:38:17:DF:13:FA:5C:04:8C
Certificate issuer: /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial: 019426D9663055892054CFCEB87343B9AD8E
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/St4HRjoesIgHRfExOBffE_pcBIw.roa
Signing time: Thu 02 Jan 2025 11:49:29 +0000
ROA not before: Thu 02 Jan 2025 11:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53856
IP address blocks: 194.145.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:66:30:55:89:20:54:cf:ce:b8:73:43:b9:ad:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
Validity
Not Before: Jan 2 11:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ade07463a1eb0880745f1313817df13fa5c048c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:7e:5a:ec:9b:19:9c:ad:22:94:21:93:5f:
5c:b5:f8:62:8d:05:69:06:64:81:ff:82:3e:d1:ed:
4d:2f:65:7a:3b:e7:30:7e:79:9f:f6:c7:e7:dc:e4:
ae:fd:9c:2f:ef:e2:ac:05:73:29:c5:f9:71:ba:52:
b8:07:64:fd:61:63:31:01:0b:14:d9:67:2d:75:b8:
27:51:3a:bc:18:ad:f8:69:44:a6:4e:18:86:a1:5b:
ca:3e:68:40:1b:2e:81:3b:c8:dc:8e:cf:6c:27:88:
10:88:dd:4b:ef:2e:db:68:ac:d2:52:0c:66:9e:0a:
26:94:bf:55:c5:e7:c5:28:29:52:63:15:a1:89:63:
eb:7c:e8:49:b8:68:c8:de:68:43:76:ce:cb:32:cf:
4f:b5:31:bf:2e:fd:42:a6:e8:c2:37:f5:3d:04:f8:
22:7b:81:6c:5d:7d:ef:c8:18:15:f5:8c:88:7f:c2:
5f:96:dd:f8:7d:19:64:2d:60:f0:33:14:1f:c1:bc:
13:6a:80:a7:1c:f4:9f:a7:73:a0:7b:bb:bb:7e:dd:
4f:1d:02:d7:99:41:47:e6:bd:8b:d5:a5:d0:8d:3a:
be:4f:a9:77:f9:83:8d:8f:27:b1:f3:db:7d:c9:5a:
b7:86:3b:d2:85:28:7a:ec:71:8f:ff:70:e7:6e:20:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DE:07:46:3A:1E:B0:88:07:45:F1:31:38:17:DF:13:FA:5C:04:8C
X509v3 Authority Key Identifier:
keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/St4HRjoesIgHRfExOBffE_pcBIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.117.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1e:63:78:53:37:36:12:8f:02:ff:94:2f:c0:66:6c:91:39:
2b:e7:be:9b:67:f7:37:3f:83:a9:75:6e:e3:fc:2a:52:fc:ed:
a2:b5:8a:7f:bb:10:c7:5f:15:49:8b:ce:7f:ce:90:85:7f:39:
9e:21:7f:98:33:19:79:4c:7c:23:94:82:db:39:c8:0f:b0:1a:
fb:cf:1b:d3:7a:70:92:ea:d0:14:7d:c5:f8:09:a9:48:a3:6f:
ce:a5:29:38:1d:1f:3f:f7:03:b9:83:ce:14:10:c3:36:e5:03:
95:5f:c6:17:de:d1:97:e4:07:16:7f:56:d7:0c:0b:d2:f8:60:
08:9a:fb:2a:68:17:38:9e:5b:62:90:2e:ab:3d:28:d7:0f:dc:
8a:c0:9b:f5:66:af:13:34:13:07:51:ab:4b:5d:da:cc:d3:1f:
84:75:8a:40:30:a6:bf:3f:f1:0f:e2:e1:73:be:27:9f:a4:00:
ce:13:88:ec:ef:da:6d:56:b0:6e:71:f3:bd:9d:3a:c4:67:5c:
c2:a6:b6:9f:96:9e:24:4d:d1:53:3d:3e:55:e0:14:86:23:81:
a8:99:b4:ab:da:f2:95:e0:1a:c8:fa:bc:6f:2b:12:1f:14:4a:
d0:2b:43:46:8b:38:ff:3a:0c:b8:be:62:9f:80:75:7e:8c:6c:
54:a2:55:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:32 2025 by rpki-client