Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/hOUxeyZ4GUGm-ViSGta_EVCSneY.roa
File: hOUxeyZ4GUGm-ViSGta_EVCSneY.roa (raw, json)
Hash identifier: qqJoiI/uI9+nuUNJ0WHcG5fxVsdVi3S2HfiMZR4B1Xg=
Subject key identifier: 84:E5:31:7B:26:78:19:41:A6:F9:58:92:1A:D6:BF:11:50:92:9D:E6
Certificate issuer: /CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
Certificate serial: 019424B3B040C40BB00C1A813B86AF2FD27A
Authority key identifier: E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/hOUxeyZ4GUGm-ViSGta_EVCSneY.roa
Signing time: Thu 02 Jan 2025 01:49:03 +0000
ROA not before: Thu 02 Jan 2025 01:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21500
IP address blocks: 194.54.186.0/24 maxlen: 24
194.54.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b0:40:c4:0b:b0:0c:1a:81:3b:86:af:2f:d2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e980fb9530a36ff7b7430d50d44b8fb6d6dca937
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84e5317b26781941a6f958921ad6bf1150929de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6c:5d:ce:42:f8:59:ab:24:4f:a1:c3:ee:15:
31:ec:5f:15:c1:8d:c3:74:62:8d:96:d5:d2:ce:17:
da:d1:00:a3:c7:0a:a0:ce:17:f1:27:34:5a:56:9b:
73:51:e9:81:90:08:3e:7f:1d:b6:ea:33:71:a0:c1:
40:78:7c:11:6e:41:c3:f4:64:dc:63:c3:3b:d0:fe:
42:86:65:e0:73:67:da:ee:ad:cc:5f:2c:0c:57:24:
07:34:15:01:93:18:4b:e6:1b:c9:b1:28:57:3d:21:
af:4c:4c:af:d6:c5:6e:4c:c4:11:13:31:38:8c:4e:
81:02:3a:7a:67:83:47:2b:d6:a4:24:dd:a0:04:93:
dd:06:c7:3f:52:4d:4d:20:4b:d9:5a:7e:2e:df:31:
99:44:2e:60:ca:c5:9a:b4:a5:17:46:77:79:f0:36:
a4:fe:73:41:c3:cf:05:5e:38:f0:18:70:be:1d:a4:
69:95:11:41:59:b1:0c:af:51:e7:c7:47:55:23:5c:
10:26:9e:06:dd:a1:41:88:08:37:bb:8f:7a:31:71:
71:84:d7:50:e7:04:49:39:b8:8a:45:32:a2:4c:99:
93:1e:f4:60:45:c2:b1:ad:9f:93:8a:8b:5a:c7:2a:
dc:da:bd:05:ab:ae:9e:65:9e:af:2e:20:45:f2:a0:
41:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E5:31:7B:26:78:19:41:A6:F9:58:92:1A:D6:BF:11:50:92:9D:E6
X509v3 Authority Key Identifier:
keyid:E9:80:FB:95:30:A3:6F:F7:B7:43:0D:50:D4:4B:8F:B6:D6:DC:A9:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/hOUxeyZ4GUGm-ViSGta_EVCSneY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/45a04c-cb0d-4c0c-8bf1-48f39fde0eea/1/6YD7lTCjb_e3Qw1Q1EuPttbcqTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.186.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:61:c0:5d:1b:5b:66:ed:be:af:f5:d3:47:c4:97:89:06:4d:
5d:4c:2d:bf:60:35:ea:2e:2d:f8:bf:67:d9:2a:b6:f1:c0:e6:
3d:ab:b1:53:fe:c2:5d:fe:e4:79:89:0d:9e:d2:7d:42:df:06:
2e:d0:bf:1f:ea:9d:5c:33:c5:9f:8c:40:a3:16:de:ee:27:88:
d0:7e:8d:6d:17:87:4f:27:3a:46:92:da:b0:2d:9c:fe:3d:1a:
ae:b3:d7:ae:35:c5:f5:0d:83:75:10:83:15:91:26:87:ea:8c:
aa:66:22:d3:3e:a4:14:7f:dd:a2:cf:4e:56:81:a6:bc:db:aa:
5a:63:95:3e:2e:2e:a3:42:b4:af:9b:9a:77:e9:29:d3:da:d8:
05:8a:6d:17:1a:9d:6f:81:06:e6:45:ee:98:7e:2c:34:47:ee:
ae:64:c1:a7:bb:29:91:da:35:f8:34:9a:a8:9b:0b:06:6f:b3:
23:43:65:10:e9:b2:4a:6c:86:fe:fa:37:77:bb:0c:ed:62:0d:
b9:cd:88:e0:a7:e2:af:53:35:b6:3a:f3:36:a0:1b:0d:54:11:
ea:58:17:bc:2a:d5:38:c8:32:fa:0f:75:1b:37:25:4c:94:f0:
ce:81:68:0a:4c:cd:f4:4e:51:ad:f9:d1:1b:ab:af:f9:83:c0:
40:c5:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:50 2025 by rpki-client