Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/k0e8XrkRjigLyVCK_c8tyoDjXqU.roa
File: k0e8XrkRjigLyVCK_c8tyoDjXqU.roa (raw, json)
Hash identifier: VlaMdbNDNwgFwQ8MfYZ/SEPVePx9cKrNfoX/5Qh79Ow=
Subject key identifier: 93:47:BC:5E:B9:11:8E:28:0B:C9:50:8A:FD:CF:2D:CA:80:E3:5E:A5
Certificate issuer: /CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Certificate serial: 019421B1B3446F593FD5D2DE9C807E890D71
Authority key identifier: 3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/k0e8XrkRjigLyVCK_c8tyoDjXqU.roa
Signing time: Wed 01 Jan 2025 11:48:01 +0000
ROA not before: Wed 01 Jan 2025 11:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 194.49.57.0/24 maxlen: 24
194.49.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b3:44:6f:59:3f:d5:d2:de:9c:80:7e:89:0d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3dfa29368c8be69c8edd5aa193557fcba2a57ec8
Validity
Not Before: Jan 1 11:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9347bc5eb9118e280bc9508afdcf2dca80e35ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b5:29:55:4f:9a:6f:6d:5e:ed:5a:31:f5:3d:
64:77:d9:16:b3:90:7c:fa:b3:e0:7a:e6:39:f4:e2:
39:3c:78:f5:96:60:00:cc:15:0e:3d:fe:28:78:23:
bf:95:f1:2b:87:90:06:57:b7:b6:12:92:a6:4e:02:
dd:01:4f:ab:ec:13:e2:ed:17:d5:62:8d:9b:a1:56:
0d:52:45:4e:5f:18:aa:1b:81:5a:06:e4:55:42:d5:
bb:eb:ef:8a:97:45:7f:7f:58:d7:8e:09:ef:af:24:
e5:ab:c6:ed:51:38:5d:e6:9e:ee:14:42:c9:f1:20:
4e:40:6b:6d:73:76:34:74:60:e5:97:46:dd:37:e9:
b2:15:27:ce:90:a5:8e:3f:70:e9:6e:5c:5e:75:83:
38:34:73:74:bd:3c:14:b4:d9:d9:b2:c1:f3:bc:82:
06:32:2f:34:dc:03:03:e3:8a:23:08:86:3c:a7:82:
99:bd:59:7c:8c:61:f4:42:79:d9:31:37:66:75:d8:
a2:48:92:43:cd:9e:d1:4a:02:40:6e:81:c1:bb:1e:
c9:b2:48:5e:91:e8:ad:6d:ee:0f:a5:6b:2b:d7:b2:
93:48:7b:c0:18:95:b5:f9:5a:11:be:a6:d7:35:b5:
70:32:9a:9d:b2:34:78:19:ee:d2:e5:7a:42:53:cf:
ef:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:47:BC:5E:B9:11:8E:28:0B:C9:50:8A:FD:CF:2D:CA:80:E3:5E:A5
X509v3 Authority Key Identifier:
keyid:3D:FA:29:36:8C:8B:E6:9C:8E:DD:5A:A1:93:55:7F:CB:A2:A5:7E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfopNoyL5pyO3Vqhk1V_y6Klfsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/k0e8XrkRjigLyVCK_c8tyoDjXqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2d4f7f-16e7-4fe6-a189-bd58d0021a09/1/PfopNoyL5pyO3Vqhk1V_y6Klfsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.57.0/24
194.49.59.0/24
Signature Algorithm: sha256WithRSAEncryption
90:00:76:5c:2e:f2:57:37:fc:fb:61:5e:c1:bb:2e:dd:bc:10:
6e:70:ff:0c:39:9b:1c:83:ef:62:9c:e7:e1:35:69:f1:75:a8:
63:fc:36:d7:d2:db:d8:2d:0d:4d:82:fa:43:b6:58:90:ab:a5:
38:eb:f0:69:c5:42:d5:b7:2d:08:37:37:6d:71:28:21:00:49:
79:12:3b:c6:f5:f3:a7:a3:6c:55:a7:5c:78:bb:07:0a:fa:0a:
ea:c6:32:30:91:eb:a2:e0:27:b6:69:37:8c:f2:36:83:52:37:
45:71:bc:a3:bd:11:c9:ef:f9:dd:0f:64:cf:41:1f:54:b3:15:
94:34:1a:1c:1c:7d:ee:b1:b3:40:e8:9b:cd:73:58:34:f8:77:
e5:b6:20:0d:e0:59:00:6e:2a:f7:d1:50:f4:91:42:91:e2:82:
5e:e5:22:76:c2:25:87:c5:41:b6:0f:b8:29:17:a4:56:34:75:
e4:c2:45:ec:cd:3c:5c:51:1b:ef:4f:7c:5d:78:63:65:7b:a3:
d8:ec:4b:d8:24:91:03:6d:8a:15:b8:5c:34:ba:01:b9:a0:72:
2e:f3:8b:57:5a:65:90:a7:6e:31:f1:ec:eb:c9:ba:80:4b:64:
f3:14:4a:33:4e:8d:8d:b5:8a:49:57:25:50:bd:9e:2f:7d:75:
31:2d:e0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:32 2025 by rpki-client