Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/1-DxDsDMdf_RIlBxaE4mr5-L82gI.roa
File: 1-DxDsDMdf_RIlBxaE4mr5-L82gI.roa (raw, json)
Hash identifier: VcSMCxFdtSvdut5ZP4Ui9WVGG8c9ZkwpknVV/crMFhc=
Subject key identifier: F8:3C:43:B0:33:1D:7F:F4:48:94:1C:5A:13:89:AB:E7:E2:FC:DA:02
Certificate issuer: /CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
Certificate serial: 0194274798A0C5E03F93929433E418F65E4F
Authority key identifier: 15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/1-DxDsDMdf_RIlBxaE4mr5-L82gI.roa
Signing time: Thu 02 Jan 2025 13:49:50 +0000
ROA not before: Thu 02 Jan 2025 13:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43957
IP address blocks: 194.93.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:98:a0:c5:e0:3f:93:92:94:33:e4:18:f6:5e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1543502a32e4b7e1ff0f022e9530dc6b23269d8a
Validity
Not Before: Jan 2 13:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f83c43b0331d7ff448941c5a1389abe7e2fcda02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5a:eb:64:17:23:fd:7b:6c:22:d0:18:00:2d:
9a:83:36:3d:03:26:f9:75:7c:86:61:03:b4:6d:33:
76:d5:db:d4:fa:ae:14:b6:ba:d6:2d:26:22:d5:ce:
a0:46:7a:21:3b:0f:da:d7:12:12:0a:fa:a8:71:eb:
75:5d:d9:11:d3:60:4c:ab:83:74:bb:83:3e:55:4e:
d4:70:44:ae:eb:0a:cd:50:ec:56:9c:8e:b6:c5:35:
54:6c:b1:4a:05:ee:bc:62:c4:e9:cb:53:5d:20:c5:
10:4f:ad:82:4e:c8:c0:fb:46:7c:8f:dd:d3:a0:a3:
ea:18:8a:71:5b:24:42:bd:f1:69:6b:9d:89:9b:4c:
f3:89:93:2d:21:f6:e2:bf:0e:36:4b:e6:27:9d:62:
08:14:5a:94:1e:39:ac:7d:37:ab:c5:41:0b:b7:1d:
15:a8:f6:ae:17:b5:da:30:34:19:0b:b5:9b:aa:8c:
6c:75:b3:2b:8c:54:a4:e1:ff:63:77:b4:9f:56:8b:
f8:66:0f:5a:89:8d:be:e8:80:13:fb:ee:9c:a8:d0:
f9:c1:44:06:f3:ba:56:f4:7f:a8:91:73:66:4e:c6:
8a:da:3a:23:00:d1:27:fc:b3:21:4f:db:93:13:82:
a7:fa:8e:79:ac:5d:c0:ba:12:0a:16:49:ac:c8:d3:
6f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3C:43:B0:33:1D:7F:F4:48:94:1C:5A:13:89:AB:E7:E2:FC:DA:02
X509v3 Authority Key Identifier:
keyid:15:43:50:2A:32:E4:B7:E1:FF:0F:02:2E:95:30:DC:6B:23:26:9D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUNQKjLkt-H_DwIulTDcayMmnYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/1-DxDsDMdf_RIlBxaE4mr5-L82gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/12fa86-c276-43e4-8ba8-0ee216b77579/1/FUNQKjLkt-H_DwIulTDcayMmnYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.78.0/24
Signature Algorithm: sha256WithRSAEncryption
02:22:74:d0:36:67:29:85:36:62:c4:c9:a8:00:6c:b9:2f:6e:
b4:99:34:df:5f:c9:99:e1:78:73:28:b2:78:df:f1:f5:a5:bd:
3a:b4:6e:41:4b:2c:19:c9:84:74:24:7b:4a:fc:8a:b8:ae:71:
7f:74:35:2e:a7:72:56:1f:af:a4:45:91:60:58:9b:79:25:f5:
b6:a5:bd:76:b6:a0:34:3c:f6:48:a3:cd:62:23:8d:95:c0:77:
31:95:92:08:d2:53:2c:4a:2f:d5:38:6b:c2:a5:1d:b2:0c:20:
d2:01:8f:b8:b6:3e:16:21:c5:4d:6a:82:cb:cb:c1:08:04:68:
3d:9f:4d:c3:76:02:11:93:2e:92:d7:c2:da:1e:d1:32:39:d8:
79:ac:07:f4:78:26:d4:c5:fb:64:aa:66:51:33:2a:5b:8b:b8:
f6:e9:62:4d:52:84:69:f0:4a:25:37:e8:c3:c5:2e:26:64:8f:
62:19:fc:9f:2f:4d:c9:4f:c4:ff:d9:e1:1b:97:5d:c9:aa:c2:
2a:2f:dd:ee:13:3e:99:7e:41:70:57:6e:dc:87:b9:96:5a:54:
ec:25:52:f0:ce:23:2c:f4:2e:84:7d:1c:d8:8f:3c:18:02:53:
88:60:8b:70:22:fd:11:f8:58:71:b8:9f:56:28:0c:91:04:e6:
c1:03:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:28:45 2025 by rpki-client