Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa
File: x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa (raw, json)
Hash identifier: jQUeTI5H0B7Y7vHRq3Ah33YVd5ztXAEnsoOlx3Qa8Rs=
Subject key identifier: C7:E5:1B:D4:AD:E2:54:45:2F:3B:02:06:8B:32:BA:8D:B3:D2:A7:A9
Certificate issuer: /CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Certificate serial: 0194228E1842C7A329CF491764C9BDBE1BDB
Authority key identifier: 12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa
Signing time: Wed 01 Jan 2025 15:48:45 +0000
ROA not before: Wed 01 Jan 2025 15:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12757
IP address blocks: 194.0.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:18:42:c7:a3:29:cf:49:17:64:c9:bd:be:1b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12151bf57f5316b2dd5cd8a3f798527eac14b774
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7e51bd4ade254452f3b02068b32ba8db3d2a7a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0a:e6:cc:87:4a:32:91:26:0b:6c:17:ec:bd:
63:cc:46:35:cf:07:8d:37:d1:1e:99:e7:96:15:5f:
3b:23:65:d0:14:39:a3:d6:e7:a7:62:d6:3b:57:71:
5d:ce:30:83:90:26:12:8c:24:35:48:4d:59:44:9d:
9d:84:e7:a8:95:c5:bc:46:28:17:c6:87:35:60:7e:
f8:70:34:11:3f:39:e6:48:0c:d6:b0:80:3e:d9:79:
49:2c:46:e6:49:b5:4f:93:19:aa:91:3e:12:19:2f:
50:32:44:1f:9b:2c:c8:7c:d7:4d:45:93:f4:e4:18:
78:92:a7:bd:83:73:c1:ef:f9:02:49:49:34:a3:b6:
da:7e:8c:5a:10:16:ff:19:4b:c4:a9:aa:6a:a4:b9:
7f:44:17:ce:f8:fd:3e:9d:5d:55:0b:83:e5:5f:14:
58:46:d2:3b:8c:9a:d9:ae:52:82:53:28:b7:26:4c:
05:f9:ad:fc:1d:19:b2:d5:53:e8:00:4e:fa:31:2d:
40:71:16:a0:f9:87:79:32:69:19:e0:bc:7a:4b:80:
bd:b0:06:94:87:51:1c:39:0d:8b:64:35:88:a8:0d:
61:7c:21:7f:ec:7a:37:62:8c:42:a9:ff:a7:46:3e:
5f:e9:89:0f:8b:6c:a4:53:cd:7d:ee:4a:10:2e:ee:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:1B:D4:AD:E2:54:45:2F:3B:02:06:8B:32:BA:8D:B3:D2:A7:A9
X509v3 Authority Key Identifier:
keyid:12:15:1B:F5:7F:53:16:B2:DD:5C:D8:A3:F7:98:52:7E:AC:14:B7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhUb9X9TFrLdXNij95hSfqwUt3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/x-Ub1K3iVEUvOwIGizK6jbPSp6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c50d0c-388e-4c00-bef4-4dc6a4f4ee55/1/EhUb9X9TFrLdXNij95hSfqwUt3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.51.0/24
Signature Algorithm: sha256WithRSAEncryption
48:20:80:00:01:ff:b5:0b:dc:33:d2:29:90:89:10:65:e5:76:
83:1d:ec:33:63:f0:a2:14:a4:9d:9d:0e:06:91:92:5d:6f:85:
74:78:25:af:8e:c4:de:fd:92:3c:2b:e2:ac:57:8b:43:97:d1:
40:98:a0:f3:2b:8e:d5:b8:1b:e4:98:c8:a7:18:25:bd:1f:f2:
96:9c:45:82:27:f8:00:ad:7e:c9:a2:bd:4e:d8:f6:98:ff:67:
12:17:d0:af:98:80:8c:72:7c:00:b6:7f:1e:71:c2:42:6a:86:
2a:3f:e6:4e:42:bb:2a:c4:de:05:b8:f8:01:a9:8e:53:90:7f:
37:1f:02:97:b6:eb:80:4e:24:62:80:3c:f2:42:44:cc:49:5c:
c0:50:e7:cf:d9:15:b8:2f:c4:90:e8:bd:53:f0:04:9b:57:6b:
2b:c9:95:bd:fd:99:49:4a:34:50:70:46:80:26:a2:b4:ab:48:
f9:63:7e:79:4f:bd:89:b3:b3:6b:f3:bb:c2:61:fa:de:97:9e:
7a:25:49:f4:db:f9:3d:24:2f:6e:de:12:df:30:24:ea:e2:44:
db:3c:88:15:cd:92:d3:34:90:ae:c4:9f:73:d1:84:a6:81:79:
b6:44:db:87:b5:d7:91:63:9a:ed:2f:37:27:a3:fd:2b:9d:0d:
a6:40:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:42:41 2025 by rpki-client