Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/rm-ctcMQkJoTJnbIDJV3c0v42nw.roa
File: rm-ctcMQkJoTJnbIDJV3c0v42nw.roa (raw, json)
Hash identifier: 0ZXTmxuKHi0QHBCAQY3aiWs6mf8IDw4nbeNjb8cUWcI=
Subject key identifier: AE:6F:9C:B5:C3:10:90:9A:13:26:76:C8:0C:95:77:73:4B:F8:DA:7C
Certificate issuer: /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Certificate serial: 01942444BBB70DC9149FFB99C98D63644B18
Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/rm-ctcMQkJoTJnbIDJV3c0v42nw.roa
Signing time: Wed 01 Jan 2025 23:47:51 +0000
ROA not before: Wed 01 Jan 2025 23:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6730
IP address blocks: 194.147.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:bb:b7:0d:c9:14:9f:fb:99:c9:8d:63:64:4b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Validity
Not Before: Jan 1 23:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae6f9cb5c310909a132676c80c9577734bf8da7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ff:67:0c:92:f9:3c:4f:78:90:dd:d4:95:e3:
88:5d:97:1f:0f:c5:73:50:55:71:e9:9c:ac:e4:68:
d0:a5:9c:f7:b0:f3:89:2e:49:3c:9d:cd:0a:c9:7c:
e8:0a:50:9c:c5:78:8b:23:98:d6:d3:f8:0a:18:ce:
a6:31:ea:91:84:d3:a5:f6:d9:6a:38:96:be:f8:48:
d4:32:ea:b2:20:ba:de:c6:83:47:d4:46:ff:24:66:
46:e5:e7:35:bf:9f:44:79:96:0c:62:2f:02:98:bc:
4e:33:f5:49:8f:1d:ec:70:4f:51:0c:5b:bf:0d:a8:
7e:0c:47:73:e0:f2:db:8c:8f:ea:b4:72:0c:a8:a6:
e5:57:17:d7:ca:d7:5d:8d:d6:c8:8f:12:e4:27:5a:
c3:bc:15:a4:78:12:5f:7e:f4:eb:4b:fb:db:9b:80:
4a:8e:c1:91:34:0b:2f:2a:1d:d7:8c:8c:c9:4e:93:
7f:63:40:e8:8b:e9:27:c1:16:a9:00:fa:54:75:e9:
30:74:46:6b:fb:22:ba:2a:77:81:b0:97:64:e9:88:
0e:5c:46:d3:2b:1c:ed:5e:25:8e:1c:2d:6e:11:11:
b0:98:21:0e:dc:bd:19:76:e1:c0:44:fd:53:a7:97:
11:6f:8a:47:18:2b:63:40:42:ea:fc:f6:98:4b:9e:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6F:9C:B5:C3:10:90:9A:13:26:76:C8:0C:95:77:73:4B:F8:DA:7C
X509v3 Authority Key Identifier:
keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/rm-ctcMQkJoTJnbIDJV3c0v42nw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.104.0/24
Signature Algorithm: sha256WithRSAEncryption
64:03:4b:fb:d7:8d:f9:11:20:c8:6d:8f:94:c3:c4:40:13:52:
0a:bf:0b:21:36:76:f4:5f:3f:d4:a9:b5:89:a6:30:ad:35:36:
ce:2d:39:b4:9d:6b:58:44:b8:0d:21:26:61:ea:b0:f6:cc:90:
86:f8:87:07:e8:e1:c9:46:b9:1e:ce:3d:44:aa:bc:3e:8a:bd:
04:b7:ad:e8:6e:ed:00:65:d4:ff:ce:1d:c2:fa:36:ac:f6:7b:
21:ad:a2:01:97:fb:6f:97:6a:0a:28:b3:b5:fc:1c:77:6f:1b:
41:93:d5:e4:83:c9:57:77:72:d2:de:02:bc:47:1a:cf:6a:cd:
d3:da:45:90:55:85:44:28:38:62:3e:f2:d4:67:64:c8:09:e6:
2c:72:8f:43:02:8d:2e:be:bd:ad:99:e5:8b:41:d2:ec:fd:58:
80:de:09:5e:aa:91:49:ae:ef:68:19:b1:85:7d:44:f5:c8:81:
13:7b:a0:f8:33:55:07:31:53:f2:0f:56:bd:29:1a:ce:c8:c4:
e9:92:f4:37:1f:b4:d4:f4:36:34:00:be:b7:b6:11:34:f7:ec:
16:0f:70:79:cb:72:2b:fa:3e:f0:0c:41:bc:c5:89:9f:a4:53:
01:ea:0c:2a:42:3c:1d:75:9c:f3:05:11:b9:88:3a:00:98:3a:
84:96:81:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:50 2025 by rpki-client