Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/0bhoJ8-ddvBioZtRzgKy-myfB6s.roa
File: 0bhoJ8-ddvBioZtRzgKy-myfB6s.roa (raw, json)
Hash identifier: BzGw1+qOUMY/+nu/XThUq8VubujtNGZA+HvkvUvIYPc=
Subject key identifier: D1:B8:68:27:CF:9D:76:F0:62:A1:9B:51:CE:02:B2:FA:6C:9F:07:AB
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 019427484980C5E2C1B4CF5505B5A0669B4F
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/0bhoJ8-ddvBioZtRzgKy-myfB6s.roa
Signing time: Thu 02 Jan 2025 13:50:36 +0000
ROA not before: Thu 02 Jan 2025 13:50:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49685
IP address blocks: 194.53.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:49:80:c5:e2:c1:b4:cf:55:05:b5:a0:66:9b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Jan 2 13:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1b86827cf9d76f062a19b51ce02b2fa6c9f07ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:3c:58:d3:dd:6d:ed:96:70:e1:eb:92:38:
0c:59:f6:49:33:3f:79:82:50:a1:fa:ba:35:78:20:
5a:00:3c:6c:f4:9f:e0:b2:34:8f:76:2d:e0:bd:91:
6e:03:1b:a2:fc:09:16:65:0a:bc:3b:2f:06:56:dd:
49:df:ab:c6:05:58:d4:4d:32:20:a4:1f:5c:f7:d1:
ab:6e:b6:aa:d3:ab:4f:f3:c0:a3:43:31:b0:fc:37:
73:17:ec:1c:14:40:ff:77:98:73:fe:25:40:ba:0c:
2b:74:1e:05:64:ae:5a:5f:44:b2:b3:f4:74:04:63:
dd:5b:22:f8:e8:98:49:a8:77:f1:27:92:7b:03:f3:
5a:2e:63:23:6e:55:92:a7:a2:cb:91:00:22:c7:a5:
a4:74:05:bd:9c:4f:5e:07:30:f0:fc:32:ca:ad:0a:
5d:b6:7b:35:83:16:25:e0:05:d1:4e:cd:3e:7f:6a:
c0:35:7c:d6:01:fe:f4:9b:ac:12:a2:05:82:c4:60:
2c:c6:f7:3b:b9:9a:85:14:27:88:c5:cd:5b:93:ee:
b8:f3:bb:20:75:db:bc:d8:57:08:66:a9:46:90:3c:
ec:c8:e2:09:00:a7:85:7a:de:3c:f6:f0:a6:ee:30:
2b:eb:96:2d:38:7b:f4:da:c7:f7:98:fc:d1:4a:f8:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B8:68:27:CF:9D:76:F0:62:A1:9B:51:CE:02:B2:FA:6C:9F:07:AB
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/0bhoJ8-ddvBioZtRzgKy-myfB6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.72.0/22
Signature Algorithm: sha256WithRSAEncryption
81:04:c4:28:f8:97:b9:43:3a:fb:49:5d:8d:50:0d:70:92:35:
a1:cc:a2:37:5f:81:a0:0b:c4:24:4a:02:35:df:f6:5c:45:c2:
75:ab:85:0e:c4:4b:22:11:d9:ae:34:79:1d:6a:05:1d:f0:f2:
b5:a5:b2:72:8c:ac:39:75:d4:4c:5a:ec:3b:62:61:7c:de:88:
e0:b5:d1:95:c0:9f:9d:83:b0:fa:e2:3e:c5:17:31:83:ac:0a:
3c:32:c1:75:ee:a2:5a:53:2d:02:cd:31:da:2b:d5:a4:04:f8:
82:88:42:00:6c:e8:00:a2:9b:de:35:25:7c:60:23:47:2d:18:
76:68:bc:ba:6d:84:c2:fe:83:3e:0d:c1:11:77:45:1f:1f:0d:
4e:8d:29:98:27:97:b9:9a:30:ff:c9:01:71:cd:79:d6:2d:77:
69:f3:e0:04:38:1d:24:d4:2e:9a:90:9d:e1:89:a2:25:41:20:
11:73:fd:c5:31:1f:ca:a4:ef:98:aa:c2:67:1a:41:5c:b4:4e:
4a:b3:9b:12:f9:4c:60:e3:16:b3:d3:2d:a5:da:48:58:d4:2b:
3f:7d:ea:fb:59:4d:ce:ee:19:17:f6:2a:10:81:66:da:a3:cc:
4c:e2:39:9a:3d:5c:48:4b:cc:e6:40:8b:86:1e:1c:b7:3a:53:
1c:a3:10:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:35:10 2025 by rpki-client