Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/byPwkkahLGpxY_tW1OLYNjMyZ_Y.roa
File: byPwkkahLGpxY_tW1OLYNjMyZ_Y.roa (raw, json)
Hash identifier: QA9SayE2KiT0c9dHKY7N9OrSbz3bY915oFBo7q1THjo=
Subject key identifier: 6F:23:F0:92:46:A1:2C:6A:71:63:FB:56:D4:E2:D8:36:33:32:67:F6
Certificate issuer: /CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Certificate serial: 019422FB909506FC9AD0BDE27CC89735C2D2
Authority key identifier: 8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/byPwkkahLGpxY_tW1OLYNjMyZ_Y.roa
Signing time: Wed 01 Jan 2025 17:48:19 +0000
ROA not before: Wed 01 Jan 2025 17:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 194.37.85.0/24 maxlen: 24
194.37.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:90:95:06:fc:9a:d0:bd:e2:7c:c8:97:35:c2:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f137200c9ea1560a3f42fd7e100ed28411416bc
Validity
Not Before: Jan 1 17:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f23f09246a12c6a7163fb56d4e2d836333267f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:8e:c2:74:61:ab:8b:7e:ff:77:d0:31:f4:
12:ca:22:1a:74:1e:c7:75:59:16:5f:14:90:e2:96:
e8:a2:ac:b5:38:21:95:d4:aa:14:e9:98:ca:f5:f9:
a7:99:44:68:c3:82:47:c0:57:23:c6:50:60:46:66:
d1:95:af:7d:05:0f:05:0c:25:d2:d3:8c:fd:98:05:
db:b3:77:b8:38:e3:b8:76:4d:bf:2e:21:97:63:6e:
c9:a8:19:ec:32:c0:7d:6f:84:c4:bc:6c:b2:88:0f:
b0:ae:96:52:ba:a6:46:85:b7:35:f6:ed:81:83:20:
38:e8:df:11:47:1f:64:76:18:ff:6a:99:bb:0a:cf:
46:12:f3:0b:60:e8:01:ae:02:00:fb:be:60:32:92:
3a:03:3d:0b:8f:05:3d:22:51:b8:03:a8:7d:42:ee:
5e:f7:bb:1e:43:fc:01:c9:58:68:8d:3d:8e:22:d6:
94:e3:0b:54:64:df:bc:0a:47:bf:f7:1a:83:94:27:
c1:06:f7:13:59:7e:29:cc:21:95:88:11:da:61:07:
c1:c3:e2:02:21:6a:d8:44:56:be:5a:31:d2:c5:dd:
41:8f:71:a3:86:b5:fd:f0:63:66:15:16:6e:61:39:
e0:86:33:17:ea:ae:88:95:c3:92:c6:39:71:80:b9:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:23:F0:92:46:A1:2C:6A:71:63:FB:56:D4:E2:D8:36:33:32:67:F6
X509v3 Authority Key Identifier:
keyid:8F:13:72:00:C9:EA:15:60:A3:F4:2F:D7:E1:00:ED:28:41:14:16:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxNyAMnqFWCj9C_X4QDtKEEUFrw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/byPwkkahLGpxY_tW1OLYNjMyZ_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ddbbab-5edc-4a14-b0e7-eb80221e538d/1/jxNyAMnqFWCj9C_X4QDtKEEUFrw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.85.0/24
194.37.87.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fb:f0:84:82:a7:a9:3c:25:37:e6:85:ae:3f:f5:53:a5:9d:
b3:72:7a:2a:ad:57:76:cd:f9:c1:6c:6c:3a:49:8b:d9:b5:97:
81:42:dd:41:d3:9a:0b:61:c1:39:2f:53:13:4d:dc:45:b7:78:
df:94:3f:7f:3b:8c:3e:a0:d4:66:ec:ee:36:31:5e:a1:32:b2:
07:77:2b:a7:c7:54:6b:ae:12:24:82:4b:6c:26:62:aa:f4:ff:
29:3c:45:6a:d2:20:0f:b3:67:3a:aa:8a:06:c5:61:c8:51:62:
90:73:cf:95:d2:9c:71:05:9a:ee:dc:86:1e:72:b9:fd:61:53:
fc:cb:c1:f6:e8:b9:42:a1:6c:32:41:84:a1:a2:bd:0b:51:25:
b3:70:5b:90:91:cc:55:48:81:6d:31:3c:86:13:48:f8:ec:ce:
1d:46:1b:70:6a:0f:0b:a8:78:d6:8c:91:e8:71:67:78:1b:7d:
aa:7e:73:aa:f3:d9:d1:c4:45:91:d3:b6:f1:cc:f0:1b:d7:53:
10:fb:4f:0d:d0:62:22:84:3e:75:04:4f:8d:9b:86:4b:84:6d:
34:9f:ac:3a:8f:7e:e9:ac:fc:4b:45:f3:df:ba:0a:34:0c:9f:
f0:08:00:f3:e1:39:6c:b2:1e:2b:0e:3e:12:c8:9e:e5:bf:8d:
43:88:28:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:16 2025 by rpki-client