Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/IRdP1zrKnBVNovx793Jr6EUySCc.roa
File: IRdP1zrKnBVNovx793Jr6EUySCc.roa (raw, json)
Hash identifier: NySe7o4fz4CLDC1269NENgZegdUCJMl8GRkSkShEYp0=
Subject key identifier: 21:17:4F:D7:3A:CA:9C:15:4D:A2:FC:7B:F7:72:6B:E8:45:32:48:27
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01941F8C883956B6C8CCDCEAE85762C96959
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/IRdP1zrKnBVNovx793Jr6EUySCc.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51508
IP address blocks: 194.34.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:88:39:56:b6:c8:cc:dc:ea:e8:57:62:c9:69:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21174fd73aca9c154da2fc7bf7726be845324827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:e3:c0:fd:48:7f:63:04:01:bd:35:1b:c2:
36:61:3c:7a:9e:d2:e3:7b:4a:15:cc:a6:87:f0:2d:
51:b9:36:b2:92:43:58:17:1a:39:34:ba:53:44:bb:
70:c3:83:d0:a2:86:e2:c6:11:d6:1c:ad:a3:f7:30:
c9:05:16:a7:03:04:51:55:87:78:f7:fa:9a:90:28:
85:5f:45:17:d4:52:ac:a4:94:0f:50:95:05:f3:5a:
f3:be:62:8e:78:d9:36:07:62:be:c0:21:c0:c6:81:
c0:53:ea:b9:32:30:ae:2a:19:a4:f3:1e:ab:3a:34:
38:8c:1e:55:a1:8b:b7:c5:48:b6:d0:c3:0b:70:b4:
c7:48:6b:f8:70:f0:fc:ce:7c:dc:1c:22:0d:c0:0e:
85:a3:59:9a:11:11:05:52:eb:54:5d:3c:3b:c7:f9:
ec:27:13:be:06:ba:13:c2:c6:cb:a5:7e:01:83:10:
df:4f:4a:5f:48:ed:2e:4f:90:ee:13:55:e9:3f:f0:
46:95:10:ad:3e:33:21:61:75:ac:36:e9:ee:1c:9e:
e3:3a:42:c8:4c:5a:c4:24:7a:bb:9a:0f:13:24:5a:
a2:7b:0d:26:8b:af:01:f9:c7:71:12:81:b2:aa:60:
a8:0d:47:08:6d:ba:23:16:1f:63:ae:26:f4:e7:50:
61:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:4F:D7:3A:CA:9C:15:4D:A2:FC:7B:F7:72:6B:E8:45:32:48:27
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/IRdP1zrKnBVNovx793Jr6EUySCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.246.0/24
Signature Algorithm: sha256WithRSAEncryption
93:77:e0:47:c8:38:3a:a8:a7:e2:17:0e:46:6d:ac:a5:73:b4:
7f:57:02:53:aa:cf:19:54:7c:e2:8e:8c:d4:13:86:39:92:68:
03:32:26:c6:3d:ed:2d:a3:34:23:ed:25:a0:f4:ff:e1:dd:d2:
7d:9e:e8:cc:0e:25:26:77:72:dc:b2:6d:cd:ba:16:21:83:2d:
3f:75:39:2d:cb:fc:45:15:c8:0b:a9:cb:87:b5:06:c8:7f:05:
ef:86:fb:76:6b:9d:66:2e:10:b8:87:66:a3:33:5a:29:c4:fe:
66:b9:c5:28:5e:8f:5f:d4:2f:45:4a:f3:55:96:aa:57:6a:95:
fb:a3:d5:31:cf:8b:4b:ae:ba:a2:2d:de:cf:4e:e7:1e:7e:00:
e9:d1:ce:8f:ce:35:55:1b:cd:00:ab:40:f9:6e:34:17:71:32:
18:7a:25:0e:06:d0:1c:40:b6:ff:96:73:3b:3a:5f:fb:e6:c1:
79:08:c5:4b:59:de:3d:75:a8:b5:09:f6:07:0d:dc:46:8d:4f:
cf:a6:07:2b:1d:b3:42:a0:31:5b:17:7c:44:d2:ed:e3:93:6e:
c2:e3:30:39:af:24:99:9d:b1:0c:49:af:8b:df:68:ca:c4:32:
6e:38:2c:5b:2f:60:b1:f9:ba:54:d6:6d:5e:2c:c2:7a:b9:b1:
c8:75:37:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:54:41 2025 by rpki-client