Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/empYwKrx4ABahFY0k2CZXZft5Pg.roa
File: empYwKrx4ABahFY0k2CZXZft5Pg.roa (raw, json)
Hash identifier: lQyRrUFjZRPH9Yib0Mwz+z/3ALSf5u0tcJRbBn2hjqI=
Subject key identifier: 7A:6A:58:C0:AA:F1:E0:00:5A:84:56:34:93:60:99:5D:97:ED:E4:F8
Certificate issuer: /CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Certificate serial: 01942521ED50B2E7A91A18DD962267A089F8
Authority key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/empYwKrx4ABahFY0k2CZXZft5Pg.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206546
IP address blocks: 194.0.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ed:50:b2:e7:a9:1a:18:dd:96:22:67:a0:89:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a6a58c0aaf1e0005a8456349360995d97ede4f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:97:b4:11:0c:ac:e1:94:e1:cb:c8:1c:3f:
a9:e4:9f:c9:e9:62:b6:d3:e9:53:75:1a:8c:bd:74:
1f:b7:e8:49:41:99:57:32:09:13:e0:9d:ba:1e:13:
43:a3:e3:0a:db:42:a1:a6:74:67:ff:88:bb:49:0c:
72:ef:da:6e:f5:ba:ee:17:bf:a9:c6:86:7f:52:27:
ec:61:bb:27:4e:bf:d9:86:f9:f8:33:9d:82:6f:fe:
6e:19:a9:ba:0f:eb:49:54:36:71:78:63:db:75:ca:
db:d3:ba:31:01:b1:d4:f1:d4:3e:96:f5:2a:fe:df:
d9:0a:f4:ef:49:df:20:13:36:16:80:5f:b6:33:90:
b0:f9:26:fd:96:ed:b3:b1:c3:8b:b3:a9:52:0d:b5:
a5:3d:0d:cd:f6:73:6d:ad:b2:89:31:73:35:f8:c9:
8a:55:ca:b3:a1:43:39:fa:ed:bc:06:8c:64:40:01:
64:88:52:78:22:32:d8:78:a9:8a:f5:3f:2e:36:90:
d6:b9:3f:05:79:aa:f2:3b:e1:a8:b7:9d:c5:2f:7e:
85:97:1a:19:bd:f4:c6:b7:86:7d:bd:8c:99:1a:cf:
14:0d:e6:5c:ee:07:d8:7e:97:f8:4c:2b:d1:cc:8c:
bb:12:db:3c:59:ed:db:d6:bc:1c:b0:5c:db:f5:17:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:6A:58:C0:AA:F1:E0:00:5A:84:56:34:93:60:99:5D:97:ED:E4:F8
X509v3 Authority Key Identifier:
keyid:DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/empYwKrx4ABahFY0k2CZXZft5Pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.235.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d8:22:a6:a1:47:2d:1b:3f:68:5a:c7:86:a3:2b:88:fa:b1:
54:ce:94:a6:ae:38:1f:fb:a5:09:7e:98:0b:bb:d1:85:79:81:
1d:a9:07:e9:35:07:1c:dd:1c:36:03:f8:85:4f:c9:e5:c2:4b:
b6:1c:6c:d6:b6:19:4a:e7:ef:2b:7e:cc:bb:3f:f3:c9:35:e9:
88:98:d7:62:52:5b:49:f7:be:73:17:33:1b:a7:86:ba:ab:05:
ec:01:db:46:1d:bd:e9:56:27:f6:2b:5c:eb:a0:fa:a7:f2:98:
56:8d:26:40:28:59:10:30:5a:32:dc:ce:52:64:0c:19:90:66:
96:89:43:92:55:63:36:91:e0:8b:c6:60:64:70:b7:25:25:01:
8b:8c:f8:b7:6c:e6:73:a9:4e:70:37:eb:ce:d2:4c:ed:2c:73:
b2:32:93:e1:f1:c6:4e:9d:8b:16:48:6b:e5:77:64:08:09:70:
c2:a3:ce:ea:ab:64:c3:40:09:77:63:19:9b:2b:d0:4a:04:45:
b1:8c:ba:57:b3:05:80:35:c0:cc:57:9f:6f:ad:72:81:62:db:
b0:c8:38:ca:14:81:f8:6e:d7:83:ab:99:2b:b6:fd:bf:c9:29:
3a:88:8b:80:12:26:9e:b0:4f:bb:0f:5e:ae:e6:09:e4:17:d7:
c9:a2:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:40:50 2025 by rpki-client