Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa
File: rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa (raw, json)
Hash identifier: R4Ngvgh5fuVLcZ/zh+Z03ttWp7anw1RKceB2P7tYlDo=
Subject key identifier: AD:C1:FB:A2:53:34:1D:AF:D4:93:1F:21:60:50:8B:38:3D:45:0B:91
Certificate issuer: /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial: 019427B65057AA9976832A4080216BCC28DB
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa
Signing time: Thu 02 Jan 2025 15:50:47 +0000
ROA not before: Thu 02 Jan 2025 15:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199195
IP address blocks: 194.39.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:50:57:aa:99:76:83:2a:40:80:21:6b:cc:28:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Validity
Not Before: Jan 2 15:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adc1fba253341dafd4931f2160508b383d450b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:ff:db:d0:e7:80:20:cb:d7:06:b4:90:c3:
67:ca:ea:f0:65:3f:f3:33:f4:a0:b1:2c:ef:70:1e:
59:0a:73:25:91:c8:1c:ed:db:47:c3:7a:e0:ed:9c:
17:56:30:9b:e6:fd:31:8d:b1:21:c8:5c:14:e8:50:
f9:81:14:75:7c:d6:fb:5e:9d:eb:2e:b4:d9:5e:84:
d4:9e:e2:1a:80:56:5a:43:80:68:9b:24:1c:5b:4f:
60:94:c3:30:22:12:d2:b9:47:b3:73:5f:c6:56:db:
bb:77:05:02:69:12:06:da:74:94:53:4f:eb:02:fc:
35:7a:64:3f:83:9c:78:fd:93:fc:31:ca:a0:11:0e:
f7:44:89:8b:a4:98:46:0a:eb:6c:83:5b:6d:0f:39:
61:af:05:d6:d1:10:26:b5:bd:26:7c:f3:e8:4b:d8:
58:e5:d4:61:4c:13:9d:80:28:2b:ea:10:eb:e8:11:
22:f3:b7:81:f2:52:11:55:80:b2:66:c5:8a:48:91:
61:87:db:5d:0d:b5:8c:9f:f1:7e:71:a0:2a:2a:35:
66:ba:4b:b4:af:47:45:5b:ca:8a:b9:aa:64:79:41:
1e:97:c3:9a:65:7b:21:4f:0e:26:ab:a2:d9:88:f6:
2a:56:57:ce:74:2d:47:d7:96:2a:b0:36:cb:ae:ab:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C1:FB:A2:53:34:1D:AF:D4:93:1F:21:60:50:8B:38:3D:45:0B:91
X509v3 Authority Key Identifier:
keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.253.0/24
Signature Algorithm: sha256WithRSAEncryption
02:eb:f7:84:cd:99:26:40:9f:24:04:27:8c:cf:60:e9:11:05:
d1:a1:34:fd:3e:8b:21:99:d8:13:9c:71:5f:30:93:d2:2c:1b:
51:32:b8:08:9f:14:3d:1d:85:da:c0:0c:c1:8f:68:a7:b2:15:
c8:0b:ab:dc:86:e4:aa:43:61:cb:d0:d2:26:d0:4e:bd:10:d1:
84:c0:4d:4b:81:f4:2f:5f:1c:43:42:4c:35:04:12:91:de:ad:
2f:5b:f9:e0:d0:1e:db:7f:65:e4:a0:81:62:6d:c5:af:58:80:
d2:94:2b:21:29:f7:36:1a:df:e4:8e:8c:83:77:dc:85:1b:de:
70:ec:9c:4e:52:36:3a:32:69:94:f1:c7:4c:9e:19:d6:4e:01:
02:ff:ab:62:76:8d:da:79:10:ed:cc:ba:14:64:32:a4:11:5a:
1b:4e:c7:cc:e3:fe:2d:c5:d2:d6:48:f9:b4:c0:c6:ef:48:64:
dc:f4:de:4b:67:b0:f2:f0:6b:3e:8b:b3:86:23:5e:f3:fc:7f:
6e:f9:06:5b:1b:73:82:60:85:4f:cd:aa:ca:b5:75:31:b9:e4:
83:b3:91:94:18:25:35:0d:a7:2b:fe:38:20:ff:cf:1f:2d:f2:
f8:e3:73:5e:6c:49:a5:6c:bf:9f:38:db:06:89:22:50:5b:8a:
62:0e:e4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:29 2025 by rpki-client