Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/iJkNbGwAvDr3zDBvNNp3PJrPffk.roa
File: iJkNbGwAvDr3zDBvNNp3PJrPffk.roa (raw, json)
Hash identifier: oWcx7oCuY2xi/nWkXX5PcJkqGrpEdipcr6e/fE61Yrk=
Subject key identifier: 88:99:0D:6C:6C:00:BC:3A:F7:CC:30:6F:34:DA:77:3C:9A:CF:7D:F9
Certificate issuer: /CN=a3698b01053911607edb2a76090a6aced95a3ed5
Certificate serial: 01941FFA1810DE135F9B73124A4F48789916
Authority key identifier: A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/iJkNbGwAvDr3zDBvNNp3PJrPffk.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209154
IP address blocks: 194.61.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:18:10:de:13:5f:9b:73:12:4a:4f:48:78:99:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3698b01053911607edb2a76090a6aced95a3ed5
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88990d6c6c00bc3af7cc306f34da773c9acf7df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:4e:2d:12:69:24:1f:34:6b:5f:e2:4d:52:
85:c6:17:86:da:58:56:45:a0:cc:4b:88:f3:c9:fe:
d5:09:dd:9e:96:4d:9e:5d:24:ef:bf:1d:c7:b1:9a:
64:a5:51:74:45:5a:14:35:1c:08:54:32:1f:ab:c1:
ce:3a:31:2b:df:c3:cb:b7:4f:a4:83:1a:11:a5:5b:
f7:86:91:41:78:9b:2d:d6:49:51:b7:52:77:6a:26:
20:19:94:cb:59:7b:f6:d8:86:47:40:4c:35:e3:65:
cc:44:8c:d0:76:69:bc:b7:91:41:f3:09:c7:d6:69:
9c:16:b0:37:51:d4:8c:47:4a:3d:7e:6a:08:4b:52:
f1:63:58:a8:ad:5c:0d:3d:5b:18:e2:dc:80:88:79:
dc:d9:51:92:83:b2:c2:fd:ea:d8:85:d1:b5:9a:13:
5a:43:81:91:70:94:83:ca:1b:ad:9e:39:8b:83:00:
cf:96:7a:88:b7:a2:76:9b:e8:25:37:9b:25:54:ad:
b0:32:ae:df:fd:e6:ad:52:d6:b2:26:65:6b:32:1c:
f2:a9:2e:4f:59:c8:3a:b0:50:09:6c:79:88:00:11:
bb:7f:65:2e:ae:f5:5b:82:e4:79:bf:7d:fe:f6:37:
2d:f1:a1:5c:24:e5:82:b5:bc:95:c6:c7:d3:40:64:
78:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:99:0D:6C:6C:00:BC:3A:F7:CC:30:6F:34:DA:77:3C:9A:CF:7D:F9
X509v3 Authority Key Identifier:
keyid:A3:69:8B:01:05:39:11:60:7E:DB:2A:76:09:0A:6A:CE:D9:5A:3E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2mLAQU5EWB-2yp2CQpqztlaPtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/iJkNbGwAvDr3zDBvNNp3PJrPffk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/81d68a-536c-4442-b852-bbd311186950/1/o2mLAQU5EWB-2yp2CQpqztlaPtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.224.0/22
Signature Algorithm: sha256WithRSAEncryption
22:69:df:2f:3b:5b:bc:b5:b2:38:81:a3:9c:27:d1:6e:00:96:
1e:59:de:8f:00:a4:e1:4c:9c:dd:cb:3a:25:12:00:13:d7:1c:
28:21:40:60:99:50:21:a5:cd:29:61:1c:6c:bb:35:9e:85:0d:
db:7b:ca:48:ab:be:68:7a:f0:15:86:19:e9:8b:4e:98:e1:e2:
5d:aa:6b:36:9c:bc:f8:52:28:28:c5:71:0a:ea:14:98:6b:b4:
26:67:99:f0:32:34:52:d1:d4:b6:2f:a0:c8:31:ff:27:52:59:
87:27:3c:7d:75:dc:66:be:3a:6f:15:00:c0:02:0f:96:e7:b3:
45:5a:47:6c:96:60:3c:37:21:24:d5:67:ae:19:00:b6:08:7e:
ec:7d:53:b2:9a:1d:71:75:5d:a7:c0:2e:c6:b9:43:77:a6:73:
24:64:88:85:e3:81:25:f7:68:fa:8a:ae:35:e1:25:59:cc:72:
d7:10:19:d5:d7:4b:48:f9:9d:86:79:7e:49:ad:46:b7:2c:0b:
91:74:1a:ba:9c:20:1b:99:44:c8:82:66:46:ab:8f:38:b0:bc:
55:48:68:57:b4:24:9a:9c:02:6b:71:80:2b:13:91:65:a1:65:
76:1b:b1:22:b6:82:8d:95:e1:10:68:b0:bd:ba:a1:2d:eb:99:
f4:de:07:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:26:22 2025 by rpki-client