Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/yX7sG3wpFe9yZYaNAimw1pZQPYs.roa
File: yX7sG3wpFe9yZYaNAimw1pZQPYs.roa (raw, json)
Hash identifier: QivAR9rkVn6zuWjKGwBCmHSlxo+GMM5mhMT5ya37DwQ=
Subject key identifier: C9:7E:EC:1B:7C:29:15:EF:72:65:86:8D:02:29:B0:D6:96:50:3D:8B
Certificate issuer: /CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Certificate serial: 0194282695340348B6955E0C71CECB34AF3F
Authority key identifier: F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/yX7sG3wpFe9yZYaNAimw1pZQPYs.roa
Signing time: Thu 02 Jan 2025 17:53:24 +0000
ROA not before: Thu 02 Jan 2025 17:53:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49801
IP address blocks: 194.34.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:95:34:03:48:b6:95:5e:0c:71:ce:cb:34:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f59d56c52c7733f83be774afa47bbd55d28797ac
Validity
Not Before: Jan 2 17:53:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c97eec1b7c2915ef7265868d0229b0d696503d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:6c:a2:ff:73:ef:92:44:d0:49:d7:db:1f:
7a:ee:fa:1d:99:0c:12:1d:b0:24:33:26:66:be:11:
e8:0f:d0:f4:c7:4a:ba:3e:ca:88:e1:f2:bd:ad:06:
7e:4a:88:75:23:25:10:51:8d:72:d6:92:db:75:e0:
50:d2:0b:b1:56:d1:a8:f0:6b:de:64:54:11:d2:1b:
9c:77:b3:fe:40:a7:f0:79:da:87:fe:19:d2:c3:06:
48:b6:53:f4:4f:57:5b:18:d9:4b:55:e6:a9:f0:1a:
98:d4:f0:00:4c:05:1d:da:f6:b8:5c:36:9c:2e:21:
55:99:95:38:16:a4:c7:13:5a:1c:4c:94:25:f5:32:
35:73:2d:27:70:8d:05:ec:52:f1:bd:00:da:ea:cf:
97:97:74:cd:d4:7f:d2:ab:b9:2b:11:7f:e0:c5:23:
11:a3:5d:ec:49:8c:75:43:9d:19:54:9e:ab:1a:9e:
4d:30:f0:18:0b:07:f6:74:9e:90:f8:7a:50:af:68:
dd:d6:a0:23:9a:71:19:1c:79:eb:25:86:59:20:db:
49:e1:a2:e5:64:53:74:56:44:e7:9f:38:bd:a0:15:
14:2c:a1:95:b0:be:8c:b9:6a:8e:f9:d8:d4:51:0a:
15:d8:59:27:3d:3a:74:49:df:6d:37:38:e2:52:66:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7E:EC:1B:7C:29:15:EF:72:65:86:8D:02:29:B0:D6:96:50:3D:8B
X509v3 Authority Key Identifier:
keyid:F5:9D:56:C5:2C:77:33:F8:3B:E7:74:AF:A4:7B:BD:55:D2:87:97:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Z1WxSx3M_g753SvpHu9VdKHl6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/yX7sG3wpFe9yZYaNAimw1pZQPYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/cc1013-5dcb-4ebc-b79e-5c067b8b91a5/1/9Z1WxSx3M_g753SvpHu9VdKHl6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.161.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:4f:2b:c1:c5:d0:3f:8f:a0:ec:9d:2e:ad:70:13:d6:25:eb:
58:c6:28:06:b1:60:e3:43:4e:b5:be:e2:7e:24:e7:da:26:76:
f0:51:b4:bd:02:1a:37:80:91:88:e7:2a:8f:ba:f8:5b:e5:00:
1d:82:8d:8d:81:a9:ea:05:bd:2b:27:ad:da:29:10:f1:b0:da:
f9:f5:c1:81:6b:33:62:4a:ec:73:7d:76:36:c2:f3:39:ae:27:
e0:8f:9f:41:71:2b:93:22:df:00:a1:08:4b:d8:17:d2:a4:9e:
9f:90:75:9a:0f:1c:17:d7:13:68:06:15:7d:1e:0c:85:d8:1c:
26:be:25:95:39:c0:e4:64:4d:f9:20:8c:88:cf:e0:73:58:eb:
6f:d2:06:9f:ad:4b:fc:73:7d:a8:1d:50:7f:f8:3f:b9:bd:8a:
f0:6a:f9:ab:03:10:e5:9e:00:1e:ef:08:3a:75:03:4c:44:23:
2b:b2:60:0a:b4:4e:b1:48:a3:ff:e9:11:28:98:4c:f1:9a:81:
6d:93:d8:d7:d2:c3:c6:01:a9:05:11:5b:14:b2:8b:79:f1:c4:
cf:fd:5a:a7:6c:08:7b:57:95:79:45:03:d9:fa:eb:3d:5e:cf:
bc:9c:53:63:ab:d4:28:ea:09:8b:98:eb:f7:bc:bf:d2:22:e0:
89:4e:d8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:39:11 2025 by rpki-client