Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa
File: v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa (raw, json)
Hash identifier: i3FXkxgEq115F85sl1L3vi5QlnfTs48fnP7JBJ8VQb4=
Subject key identifier: BF:68:68:DC:D8:A2:67:1F:BA:A7:BB:C9:FA:5F:C8:92:06:5F:E8:7A
Certificate issuer: /CN=555988478690ad8d81149aa5c4cae75af5385f1b
Certificate serial: 019427B688B57D2B03828B0FB64A91D28E85
Authority key identifier: 55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa
Signing time: Thu 02 Jan 2025 15:51:01 +0000
ROA not before: Thu 02 Jan 2025 15:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197997
IP address blocks: 194.0.32.0/24 maxlen: 24
2001:678:3c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:88:b5:7d:2b:03:82:8b:0f:b6:4a:91:d2:8e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555988478690ad8d81149aa5c4cae75af5385f1b
Validity
Not Before: Jan 2 15:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf6868dcd8a2671fbaa7bbc9fa5fc892065fe87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:77:e7:ab:6e:3c:7f:87:ac:c5:12:3c:3a:eb:
2d:87:7d:34:c2:e1:0b:d3:9f:7d:9c:8c:ca:b6:ab:
ca:01:6b:b0:2a:f5:87:e0:a0:31:2f:39:4d:a9:65:
88:e7:ff:78:97:80:6b:ea:29:88:6a:02:35:22:08:
7b:2c:47:56:3e:1f:05:e3:69:e5:a7:9b:89:71:2e:
a7:34:29:49:67:3d:56:0e:8d:e6:ea:c1:83:b3:53:
f5:44:52:bd:b6:c5:f8:99:94:3f:e1:81:f7:cd:94:
8c:03:49:60:fd:c9:52:89:85:ec:6e:7e:db:51:8b:
e7:27:b7:71:3f:a1:09:b7:67:8b:47:33:d6:b9:7d:
53:6d:cd:b1:47:4e:cb:4f:c0:b2:56:d9:27:d1:6a:
d7:23:37:d2:38:59:b4:cc:15:e0:f2:24:65:e7:4c:
49:9c:b2:52:71:69:83:21:0c:9c:bb:3e:e4:4c:98:
c5:f4:03:5c:b6:2e:1d:d5:3f:83:3d:07:2f:11:0b:
69:e5:41:4f:74:c5:1d:6f:d7:02:50:b3:c8:80:4c:
de:9c:0f:d2:10:96:3b:58:8e:46:2c:64:11:af:92:
5b:2c:b6:cf:b8:2a:00:36:01:dd:d0:2a:04:7c:fa:
ae:fa:e6:77:0c:24:c1:f1:7f:de:10:f9:90:65:3f:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:68:68:DC:D8:A2:67:1F:BA:A7:BB:C9:FA:5F:C8:92:06:5F:E8:7A
X509v3 Authority Key Identifier:
keyid:55:59:88:47:86:90:AD:8D:81:14:9A:A5:C4:CA:E7:5A:F5:38:5F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/v2ho3NiiZx-6p7vJ-l_IkgZf6Ho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/VVmIR4aQrY2BFJqlxMrnWvU4Xxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.32.0/24
IPv6:
2001:678:3c::/48
Signature Algorithm: sha256WithRSAEncryption
84:72:35:81:5d:07:2b:5b:a7:34:ee:c6:fb:18:5e:b5:f1:12:
ac:87:e1:d6:cc:f7:cd:4b:36:8e:09:59:ef:4d:1f:8c:b9:de:
5e:9b:4e:dd:92:69:f3:9b:a2:d6:68:1f:39:a3:5c:ed:cd:6a:
6f:ee:e5:dd:cf:c8:59:44:87:91:43:9e:92:8d:d9:10:f2:34:
39:fd:a5:ce:10:53:31:89:91:bd:f3:fc:33:3e:b0:00:4e:f1:
72:64:55:29:13:cc:19:6e:c4:5b:a8:ca:b8:95:1a:fd:a4:4c:
82:15:ba:ad:3c:ec:47:b9:77:e2:10:86:a7:36:ec:2e:71:f2:
de:fc:6f:59:31:c6:21:a6:95:13:76:d0:00:3e:52:63:54:fc:
86:15:41:14:69:3c:f3:fd:ae:d8:95:08:0c:9b:e8:ed:49:03:
f5:b2:fd:38:1f:70:83:2e:6a:25:b8:b8:98:6e:c4:88:4d:61:
60:dc:c1:40:c3:e5:8c:96:5c:e6:ab:fe:de:bd:be:e8:62:4b:
13:b6:cb:4f:21:16:03:a2:f2:a6:c0:fc:b3:dd:33:f5:fc:3e:
06:76:fc:0a:28:e6:f6:83:0b:cd:bb:de:0f:ae:41:a5:3d:c1:
66:a6:e7:9e:f0:e9:3c:28:c9:5c:25:21:44:5a:72:07:13:90:
60:28:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:46 2025 by rpki-client