Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/1-sSgE0HM8DI5OGWGz8Ys0s4rul4.roa
File: 1-sSgE0HM8DI5OGWGz8Ys0s4rul4.roa (raw, json)
Hash identifier: H9QCxfs9A7ILRXrbCUmxWpocaR5zmO3JmxQzjRfE7KE=
Subject key identifier: FA:C4:A0:13:41:CC:F0:32:39:38:65:86:CF:C6:2C:D2:CE:2B:BA:5E
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 0194C627376F578ADE0EEC3BCE22F8D151F6
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/1-sSgE0HM8DI5OGWGz8Ys0s4rul4.roa
Signing time: Sun 02 Feb 2025 10:14:06 +0000
ROA not before: Sun 02 Feb 2025 10:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.165.27.0/24 maxlen: 24
194.169.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c6:27:37:6f:57:8a:de:0e:ec:3b:ce:22:f8:d1:51:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Feb 2 10:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fac4a01341ccf03239386586cfc62cd2ce2bba5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:44:8b:80:e1:9e:7d:f3:c0:bd:f9:83:6e:
e9:bd:c8:37:51:3c:39:f6:54:3e:31:6d:f8:b7:e8:
25:77:9e:d4:78:61:bb:3a:db:06:c0:79:9a:ee:44:
97:d4:3a:62:13:59:d0:b3:7f:f6:1e:27:47:fe:61:
69:44:ef:7d:78:25:d0:cd:bc:0a:c4:3f:25:bf:4b:
65:74:ea:8d:1a:6e:77:e8:44:b9:3e:36:d4:0a:ad:
d9:3c:17:a4:67:95:83:42:76:8c:2f:46:08:56:84:
6f:45:71:bf:21:4e:20:98:72:cf:31:2b:da:6e:a4:
1d:5b:8c:15:e6:92:6e:a2:94:4f:3a:af:3a:5c:32:
fe:fe:a0:84:7a:a9:b5:43:dc:dd:41:c0:11:db:f6:
5b:49:cd:e6:ba:ac:bb:31:d4:d7:63:54:de:7d:97:
f2:cd:eb:4c:ad:9d:81:41:46:f5:ab:c4:05:c2:5e:
54:a7:c8:16:fb:d0:b4:b9:a9:8c:70:3b:ce:80:9f:
bd:79:8e:4e:98:c2:ba:41:28:45:13:9f:cd:fa:e2:
0d:ad:ab:f2:db:e1:76:30:08:07:30:bd:19:12:ae:
7f:59:e4:93:52:89:6e:9a:c6:ff:f6:5d:68:0b:e4:
ec:d1:67:b3:fd:09:89:f0:f2:b2:86:77:95:08:06:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C4:A0:13:41:CC:F0:32:39:38:65:86:CF:C6:2C:D2:CE:2B:BA:5E
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/1-sSgE0HM8DI5OGWGz8Ys0s4rul4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
194.169.48.0/24
Signature Algorithm: sha256WithRSAEncryption
46:73:0f:4b:8d:21:67:80:18:69:7e:68:23:6c:26:42:c6:2e:
4a:87:a5:19:9a:d5:47:2f:48:10:c3:a5:4e:e6:6b:05:87:ef:
fb:bb:32:94:19:e3:74:de:c2:f9:aa:8c:60:fc:6d:88:13:ca:
42:46:63:ff:2c:c0:ba:bb:a7:e8:3b:42:b7:29:00:8f:36:c2:
56:94:98:dd:95:f2:8c:13:1f:8d:16:d7:d5:35:af:0f:eb:e4:
a0:cf:dd:1c:b3:d4:f7:ea:88:92:09:3e:dd:e1:39:b8:e9:4f:
9d:fc:6f:ad:6b:fa:59:27:a1:ab:07:c5:db:06:c1:30:87:5d:
11:a3:45:82:11:14:63:a4:8d:2b:ac:11:c7:72:5b:41:8c:06:
3b:f8:24:fc:db:30:cf:48:93:ab:3d:cd:9a:7f:44:4f:84:de:
d2:fd:26:6f:ea:85:73:29:f2:cf:6f:9c:f2:66:d9:0c:b7:9f:
d2:9e:8b:9a:1c:34:2c:8e:e0:d3:0f:22:70:64:22:48:42:82:
d4:36:c1:51:07:ab:94:44:96:f3:f8:17:2d:c2:58:1d:44:82:
3b:6b:6f:bb:4c:f1:53:a1:be:ee:cc:de:da:fc:ea:44:0f:98:
26:50:2a:99:3b:db:85:7f:fc:75:6d:f8:1e:22:b4:64:e8:73:
98:fd:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:37 2025 by rpki-client