Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/PrK_NQRYp13y-DfvxtWGnq4X0dE.roa
File: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (raw, json)
Hash identifier: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=
Subject key identifier: 3E:B2:BF:35:04:58:A7:5D:F2:F8:37:EF:C6:D5:86:9E:AE:17:D1:D1
Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial: 01942521517FABBF54858108DCEC5B170BBC
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/PrK_NQRYp13y-DfvxtWGnq4X0dE.roa
Signing time: Thu 02 Jan 2025 03:48:47 +0000
ROA not before: Thu 02 Jan 2025 03:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 194.49.21.0/24 maxlen: 24
194.59.152.0/23 maxlen: 23
194.59.152.0/24 maxlen: 24
194.59.153.0/24 maxlen: 24
194.59.154.0/24 maxlen: 24
2001:67c:2950::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:51:7f:ab:bf:54:85:81:08:dc:ec:5b:17:0b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Validity
Not Before: Jan 2 03:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eb2bf350458a75df2f837efc6d5869eae17d1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:78:91:de:dd:bb:c7:61:f9:9b:12:d9:32:c7:
a2:27:dc:db:3c:a7:b1:5a:1a:94:ea:cb:c1:f2:84:
ef:61:57:0a:f0:e4:34:6c:64:95:7a:88:e1:9f:c7:
32:f2:85:26:ff:b4:3e:e1:cc:99:66:73:5d:66:95:
4b:29:ac:20:93:79:06:dc:a6:62:4b:04:8c:59:6c:
8e:25:97:eb:5f:c0:38:06:71:21:3a:73:fa:fe:49:
3a:11:99:23:a7:98:c1:ac:e5:31:5f:98:58:ed:29:
27:b9:5b:d7:3f:f1:57:66:5a:c6:72:86:57:a0:12:
0f:08:97:dd:f4:56:53:1f:0d:07:f4:46:7e:60:0b:
2c:d7:e0:63:98:01:4b:34:89:0e:76:f1:82:24:d4:
9a:e6:da:46:49:51:56:f2:8e:b9:4e:0b:b3:b4:a9:
72:09:2a:22:06:d3:8f:98:4f:3e:81:7c:8f:e7:b7:
0d:1b:71:b2:59:1f:5f:f7:98:75:05:e3:5b:6b:71:
69:af:fc:ed:04:76:70:ca:c5:97:b4:af:71:fc:ab:
7a:18:ff:9d:fc:d6:eb:0d:90:39:43:25:94:56:80:
db:b2:21:d8:47:0d:ac:64:be:aa:79:27:ba:ca:04:
79:bd:f2:05:f5:70:79:9e:5f:93:71:e9:19:2c:d3:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B2:BF:35:04:58:A7:5D:F2:F8:37:EF:C6:D5:86:9E:AE:17:D1:D1
X509v3 Authority Key Identifier:
keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/PrK_NQRYp13y-DfvxtWGnq4X0dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.21.0/24
194.59.152.0-194.59.154.255
IPv6:
2001:67c:2950::/48
Signature Algorithm: sha256WithRSAEncryption
3a:59:71:3f:b0:f5:9c:94:bb:73:12:88:1d:87:95:9a:0b:94:
a5:47:9a:8a:a1:bb:05:24:ad:ed:7e:18:bf:24:f6:84:72:57:
39:6e:52:3f:53:cd:71:6b:7f:e9:03:10:bc:2c:53:99:3d:5e:
34:47:ac:f2:a3:80:7d:4d:81:4d:5c:6d:e7:27:68:5b:e3:fb:
e3:7a:b1:f6:7e:38:2c:d6:76:63:bf:e2:8a:08:30:f6:de:f9:
ca:21:ee:18:13:36:51:7d:b9:63:0e:4b:82:07:b4:d2:13:01:
36:8b:b7:58:b1:98:b3:cd:31:d3:69:bf:2a:90:b3:f6:37:03:
41:f7:53:50:b1:ce:8a:c2:d9:cc:ba:ae:4f:a0:42:3e:55:d5:
cc:be:bc:ca:44:69:1d:7e:49:4d:db:9f:b4:cb:ac:31:f0:57:
7b:e9:8f:7a:78:b7:2a:ae:58:19:fb:a2:f4:b2:fd:89:05:62:
8a:8c:45:10:eb:e3:1b:5f:07:03:27:69:94:93:71:61:02:0c:
31:88:76:fd:04:fa:63:4a:58:1b:da:ad:10:39:10:48:14:72:
e1:56:63:4c:70:68:21:80:c8:8e:a1:34:b2:d4:4d:7e:94:3e:
bb:5c:f8:22:e4:7e:bf:a5:5d:df:ab:1e:43:39:fd:d4:d2:a8:
65:db:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:48:26 2025 by rpki-client