Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/n4Mf2ZoxRDO4Gbl-YZdYsqIz4OI.roa
File: n4Mf2ZoxRDO4Gbl-YZdYsqIz4OI.roa (raw, json)
Hash identifier: aS1o0h1e6vPqOWTx/X2krBGlRAa3LkoHQcee6mx6EEg=
Subject key identifier: 9F:83:1F:D9:9A:31:44:33:B8:19:B9:7E:61:97:58:B2:A2:33:E0:E2
Certificate issuer: /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial: 019584C0DCBC188538BA9968CEB6CF9FBCFF
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/n4Mf2ZoxRDO4Gbl-YZdYsqIz4OI.roa
Signing time: Tue 11 Mar 2025 10:29:46 +0000
ROA not before: Tue 11 Mar 2025 10:29:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 194.180.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:c0:dc:bc:18:85:38:ba:99:68:ce:b6:cf:9f:bc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
Validity
Not Before: Mar 11 10:29:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f831fd99a314433b819b97e619758b2a233e0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ea:34:75:b8:a6:67:17:8e:a7:6b:da:d6:96:
e3:4f:82:0e:8a:bb:bc:d3:bb:c5:d4:ed:ec:9a:70:
fa:a0:b9:1d:8d:e0:63:00:e0:73:10:04:ab:f5:7f:
29:03:ef:ad:0e:2f:a2:87:39:cd:33:cc:0c:e8:80:
1b:98:c0:89:50:cb:28:8d:15:e7:d6:9f:69:c7:fc:
f9:2c:90:1a:c0:34:66:7b:21:b4:ea:77:c1:da:2d:
5f:58:a6:e6:79:6d:ef:0f:09:72:40:64:37:c8:25:
36:9f:f4:ee:37:72:da:a5:96:df:6a:af:dd:13:c2:
4c:d8:f1:07:4a:a3:b2:a9:ad:4d:79:f4:d6:36:39:
e0:c9:0b:a6:a9:d2:ea:a9:70:8c:d8:80:47:e6:dc:
fe:b2:8e:a7:36:35:0e:4a:3b:1e:e9:c4:80:73:a7:
59:a4:4d:5c:db:1e:e7:ab:4e:42:37:ef:63:e1:ea:
d4:e6:79:be:0a:36:b6:6a:a0:6b:8e:2b:fa:48:33:
78:c5:a4:98:dc:a2:a6:22:a6:25:38:f3:42:82:18:
36:8c:5e:58:43:5c:b5:cc:2e:03:3d:dd:5e:7d:c7:
61:61:1b:6b:b8:1e:d8:b2:24:75:44:26:1b:4d:19:
49:ae:16:3f:6b:e7:07:a4:dc:0e:12:b9:8b:2e:73:
36:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:1F:D9:9A:31:44:33:B8:19:B9:7E:61:97:58:B2:A2:33:E0:E2
X509v3 Authority Key Identifier:
keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/n4Mf2ZoxRDO4Gbl-YZdYsqIz4OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.219.0/24
Signature Algorithm: sha256WithRSAEncryption
72:7a:a7:43:a5:ec:45:d1:97:1c:4a:07:40:40:79:2f:be:21:
a3:74:7c:08:69:be:49:81:41:e8:0d:c7:f4:ad:b7:fa:df:1f:
2b:5f:ad:5d:94:fd:35:9f:91:35:87:3b:f4:a7:85:3f:b9:de:
34:0e:1f:39:dc:de:4c:e1:92:22:07:5b:83:e2:d0:6e:70:4b:
86:31:52:5d:ae:6d:b7:09:54:ff:7d:bd:4f:0d:ca:00:96:17:
21:1f:c1:88:11:f4:38:35:48:8a:e7:c5:33:2c:9d:26:49:d4:
d8:6c:8a:3a:58:04:34:83:69:de:84:8a:b3:dd:6a:b3:25:a1:
8e:3f:ee:37:11:0e:fe:32:d0:8c:61:02:1a:8f:dc:eb:0f:ed:
1d:4f:ca:de:24:f5:15:20:33:aa:8b:0d:48:62:8d:ba:33:63:
18:f6:46:de:1e:89:a2:36:82:40:3b:07:dd:df:49:f3:f9:c7:
cb:b0:b6:7f:8a:6e:8c:fe:51:d9:b5:07:3d:f6:ef:38:6b:a0:
4c:50:41:cd:c6:0a:3d:b1:58:fe:2a:42:15:52:cd:a0:74:88:
ea:07:c8:b5:80:76:01:1c:52:fb:5e:3d:52:43:c3:4e:22:a9:
d8:11:be:c7:d1:a8:b6:66:6e:f1:20:66:11:f4:3e:da:29:7c:
1f:9b:93:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:57:34 2025 by rpki-client