Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa
File: hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa (raw, json)
Hash identifier: 3RbNRO/4bn+lvyxkoMHSxqNiv9S4Xn+bWprhvyyRHQs=
Subject key identifier: 84:02:A4:CC:87:F6:A2:22:4D:55:CE:DC:AB:D0:4E:2C:0A:AD:03:09
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 019426D9A628D6BD16EDB166F7A9735ADB2C
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa
Signing time: Thu 02 Jan 2025 11:49:45 +0000
ROA not before: Thu 02 Jan 2025 11:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5406
IP address blocks: 194.53.172.0/24 maxlen: 24
2001:7f8:26::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a6:28:d6:bd:16:ed:b1:66:f7:a9:73:5a:db:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Jan 2 11:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8402a4cc87f6a2224d55cedcabd04e2c0aad0309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:ad:3c:55:5f:f9:91:c6:de:21:f1:b0:81:
ad:67:8d:52:12:1c:7b:ad:16:09:11:0f:7d:2d:68:
f1:87:1f:6a:7b:54:c1:34:9e:c8:15:95:43:cd:68:
44:06:00:9c:b8:85:5c:1d:6f:5f:c8:1c:31:a3:9d:
d8:c3:72:e9:86:59:55:77:95:0f:01:eb:41:69:39:
13:0a:c3:5a:4f:3b:b4:af:86:5e:72:01:88:5a:1c:
13:79:5b:c2:63:a2:58:db:4c:e9:50:81:db:0a:08:
46:82:d9:d8:e1:79:61:15:b2:a6:5e:da:e4:c4:af:
de:3b:5b:53:13:19:c3:d8:74:ea:2f:8b:3c:60:b7:
85:3e:df:50:98:2d:bd:7e:df:d3:f8:6d:d8:93:91:
74:0d:eb:1f:3d:ee:8e:58:61:50:4a:d8:64:b8:56:
cc:b1:68:d2:0e:47:fe:17:dd:c3:61:1f:f4:30:41:
ab:16:26:6c:a5:0f:5f:20:3a:0b:f4:25:3d:e8:25:
c3:07:07:e6:06:e7:9b:65:98:ed:77:80:d5:0d:f9:
99:07:11:f0:75:8e:15:d6:a1:11:41:9e:c7:51:c2:
d1:9e:2e:e1:e4:a9:88:fb:93:13:e2:f9:e4:4d:00:
0f:c6:9b:2a:6d:19:76:c8:03:da:5a:3b:8a:10:20:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:02:A4:CC:87:F6:A2:22:4D:55:CE:DC:AB:D0:4E:2C:0A:AD:03:09
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.172.0/24
IPv6:
2001:7f8:26::/48
Signature Algorithm: sha256WithRSAEncryption
23:7a:09:6d:07:dc:d5:3c:8f:2b:05:55:91:d9:38:86:1d:cb:
78:a3:2c:44:af:36:fc:96:3d:21:b7:88:c4:97:79:35:7b:ff:
5c:89:28:73:3a:72:9b:06:e8:d3:79:81:f8:7c:43:6f:04:71:
9d:ce:86:00:10:fa:1b:17:48:9b:95:44:7f:e0:ed:b6:40:dd:
df:96:62:64:4b:40:44:36:b2:d1:53:89:4f:48:ff:cb:98:1b:
22:e9:de:61:6f:8b:69:58:48:8a:ad:75:b1:86:bf:5f:41:85:
0b:c3:dc:4e:0a:cd:c1:58:26:ad:7e:aa:b7:c4:d6:c3:5d:37:
18:84:7f:f7:c3:58:e4:99:ce:21:36:c5:22:b8:02:74:dd:eb:
ff:e6:13:cc:55:e7:1f:82:9b:8f:bb:ce:ac:59:59:2b:61:e9:
8a:62:78:74:a5:b9:0f:9d:cd:8b:39:61:e3:cd:24:93:c1:32:
3c:fb:d9:7f:0b:33:b0:16:b0:e0:b6:18:8f:05:f6:56:ff:8a:
0d:85:39:60:b9:4e:3c:ab:49:90:5a:45:09:61:0d:10:8b:42:
6f:e3:d9:56:fe:4c:47:7a:d5:cb:a6:ef:68:1d:1e:fe:5e:fb:
e0:69:72:0c:c7:83:0d:17:e3:87:d1:f4:1c:2f:55:ec:2d:27:
38:81:f5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:15:46 2025 by rpki-client