Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/1ACEbeq2rd8EaluDyq5TiKBzLd4.roa
File: 1ACEbeq2rd8EaluDyq5TiKBzLd4.roa (raw, json)
Hash identifier: 0MZ8iyeZ2F1hvm/MT5NrRfSjSe4DRdBnocBwHtwPbAA=
Subject key identifier: D4:00:84:6D:EA:B6:AD:DF:04:6A:5B:83:CA:AE:53:88:A0:73:2D:DE
Certificate issuer: /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial: 0195C83018DC3946F0113F67D2B1148107D3
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/1ACEbeq2rd8EaluDyq5TiKBzLd4.roa
Signing time: Mon 24 Mar 2025 12:45:49 +0000
ROA not before: Mon 24 Mar 2025 12:45:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401190
IP address blocks: 194.26.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c8:30:18:dc:39:46:f0:11:3f:67:d2:b1:14:81:07:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Validity
Not Before: Mar 24 12:45:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d400846deab6addf046a5b83caae5388a0732dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:11:ba:10:db:ac:21:40:59:f4:f0:d8:fd:f2:
33:4d:37:5e:55:f6:20:52:08:a9:d8:2c:b0:2d:6c:
02:1b:a1:7a:7b:ad:8c:97:c5:5d:31:26:60:69:79:
d4:e9:53:c0:25:0c:26:41:77:9e:79:15:6f:cc:30:
15:be:1f:60:97:f5:05:32:59:1e:5b:fd:3d:fd:d2:
a1:4a:ba:5f:a8:23:75:5a:de:07:d1:70:f0:41:f1:
b4:75:05:00:f3:7b:de:3a:00:b1:04:d6:d7:eb:1b:
2d:c3:39:91:74:78:4c:93:e6:e8:42:87:c6:05:8a:
58:b6:25:d7:24:04:f7:6c:51:78:9b:66:f9:71:6b:
3e:cb:33:5d:f8:2c:05:11:56:f0:fc:3c:c3:52:0c:
01:c9:ee:58:bd:c7:3f:13:a9:c0:c6:66:15:98:a6:
f4:1f:1d:9a:65:70:5d:73:15:2a:d5:c7:aa:4c:5a:
b5:81:d5:f0:ae:a8:ba:a4:65:06:b0:d5:cf:37:7c:
33:f8:e9:55:ee:85:d6:12:42:79:82:13:0a:1b:e5:
a4:4f:fa:ea:dd:b9:1f:e9:3e:99:96:09:15:c8:4e:
b4:19:2e:2c:a4:84:48:97:64:dd:e7:0d:11:b3:bd:
f1:16:5c:68:5d:4c:82:25:0b:a4:ca:04:0e:71:d1:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:84:6D:EA:B6:AD:DF:04:6A:5B:83:CA:AE:53:88:A0:73:2D:DE
X509v3 Authority Key Identifier:
keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/1ACEbeq2rd8EaluDyq5TiKBzLd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.3.0/24
Signature Algorithm: sha256WithRSAEncryption
00:b4:a2:01:89:4b:48:0e:a8:3f:65:6b:f7:50:3d:e4:d6:9d:
71:7b:3b:38:20:69:c8:ee:2f:66:8a:26:06:a0:94:b2:d0:67:
86:51:a1:4d:6f:a1:5e:4d:88:b3:23:95:22:3b:f6:6a:0e:bf:
f3:0e:ac:ac:0b:0f:f1:b5:a0:f3:8a:6c:14:05:1f:40:31:19:
96:3d:24:01:ca:d2:69:40:cd:76:9c:f3:02:37:20:2a:19:fa:
27:b7:05:79:22:89:51:a5:9d:2d:ea:95:80:1a:a3:ad:35:da:
6b:cf:09:e3:be:c8:ea:9b:cf:5f:9a:7e:f8:0a:97:a2:4a:11:
93:0c:22:99:0a:fc:8a:d8:6b:f8:3c:e9:ca:8b:61:ae:cb:52:
6a:a0:12:73:87:c4:ad:f7:31:43:18:af:62:04:d2:20:62:7d:
ac:db:c7:4d:16:ce:8e:c9:e8:02:e7:bd:1e:73:bf:a9:6e:63:
3b:5f:d5:70:00:2c:2f:93:76:0e:8f:ea:37:29:fb:81:9b:f1:
67:63:21:79:5a:19:67:74:c6:55:33:2e:a5:68:56:47:7a:96:
bb:bd:87:7e:92:12:05:d8:b6:3f:14:85:88:eb:a4:b0:5d:01:
1f:66:da:1e:8e:0c:b2:12:69:f3:fa:6c:d8:47:70:ff:8c:1c:
de:35:9b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:16:46 2025 by rpki-client