Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/CKER9wKJnd8i3s1x_cuI1c5b5Gg.roa
File: CKER9wKJnd8i3s1x_cuI1c5b5Gg.roa (raw, json)
Hash identifier: s6MpM43dZhbOOH2ONDtptW7UmeKZDzVPrS361Wp7DlU=
Subject key identifier: 08:A1:11:F7:02:89:9D:DF:22:DE:CD:71:FD:CB:88:D5:CE:5B:E4:68
Certificate issuer: /CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Certificate serial: 019421B22726A8AD69211A9C2E478286E587
Authority key identifier: AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/CKER9wKJnd8i3s1x_cuI1c5b5Gg.roa
Signing time: Wed 01 Jan 2025 11:48:30 +0000
ROA not before: Wed 01 Jan 2025 11:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 194.59.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:27:26:a8:ad:69:21:1a:9c:2e:47:82:86:e5:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada25aafe3a9870e9524afa0265987ed5a5a4da3
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08a111f702899ddf22decd71fdcb88d5ce5be468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:b5:f7:c6:28:21:61:0b:70:53:d2:0b:33:
36:cb:19:11:f2:b8:14:a7:7b:3c:9d:54:f1:20:3c:
d8:e4:1d:7a:06:1f:61:d3:0c:42:c6:ba:4c:ca:aa:
fe:ee:29:ee:81:60:e4:28:cc:9a:01:cd:fa:f7:97:
99:7d:1f:b5:e7:62:33:88:5b:ed:4a:d1:d8:e3:50:
b3:2b:a0:9e:21:42:aa:25:03:7d:a3:e9:09:b9:95:
79:aa:d2:4b:60:6c:3e:39:06:20:cc:59:44:c6:d8:
d9:12:97:e5:7e:0f:20:4c:1d:d2:53:fb:36:d7:9f:
19:29:3b:40:07:cf:38:a2:79:c1:c8:9e:43:95:0f:
41:ee:bc:d6:c1:06:c1:ef:a8:46:a8:37:d5:a1:dd:
96:5e:83:27:38:d9:88:92:b5:af:05:bb:fa:c3:4b:
0d:48:ae:d1:cb:e8:a6:04:f5:ca:e0:84:49:25:25:
7d:66:b5:2b:76:07:5d:64:5f:05:2f:f9:b8:15:08:
31:a3:ce:65:80:43:b6:41:87:5c:12:2b:f2:22:d9:
ea:38:9d:9e:b0:1b:f0:43:59:2b:8c:20:a5:2d:c2:
96:6e:05:83:78:c7:02:b5:db:04:61:8c:2c:43:e9:
ba:88:bb:8c:54:28:17:66:ab:93:73:6a:d5:aa:ce:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A1:11:F7:02:89:9D:DF:22:DE:CD:71:FD:CB:88:D5:CE:5B:E4:68
X509v3 Authority Key Identifier:
keyid:AD:A2:5A:AF:E3:A9:87:0E:95:24:AF:A0:26:59:87:ED:5A:5A:4D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/raJar-Ophw6VJK-gJlmH7VpaTaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/CKER9wKJnd8i3s1x_cuI1c5b5Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/810d24-acbe-4cb2-9ac5-9d5875d86373/1/raJar-Ophw6VJK-gJlmH7VpaTaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.183.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:89:95:88:01:dc:37:70:19:96:31:c7:20:b6:12:9c:af:ce:
f6:5a:9f:ef:34:43:ce:e4:fe:d8:b1:70:52:c8:9b:80:09:27:
f5:52:d6:dd:2f:c0:2e:f7:9d:ca:8b:74:0e:2c:0f:8b:b0:4a:
7c:c2:89:e5:8e:e7:0b:0e:6a:0e:59:1f:dc:30:63:79:34:68:
6a:d9:40:8e:c7:a6:c4:c0:ed:8a:0d:33:e1:09:50:e4:d5:78:
d3:2e:5d:7f:13:3f:80:37:67:af:68:90:d2:c2:42:bc:50:69:
85:1c:b2:f3:1a:63:e8:62:0e:72:b4:86:a3:cd:c2:ad:fd:60:
f3:0f:a8:4a:4c:13:65:3d:fd:8f:ff:11:4d:b3:d4:f1:92:19:
a5:a7:cb:23:bc:9f:5f:10:87:89:dc:ea:bb:52:73:42:1c:a5:
0e:cd:a6:3c:14:6e:0c:ec:07:a9:61:20:dc:3a:ef:b6:cb:aa:
ff:71:ab:7e:ef:bd:03:5e:1a:af:4f:5d:df:76:74:0c:bb:fb:
12:bf:dd:7b:03:94:b7:b4:88:4b:c1:c1:9b:3f:30:3a:6c:98:
ed:e3:26:c2:9d:d1:f2:78:09:89:a9:2b:f3:71:49:6c:fd:21:
f9:80:c9:14:5d:4f:e7:16:85:87:cd:30:ae:69:bb:7b:dc:2d:
65:b4:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:34 2025 by rpki-client