Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/KjZUO3n3Hf0XItqXh0y-GjTJJqk.roa
File: KjZUO3n3Hf0XItqXh0y-GjTJJqk.roa (raw, json)
Hash identifier: AA8DaEpgK5iPTfqAYAn8ChReCF4MLbGegh0HPBPJ6Js=
Subject key identifier: 2A:36:54:3B:79:F7:1D:FD:17:22:DA:97:87:4C:BE:1A:34:C9:26:A9
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 0189D0E1620B4C3F1BEF1E85C217517A0B06
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/KjZUO3n3Hf0XItqXh0y-GjTJJqk.roa
Signing time: Mon 07 Aug 2023 16:42:58 +0000
ROA not before: Mon 07 Aug 2023 16:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136038
IP address blocks: 194.126.202.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:e1:62:0b:4c:3f:1b:ef:1e:85:c2:17:51:7a:0b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Aug 7 16:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a36543b79f71dfd1722da97874cbe1a34c926a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:29:c6:37:c1:38:dc:e1:54:07:43:4d:d7:55:
3e:b7:ba:e4:f0:08:5b:a2:75:cc:a4:cd:19:b6:a6:
b3:a1:b0:e8:1a:8a:59:ad:60:11:41:93:f3:81:57:
07:87:49:8e:4d:b1:76:a4:29:2f:06:4e:ec:c0:81:
a1:d0:c8:5d:3c:02:98:60:a2:7c:e4:c4:a6:94:f4:
24:64:c1:74:60:df:67:33:83:fc:14:3a:84:6a:ce:
0d:5e:95:56:b7:ab:fa:67:4b:3f:d8:1f:3d:a8:a5:
56:d7:63:06:da:e3:1f:67:00:59:61:f9:44:23:a8:
e4:34:25:d4:bf:25:c1:4f:e0:22:4a:86:37:a5:83:
53:79:45:d2:fa:2f:ed:00:56:e7:5f:e2:85:9a:a6:
71:63:a5:5c:43:82:fe:bb:a7:28:3a:c1:d5:61:0e:
5f:0f:4c:c5:bf:ce:68:86:39:f7:3b:41:73:6e:2f:
8a:44:cd:cb:71:ad:5b:56:81:4c:a2:22:19:e3:e2:
bb:db:cc:4a:59:68:19:cb:0d:1b:35:7c:45:f1:63:
96:ce:63:7f:e3:6f:5b:ed:e0:39:d9:94:11:6f:13:
b8:72:4c:67:04:c7:f6:85:26:3a:7a:6b:bc:cd:ae:
c1:3e:2f:3e:8a:7e:94:5f:45:e3:86:92:64:e0:65:
04:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:36:54:3B:79:F7:1D:FD:17:22:DA:97:87:4C:BE:1A:34:C9:26:A9
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/KjZUO3n3Hf0XItqXh0y-GjTJJqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.202.0/24
194.126.215.0/24
Signature Algorithm: sha256WithRSAEncryption
14:9f:3f:fb:00:59:f5:63:71:ef:6f:4f:dd:4f:f8:b1:8f:92:
de:08:e2:3b:b4:9d:06:ec:07:74:19:c5:63:51:f1:79:ea:ac:
f9:6f:f8:f1:6a:88:55:06:f2:8a:b6:09:ad:24:6f:dd:c3:ca:
d5:76:f9:1d:f0:f3:80:36:dd:e8:3a:01:b9:38:fc:50:79:e2:
8e:b7:d9:34:a0:7d:ed:53:be:48:ce:eb:c6:45:09:4e:fc:b4:
99:f8:76:9b:f3:2b:c0:f8:6d:10:64:fe:ee:db:2d:c3:60:b7:
d7:6f:27:10:32:32:1e:76:ec:a4:b2:aa:9a:51:4f:7c:9e:09:
c3:33:bc:36:53:66:a3:1c:0b:e0:d6:0e:c2:86:01:c2:97:86:
32:5a:e6:2a:1d:29:1e:35:b0:94:83:be:98:d4:71:5e:83:3d:
c3:f1:04:6f:bf:9c:a5:fe:64:43:3b:14:d7:9f:f3:6b:fc:49:
69:2f:74:5b:dd:d8:89:86:f6:b2:92:7a:ce:5e:eb:31:a6:e3:
57:3c:b5:69:2c:8e:ce:13:90:03:47:02:e8:8f:21:12:94:c4:
88:25:8c:20:6c:7b:40:c9:cb:35:9d:9c:cc:be:76:42:6b:77:
f7:32:a0:17:18:83:1a:e2:a4:2a:78:44:c8:46:d9:11:c8:6f:
1d:59:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:59:19 2025 by rpki-client