Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/0-c9PgPd1_wXhamWThnKHlQbGGs.roa
File: 0-c9PgPd1_wXhamWThnKHlQbGGs.roa (raw, json)
Hash identifier: t9blZuOAI0IrEr32bYa6e5eRP1KzQCe8vHG6m5RDWu8=
Subject key identifier: D3:E7:3D:3E:03:DD:D7:FC:17:85:A9:96:4E:19:CA:1E:54:1B:18:6B
Certificate issuer: /CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Certificate serial: 019421B164CF55E8A18DD46B0C2D689CCF45
Authority key identifier: 46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/0-c9PgPd1_wXhamWThnKHlQbGGs.roa
Signing time: Wed 01 Jan 2025 11:47:41 +0000
ROA not before: Wed 01 Jan 2025 11:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210955
IP address blocks: 194.113.61.0/24 maxlen: 24
194.113.70.0/24 maxlen: 24
194.113.92.0/24 maxlen: 24
194.113.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:64:cf:55:e8:a1:8d:d4:6b:0c:2d:68:9c:cf:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465ef7bd2eb3dcdbab04908380d48a8f2febc62c
Validity
Not Before: Jan 1 11:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3e73d3e03ddd7fc1785a9964e19ca1e541b186b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:4e:df:15:6c:5f:43:1a:5c:cb:ee:54:03:
0e:44:37:d1:50:79:59:29:2d:65:99:7f:a8:e7:84:
e4:a0:0a:30:b7:42:3a:52:7a:96:0f:26:2c:25:fe:
37:78:12:1a:97:98:53:03:81:50:b2:1d:fe:6e:6b:
83:fd:c9:f1:c5:40:04:f3:87:4b:dc:f0:2e:44:ea:
43:2c:35:75:c3:b8:31:45:5a:06:98:9c:81:d2:99:
c5:03:f5:21:40:b1:e0:dc:2b:92:f6:e0:0f:64:7a:
72:a3:e0:38:26:81:2a:32:59:e9:37:57:81:cf:51:
b9:1f:61:50:b3:b5:59:f4:57:ef:60:de:c8:26:7f:
57:92:4a:89:9d:07:2e:08:e9:de:36:da:47:0b:dd:
4c:06:a6:e5:06:f7:5e:68:49:88:44:20:13:96:ca:
8e:7c:c2:80:52:f7:3d:13:c5:27:9f:3c:2f:ef:8c:
b6:6c:c2:b0:74:7a:94:60:b1:69:d7:28:7d:d8:22:
4c:49:00:fb:dd:bf:67:7f:d2:74:c9:a0:8e:ff:02:
de:a3:4d:37:80:08:80:b0:dd:1a:9b:c8:56:44:ee:
fd:8b:18:47:41:f3:7c:34:af:6b:35:7d:dd:ac:97:
8e:3d:39:89:58:19:fa:a3:5f:d7:23:68:9a:1c:d5:
da:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E7:3D:3E:03:DD:D7:FC:17:85:A9:96:4E:19:CA:1E:54:1B:18:6B
X509v3 Authority Key Identifier:
keyid:46:5E:F7:BD:2E:B3:DC:DB:AB:04:90:83:80:D4:8A:8F:2F:EB:C6:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl73vS6z3NurBJCDgNSKjy_rxiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/0-c9PgPd1_wXhamWThnKHlQbGGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/409949-f229-498d-9315-34b67df7cb03/1/Rl73vS6z3NurBJCDgNSKjy_rxiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.61.0/24
194.113.70.0/24
194.113.92.0/24
194.113.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:21:ef:72:c1:fc:7f:62:5e:6c:2c:dd:34:d5:42:c8:59:6a:
fb:60:fa:a7:30:5f:3d:4b:9f:72:21:1d:7e:3d:59:b2:71:29:
41:d1:e0:c1:88:8e:2b:19:41:64:af:c9:c6:ac:29:84:d8:20:
a0:06:9e:dc:28:14:c1:30:c3:04:5d:15:8e:03:3c:ff:b4:41:
3b:f5:e5:94:6b:38:7f:2a:fe:cc:57:62:b4:3f:7d:61:5d:1c:
59:21:94:fb:59:e0:1c:37:9a:c1:b4:ae:ea:51:ed:a2:42:47:
83:3f:aa:3a:34:32:71:61:f1:b2:57:63:7b:94:47:29:c7:94:
47:0c:7e:dc:06:46:ba:08:cb:38:65:cf:92:15:d6:7d:58:bd:
2a:3c:2d:1d:cf:7e:d3:13:c4:98:8f:0d:d3:4b:05:ed:c1:73:
c6:99:99:82:f2:e2:d7:97:85:f1:de:89:f5:84:5b:74:c6:a9:
5e:1d:a8:e7:68:5e:23:bc:d5:cf:01:40:de:9b:33:43:fa:52:
25:0e:4e:df:90:44:6f:c9:e4:d7:25:5d:ac:e0:36:da:3b:e0:
eb:36:67:02:77:66:8b:5c:25:43:2f:96:e5:f8:9d:62:79:0c:
09:e4:89:01:21:2b:18:99:77:61:f8:1e:ae:88:02:d8:38:c2:
8f:df:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:30 2025 by rpki-client