Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-i4pBUrnR_ST4J_XCMsDQ_M710g.roa
File: 1-i4pBUrnR_ST4J_XCMsDQ_M710g.roa (raw, json)
Hash identifier: uGNX6pbfDwS6EBhC6qeBECpIeBVyKpCygKNsheny44I=
Subject key identifier: FA:2E:29:05:4A:E7:47:F4:93:E0:9F:D7:08:CB:03:43:F3:3B:D7:48
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01942444928BDD623F907147243DE97C81D7
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-i4pBUrnR_ST4J_XCMsDQ_M710g.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57196
IP address blocks: 194.104.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:92:8b:dd:62:3f:90:71:47:24:3d:e9:7c:81:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa2e29054ae747f493e09fd708cb0343f33bd748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5f:67:94:81:b0:fc:e4:f3:ae:29:66:99:f7:
d8:25:29:2d:c0:e3:3c:cb:6d:48:be:61:29:47:22:
82:db:fc:37:c9:cb:3d:82:94:31:b8:83:1e:a2:af:
42:05:a1:13:c5:c6:16:23:1d:fe:13:99:de:11:9e:
b4:de:4f:ca:79:60:59:62:fc:03:26:09:1e:34:52:
de:51:c0:00:4d:8b:75:90:c9:0d:2a:a4:1e:f6:6d:
91:da:e4:17:8d:bb:ee:1a:db:7c:96:1d:a9:e1:dd:
8e:0f:80:74:bb:22:8b:a8:0d:e9:11:62:eb:63:56:
94:2c:03:94:ee:58:bf:fa:c2:ef:0b:80:0d:d4:5d:
8e:99:0c:e1:0a:21:e2:97:90:05:21:ea:55:0c:05:
87:de:b4:55:47:55:0e:a7:ae:cd:6b:f5:53:c7:34:
71:98:ee:91:0d:68:02:97:c6:a1:32:63:3b:54:07:
21:d0:26:8e:90:f2:45:5a:90:a0:03:24:ae:5c:30:
af:bd:3f:f8:4d:70:10:1f:3d:95:eb:2c:3c:eb:c0:
5a:3b:db:a7:f8:5a:2e:f0:f7:fc:76:4f:8e:56:30:
fa:61:b3:1a:3e:19:d8:00:72:0a:0d:a7:2c:bb:b6:
b4:04:c9:60:0a:86:3b:34:9c:09:17:97:2e:d0:bd:
4d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2E:29:05:4A:E7:47:F4:93:E0:9F:D7:08:CB:03:43:F3:3B:D7:48
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-i4pBUrnR_ST4J_XCMsDQ_M710g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.152.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b2:43:97:68:1b:6e:4c:ea:14:cd:eb:2c:eb:44:83:68:23:
92:05:9b:0b:3f:d1:9c:cb:00:e7:db:f5:14:54:ee:7a:84:3f:
0a:2c:03:f2:b8:de:e4:be:4d:bc:f1:21:f9:51:08:46:87:22:
32:56:d7:53:e8:2f:a2:27:03:6f:a3:37:c7:2b:9e:bf:3c:86:
92:ad:d8:a9:dc:8c:d2:fd:fb:6f:d3:bc:1b:ed:57:4a:fe:31:
1d:43:ba:6e:80:f2:ae:3d:df:4e:c2:e8:c2:ee:8d:81:3c:bf:
3e:f7:5a:34:a9:18:9a:11:7e:27:54:1e:1f:f6:06:d7:2f:67:
eb:d9:96:bf:71:9c:a2:81:a9:27:b7:68:cc:fc:63:61:fd:83:
42:13:94:88:67:c3:aa:8a:8f:10:f6:6c:a1:2c:f9:1b:af:f6:
ff:d9:8e:74:d9:bf:2b:f4:c2:11:73:7c:4d:0a:ae:2b:4b:19:
be:50:5e:60:bf:0e:8f:d3:a0:59:52:38:23:26:12:91:ae:e8:
62:2c:f7:44:ec:51:73:26:36:24:9a:14:6e:f0:20:70:f9:76:
d3:40:c3:73:55:26:1a:9a:3e:c0:53:c3:46:f8:2f:fe:9d:bb:
04:7b:30:1b:d6:d1:e6:f4:ce:53:73:a4:d6:3a:52:a6:e7:73:
b6:27:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:30 2025 by rpki-client