Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/AjGSJmDTUaTBrx_s-vikweMceXs.roa
File: AjGSJmDTUaTBrx_s-vikweMceXs.roa (raw, json)
Hash identifier: RfgMVVSxZ47znUU7lhyrOD6u13oZH6rQq2T8fu6bfxk=
Subject key identifier: 02:31:92:26:60:D3:51:A4:C1:AF:1F:EC:FA:F8:A4:C1:E3:1C:79:7B
Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520
Certificate serial: 019426D95E519A5161B9B0E1164793045AA4
Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/AjGSJmDTUaTBrx_s-vikweMceXs.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213019
IP address blocks: 194.39.69.0/24 maxlen: 24
194.39.70.0/24 maxlen: 24
194.39.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5e:51:9a:51:61:b9:b0:e1:16:47:93:04:5a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0231922660d351a4c1af1fecfaf8a4c1e31c797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:db:62:c2:f9:63:ed:ec:c1:81:df:de:f7:a3:
33:47:dd:d5:df:c3:c9:a4:91:0a:c8:a7:1d:96:7b:
9d:7d:f8:82:61:ca:cf:d8:9b:e4:e0:5c:bc:45:66:
1a:e1:2d:41:d1:a5:4f:99:5b:01:76:0b:4c:46:c4:
a3:00:f5:02:55:4c:3f:87:17:8f:43:68:9c:cd:5a:
81:f9:6e:f3:f3:8d:a2:57:4e:e0:bc:be:76:78:42:
1a:8b:4f:d4:4e:92:8c:9b:09:ab:e7:77:89:23:a6:
c5:86:67:6d:eb:b4:cf:29:98:0a:12:0a:0b:7d:30:
f6:07:74:d7:c7:f1:28:7b:fc:78:54:41:a3:36:cf:
13:ac:5e:5c:7c:f7:8c:e4:f5:7b:27:fc:cf:ce:b9:
cc:8b:70:3d:8f:d7:fe:cd:1f:1d:2b:1a:af:5c:4e:
b5:96:c9:a4:c1:fa:3e:d7:78:41:0e:da:f3:99:36:
75:93:7f:73:de:c6:76:49:49:26:4a:00:da:f0:e1:
6e:7a:58:df:2b:14:a9:18:9a:10:bc:ed:66:d5:ee:
09:36:ed:cf:f4:bd:67:d4:25:45:99:b3:08:33:9c:
3d:04:2d:6d:1b:40:68:56:f0:90:0b:b8:00:24:9f:
32:b9:84:09:10:f9:a7:f6:f6:61:0e:dc:74:d0:48:
e0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:31:92:26:60:D3:51:A4:C1:AF:1F:EC:FA:F8:A4:C1:E3:1C:79:7B
X509v3 Authority Key Identifier:
keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/AjGSJmDTUaTBrx_s-vikweMceXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.69.0-194.39.71.255
Signature Algorithm: sha256WithRSAEncryption
9d:c7:94:fb:82:87:7f:c5:bb:de:ad:f0:69:0e:9e:f4:21:da:
88:00:55:81:7e:21:20:d4:4a:9a:a2:36:17:58:02:95:37:e0:
b4:06:33:a5:ec:b4:8d:5c:08:0b:16:a7:6f:31:b7:c4:98:d7:
06:d8:bd:8d:6a:99:91:0a:39:cf:9e:bc:47:34:c2:21:9f:fc:
83:11:32:c9:39:6d:7e:32:04:5e:8c:32:2c:d0:e0:69:95:24:
fb:fd:b9:8f:f2:5c:23:cd:5f:6d:9f:95:10:11:eb:f4:01:4f:
bd:55:3b:b2:c7:63:0f:35:2e:b7:38:2a:c0:ee:7f:9b:c9:08:
d8:9c:53:03:5e:50:eb:1d:57:4f:64:e2:60:2c:b1:b6:29:fe:
4c:40:e7:05:e8:ac:6a:a1:10:23:74:64:2f:06:3f:85:b0:35:
8a:10:cb:c9:1e:c6:d1:c3:5e:12:2a:d0:01:ad:ff:1b:1a:24:
38:94:a0:87:1b:4a:79:28:d8:de:28:a7:c1:b2:86:1a:25:97:
03:3b:91:c1:8e:03:53:77:ff:84:7b:1e:1a:22:03:11:70:f4:
66:37:57:7f:96:05:28:d4:47:46:d6:8f:59:08:6c:fa:5d:a2:
2f:a3:99:e0:c6:8b:5b:f0:d8:83:22:bc:17:8f:3f:e2:67:c0:
9e:d1:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:51:54 2025 by rpki-client