Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/SF8ZthG7jN4sYdSMXxwbAE3x20U.roa
File: SF8ZthG7jN4sYdSMXxwbAE3x20U.roa (raw, json)
Hash identifier: zwNouuoN+XyQO5oofUfUlxVghnods21ZfICVjrIhP7A=
Subject key identifier: 48:5F:19:B6:11:BB:8C:DE:2C:61:D4:8C:5F:1C:1B:00:4D:F1:DB:45
Certificate issuer: /CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Certificate serial: 019422FBDAD0E23F48B145CBE1DBD9ACE62F
Authority key identifier: 9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/SF8ZthG7jN4sYdSMXxwbAE3x20U.roa
Signing time: Wed 01 Jan 2025 17:48:38 +0000
ROA not before: Wed 01 Jan 2025 17:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50848
IP address blocks: 194.247.18.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:da:d0:e2:3f:48:b1:45:cb:e1:db:d9:ac:e6:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dde45e9367801d18ef0fb0a9fe513beb0e4a54a
Validity
Not Before: Jan 1 17:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=485f19b611bb8cde2c61d48c5f1c1b004df1db45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:6b:b0:0c:dc:a7:cc:7f:c6:70:71:f7:50:
9f:50:fd:2c:11:ae:8c:48:4b:2f:7f:74:fd:12:54:
50:ec:54:fc:69:13:8b:e9:3f:c8:fc:f2:06:67:e2:
01:a0:f4:0a:73:ad:18:32:57:cf:b3:4f:2f:0b:1e:
22:6e:e8:03:90:ae:c0:66:77:2f:74:62:c8:ab:0b:
75:73:21:6a:49:e6:6d:9c:79:ae:5c:d2:58:6b:bc:
ea:83:03:87:ee:ed:71:7c:7f:82:0f:20:71:43:5e:
99:96:d2:5f:24:94:4a:ce:75:15:44:57:95:08:04:
8b:8e:a5:47:e7:9d:e8:ba:11:c9:94:bf:68:b5:d6:
2a:30:0a:aa:d0:80:8b:95:fa:d9:f1:ea:3a:b6:d3:
26:bc:30:2d:d7:28:77:82:d0:c5:a6:b3:a4:12:63:
e5:3d:0f:44:a5:25:6a:9a:ff:f2:62:9b:3f:94:97:
f9:a7:0c:74:e5:cd:69:cd:c1:ae:5a:91:e3:5e:a1:
97:6d:e2:5e:e9:20:0f:35:04:2e:49:fd:13:cc:82:
90:1f:11:7f:f8:80:8b:f0:0f:ce:47:77:84:6d:fa:
77:42:a1:95:4d:1e:86:e9:98:d2:51:05:a0:c7:b4:
fe:9d:08:01:e5:0e:f9:27:2a:47:68:d9:ee:5f:f5:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5F:19:B6:11:BB:8C:DE:2C:61:D4:8C:5F:1C:1B:00:4D:F1:DB:45
X509v3 Authority Key Identifier:
keyid:9D:DE:45:E9:36:78:01:D1:8E:F0:FB:0A:9F:E5:13:BE:B0:E4:A5:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/SF8ZthG7jN4sYdSMXxwbAE3x20U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d787d7-425f-4eb4-b182-03e5cd35e2b0/1/nd5F6TZ4AdGO8PsKn-UTvrDkpUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.18.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:d5:1b:02:24:63:97:fa:e8:01:72:1b:80:fb:6c:58:16:e7:
3a:37:27:da:f2:58:62:c2:7f:a6:c9:87:79:ab:91:9c:d2:17:
09:62:94:bc:09:71:93:6d:ab:17:ba:0f:04:28:02:de:e4:02:
5f:b2:49:57:a3:43:7a:16:32:a3:ef:dc:07:0d:32:6b:cb:ae:
18:bd:a6:03:0e:51:43:15:38:ed:dd:84:81:f3:bc:e4:2d:a5:
e2:de:62:96:ed:71:a9:3e:16:11:d1:9f:ba:7a:37:32:a7:37:
f6:dc:9d:47:f2:ba:7f:f8:44:e4:03:4c:14:e5:a3:d4:18:b4:
13:ea:96:e0:e2:70:59:8e:dc:9d:aa:ed:eb:9a:89:a0:d3:ea:
70:3f:5b:9a:eb:98:ff:00:d0:15:95:d7:4e:5f:0f:4f:36:7d:
26:1a:3e:55:16:03:57:45:1f:18:65:c1:b2:29:2f:70:04:ea:
c2:d0:50:a4:f8:a2:0e:0b:fe:7e:91:6e:94:93:3c:e6:59:d8:
e4:ee:15:b1:67:c8:f8:86:56:94:08:ab:df:72:df:09:d4:3a:
8e:82:39:58:8b:93:d9:d2:0e:22:86:f8:a6:d9:2a:d3:65:54:
d2:17:ab:10:e1:3f:c3:23:87:2e:80:88:a6:60:0e:ab:ea:1f:
b9:6f:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:48 2025 by rpki-client