Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1r_a1fazYkLZXN-RvMb4Pimyub4.roa
File: 1r_a1fazYkLZXN-RvMb4Pimyub4.roa (raw, json)
Hash identifier: W/WvsHLQCvjXBshRLdE9qjxPJENadxi+4wXXThNRHXU=
Subject key identifier: D6:BF:DA:D5:F6:B3:62:42:D9:5C:DF:91:BC:C6:F8:3E:29:B2:B9:BE
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD5A2216489FCCC734ED78CEDB6FD6
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1r_a1fazYkLZXN-RvMb4Pimyub4.roa
Signing time: Thu 02 Jan 2025 07:49:08 +0000
ROA not before: Thu 02 Jan 2025 07:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52016
IP address blocks: 194.190.21.0/24 maxlen: 24
194.190.137.0/24 maxlen: 24
194.190.157.0/24 maxlen: 24
194.226.130.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5a:22:16:48:9f:cc:c7:34:ed:78:ce:db:6f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6bfdad5f6b36242d95cdf91bcc6f83e29b2b9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4c:27:aa:d4:46:45:df:53:21:8c:cb:86:f3:
0b:d4:88:bb:a8:1b:2c:5c:a9:97:4b:2e:b4:c1:e7:
c5:36:13:f6:f2:2a:39:08:94:5e:c6:d5:52:90:48:
73:c9:20:fc:b0:94:47:5f:29:aa:77:a8:b2:17:c0:
ed:55:74:4a:8a:1c:91:a3:6a:48:22:0a:26:64:86:
b3:22:f1:96:ec:16:bd:a1:0d:00:e7:a9:85:46:18:
0c:34:0f:55:9b:30:03:80:fb:ad:a3:62:34:8d:44:
98:a3:bd:2f:41:17:64:b6:49:ce:b6:fe:c9:4f:fb:
16:59:5b:ea:92:24:4e:20:6b:8b:1b:ce:2b:e9:65:
1a:7a:25:7e:2e:02:2d:e8:78:9e:79:f3:de:93:4d:
5f:69:8d:21:80:7f:7d:2f:f7:66:b4:bd:c7:fa:37:
17:af:79:03:e3:05:ca:c3:a5:db:83:94:e7:92:d0:
7f:f0:3b:78:69:04:32:a9:8b:e7:e5:22:a2:2e:de:
93:a0:6d:22:35:9b:73:9f:5c:da:ac:d7:64:4b:55:
cb:df:5d:f9:73:86:10:da:bf:51:69:67:6f:7a:64:
ab:e4:cd:8b:01:9d:f1:1f:ff:f6:d4:70:21:f4:2e:
3f:ab:2b:be:09:2f:7b:06:24:42:27:92:55:48:06:
a7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:BF:DA:D5:F6:B3:62:42:D9:5C:DF:91:BC:C6:F8:3E:29:B2:B9:BE
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/1r_a1fazYkLZXN-RvMb4Pimyub4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.21.0/24
194.190.137.0/24
194.190.157.0/24
194.226.130.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:0b:ab:dd:11:3f:c4:78:70:a4:a8:3b:e5:55:ec:67:cb:f5:
22:bd:09:02:57:45:b9:62:9e:d8:27:64:3d:c6:ab:f8:b1:60:
44:91:28:9d:11:fa:0c:13:6b:ec:2e:80:ee:8b:36:e2:00:b8:
01:92:1e:1b:3b:49:05:3f:03:11:c3:89:70:5f:0e:d2:cc:b7:
1e:b5:4d:7f:02:bc:43:17:38:3e:73:b3:67:07:69:35:1f:31:
98:92:c9:a6:4a:76:d4:c6:e2:9e:1a:38:e8:90:c4:13:4f:92:
b6:ce:a2:33:5f:0f:a4:0d:63:79:7a:91:6d:a2:c6:9c:2d:81:
58:23:a9:0f:91:c0:a0:61:07:a7:41:ec:96:d2:e3:40:19:28:
bd:34:64:0d:c5:49:a0:0f:ca:83:13:20:6e:f0:63:2e:dc:d6:
e0:28:2b:7a:20:9b:d5:2b:c3:68:a2:e1:56:6b:f5:a8:12:bb:
80:62:c7:ea:10:a6:1d:f1:e0:e6:c3:65:a6:a3:9b:db:52:c4:
64:56:13:42:cd:1a:1b:3b:67:41:66:e0:24:79:42:60:b4:eb:
c4:50:aa:da:c9:a9:de:1f:17:fa:07:b7:cc:3a:bc:f3:91:a3:
d7:18:c8:a2:53:c4:22:7e:de:ae:c3:da:02:36:87:e6:b4:3e:
fa:6c:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:49:17 2025 by rpki-client