Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/p5JsEcS-TVQ9-SJBRnVuXM7Wc3c.roa
File: p5JsEcS-TVQ9-SJBRnVuXM7Wc3c.roa (raw, json)
Hash identifier: gqdQrvPpr32joM58YpW6JjksPW2lUfkJ4ZHv0EqvX3E=
Subject key identifier: A7:92:6C:11:C4:BE:4D:54:3D:F9:22:41:46:75:6E:5C:CE:D6:73:77
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019425FD5B6A2BB81BFAFCC3FDBB530032C2
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/p5JsEcS-TVQ9-SJBRnVuXM7Wc3c.roa
Signing time: Thu 02 Jan 2025 07:49:08 +0000
ROA not before: Thu 02 Jan 2025 07:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59513
IP address blocks: 194.190.55.0/24 maxlen: 24
194.226.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:5b:6a:2b:b8:1b:fa:fc:c3:fd:bb:53:00:32:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 07:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7926c11c4be4d543df9224146756e5cced67377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:3a:51:b3:26:4d:2e:5a:69:9d:e5:44:c9:
f7:44:72:19:e9:90:6e:23:c0:40:df:94:30:99:4e:
0a:84:b5:1a:b6:85:47:fd:a2:e1:37:a9:50:9a:e3:
16:a0:ca:ce:5d:06:82:ba:83:ca:a0:f2:ff:25:47:
64:c0:4a:16:70:16:db:d4:22:ac:7e:3c:6b:57:d6:
9f:b8:b2:b2:fd:eb:98:8d:4e:7a:5a:9c:8c:92:30:
15:77:b0:f5:97:59:f1:97:00:e5:70:a9:91:5d:aa:
e3:16:24:b9:c9:5a:8d:eb:5e:28:93:bf:7b:a2:a6:
8c:8b:87:fe:b5:f8:3e:1d:e9:b8:3f:68:de:8f:8f:
8d:8e:47:75:29:77:d1:09:ad:9a:b7:0e:90:a1:c3:
45:bb:c6:e1:01:36:eb:c2:6b:f1:45:25:be:03:2a:
6b:df:54:d5:da:2f:1e:44:54:37:6e:35:e9:66:10:
bc:aa:aa:3a:2f:c8:25:45:b8:ec:0c:40:11:4c:3a:
a0:27:f4:7c:fa:22:c3:40:20:c0:38:0b:d0:82:72:
f4:92:3b:ba:15:df:59:20:5d:a3:d1:3c:bb:3b:2e:
7a:5d:58:da:ce:15:8a:c5:87:36:03:94:71:d7:66:
b4:57:be:13:24:19:47:79:e5:1d:c8:c7:be:77:49:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:92:6C:11:C4:BE:4D:54:3D:F9:22:41:46:75:6E:5C:CE:D6:73:77
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/p5JsEcS-TVQ9-SJBRnVuXM7Wc3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.55.0/24
194.226.21.0/24
Signature Algorithm: sha256WithRSAEncryption
25:52:9e:b6:12:20:40:b1:b1:44:91:fc:e3:90:4a:63:4c:b2:
40:7c:10:eb:33:23:8b:b4:67:f0:9e:eb:3e:27:8a:3b:22:39:
24:1e:a0:fb:8d:78:38:84:65:54:cc:03:29:50:86:48:25:73:
aa:e4:7b:94:83:7c:3a:1e:89:33:39:be:98:c3:23:67:8b:c7:
89:4d:e8:fd:6c:5d:62:3a:1a:8f:90:f2:53:9c:62:4e:c3:55:
dc:f0:2e:8a:85:9f:75:45:57:a5:d7:29:4e:36:ee:74:f2:8b:
c8:ad:8d:6c:a6:f2:19:9a:70:fb:1d:38:6f:84:21:bc:11:b3:
41:36:ba:3d:f6:a2:de:07:3f:6d:25:6b:18:22:d0:b0:60:b5:
dd:20:df:90:fd:06:cb:e5:aa:63:7c:fa:73:f0:84:86:8f:44:
85:17:7a:4c:81:c3:4f:d4:a1:23:d4:a5:d5:af:e5:aa:11:63:
39:2d:e4:83:73:f8:db:46:9b:57:b8:c3:f8:8a:7a:f2:5a:a7:
73:5d:f8:ab:0d:57:15:cd:39:fb:e2:7b:fe:51:b9:4e:44:57:
77:d9:cd:12:6a:33:fd:d1:bc:3b:0a:8a:7f:9d:db:a1:b2:ee:
40:9e:28:e0:7e:63:7c:17:80:3b:a5:96:7f:c3:fa:15:22:7e:
1b:0b:30:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:51:37 2025 by rpki-client