Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/un2uknN2W9w5OVFdwRju9cBy-mk.roa
File: un2uknN2W9w5OVFdwRju9cBy-mk.roa (raw, json)
Hash identifier: qh9uTPyqJvtz7uZAnXdzg3vTwTcJJzIzXrRyG5PysKw=
Subject key identifier: BA:7D:AE:92:73:76:5B:DC:39:39:51:5D:C1:18:EE:F5:C0:72:FA:69
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 019569C4CC4918BFF5081D8C624A294BDF06
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/un2uknN2W9w5OVFdwRju9cBy-mk.roa
Signing time: Thu 06 Mar 2025 04:44:19 +0000
ROA not before: Thu 06 Mar 2025 04:44:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3351
IP address blocks: 194.85.224.0/21 maxlen: 24
194.85.236.0/23 maxlen: 24
194.85.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:69:c4:cc:49:18:bf:f5:08:1d:8c:62:4a:29:4b:df:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Mar 6 04:44:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba7dae9273765bdc3939515dc118eef5c072fa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:84:06:03:2c:ce:03:2d:67:25:64:21:ff:
a9:a7:c9:e7:5f:3e:6c:f3:18:20:ab:a8:bd:7f:51:
71:c7:7f:fa:42:b2:40:4d:09:9b:9e:a9:bc:dd:d4:
7c:d8:cd:d8:d0:16:07:92:f5:68:69:06:61:06:39:
88:44:cb:b8:44:31:e4:ba:72:e4:e1:aa:42:f4:0c:
cb:92:02:41:f5:ad:74:5a:91:31:42:35:96:91:58:
26:09:b7:c4:f0:a3:d0:96:18:11:6f:73:cf:7b:94:
b2:73:4b:1a:24:f9:bf:65:f7:93:ea:e2:78:2d:41:
91:9d:1a:35:4a:62:14:7c:2c:19:d7:12:c5:9a:03:
9e:21:0b:ef:c9:c4:21:9d:e0:e3:e8:57:c7:09:bb:
09:6d:f3:63:98:7d:46:e1:20:04:e6:2e:c0:39:78:
86:a2:fe:32:38:4f:ac:90:ce:47:2f:8b:ab:a4:b3:
06:21:41:8d:6f:2b:97:7c:d8:95:99:a4:ef:64:f5:
5b:74:ec:bd:93:ef:dd:a3:55:5f:7e:b9:1e:a2:6d:
d0:ab:34:4f:ce:bd:10:10:6b:8a:a1:f1:d0:27:1a:
cb:b9:dc:ba:df:4d:d6:d4:d6:c8:c5:74:49:35:57:
d2:29:e1:73:c8:49:8c:60:7d:37:3b:08:b5:94:5b:
37:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:AE:92:73:76:5B:DC:39:39:51:5D:C1:18:EE:F5:C0:72:FA:69
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/un2uknN2W9w5OVFdwRju9cBy-mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.224.0/21
194.85.236.0-194.85.238.255
Signature Algorithm: sha256WithRSAEncryption
99:b0:a8:44:2a:0f:c3:c6:0f:b4:d3:0e:8e:33:51:b5:b8:6b:
0f:54:1e:e4:6d:66:2b:ef:43:c2:a1:6d:1b:94:53:e1:92:00:
82:dc:68:bf:cd:01:5b:8e:37:73:74:a5:05:5c:30:b0:5c:4f:
90:fb:ff:46:23:b1:0d:f7:b0:8f:6f:a9:8b:4e:3e:72:a7:57:
a2:25:fd:90:ef:06:13:cf:d8:4e:15:e6:6b:d6:16:db:53:e3:
e1:31:25:de:05:13:31:1c:00:50:2c:44:ba:fc:37:ab:ed:42:
06:3e:ae:47:48:f9:88:79:84:74:17:7a:40:fe:92:6e:17:16:
45:c8:7c:8d:0e:91:aa:f8:95:b2:59:a4:c6:ed:3c:7f:b0:98:
bc:73:8e:a7:56:5d:ae:d7:17:52:77:47:20:ce:da:42:50:60:
77:f3:c2:26:1d:00:40:c4:4f:3a:16:8f:9b:46:37:7a:4f:31:
53:61:12:b5:a5:a3:60:d3:9b:3d:5b:b2:22:4a:52:06:26:84:
4c:bc:8d:e4:32:e0:3f:38:d9:65:1b:f0:8e:0b:af:89:b5:88:
65:10:bf:f3:b9:84:67:25:f1:17:f6:04:60:8f:6f:e1:45:1c:
5a:f1:b5:27:fe:1d:d3:62:3d:9a:f7:74:37:68:65:7f:0d:cc:
ca:63:14:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 10:51:38 2025 by rpki-client