Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/4XfPOOAYcYXWw91c-kGkm6cST-c.roa
File: 4XfPOOAYcYXWw91c-kGkm6cST-c.roa (raw, json)
Hash identifier: 38E8igMHrC41dPecqR0KjPhyCudBQNA0jIAJRgoe+/8=
Subject key identifier: E1:77:CF:38:E0:18:71:85:D6:C3:DD:5C:FA:41:A4:9B:A7:12:4F:E7
Certificate issuer: /CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Certificate serial: 08F9F3E5
Authority key identifier: B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/4XfPOOAYcYXWw91c-kGkm6cST-c.roa
Signing time: Sat 01 Jan 2022 10:53:44 +0000
ROA not before: Sat 01 Jan 2022 10:53:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44398
IP address blocks: 194.93.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150598629 (0x8f9f3e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bd281345af6cd54154d4cff74f195a388fffc1
Validity
Not Before: Jan 1 10:53:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e177cf38e0187185d6c3dd5cfa41a49ba7124fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0a:86:a1:b1:a1:d8:0c:dc:55:9b:89:91:27:
a7:88:07:04:ea:48:f1:84:7a:0c:08:c8:9d:aa:61:
f0:88:f8:6d:9d:33:9e:59:83:08:f5:49:f4:85:75:
36:7a:aa:76:98:13:0e:c7:a0:a5:e3:6f:49:37:55:
69:f3:95:e3:0b:27:92:44:89:7a:27:6a:31:99:ba:
fa:cf:77:0e:ec:1a:71:e1:65:1c:3b:d4:0f:29:7b:
b0:a7:fd:14:dd:95:eb:84:09:5c:a4:b0:6c:34:f9:
5a:18:d1:af:0b:72:64:12:4d:89:e2:0b:6d:d4:24:
6f:8e:0e:ec:4d:f3:fd:a7:51:e3:6d:09:41:b4:11:
ff:f1:9c:96:a3:ed:84:6b:91:2d:58:e4:7e:b8:d0:
e8:c6:49:73:94:90:36:7d:68:6f:ac:a9:30:c4:58:
89:78:0f:0a:8d:48:89:14:86:e3:63:84:7d:67:00:
a1:8f:35:3f:77:ee:b4:d3:56:89:e6:4c:9a:4b:af:
c9:84:f9:34:5a:44:91:51:79:79:98:1d:de:e1:8d:
13:0f:32:7f:14:03:cf:1e:aa:57:83:cc:6f:af:58:
22:eb:af:b0:ce:da:ce:d2:2f:f0:f7:da:85:b4:5d:
db:3e:5b:15:28:a0:f4:4d:a5:cb:7b:f3:66:7f:c3:
1f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:77:CF:38:E0:18:71:85:D6:C3:DD:5C:FA:41:A4:9B:A7:12:4F:E7
X509v3 Authority Key Identifier:
keyid:B0:BD:28:13:45:AF:6C:D5:41:54:D4:CF:F7:4F:19:5A:38:8F:FF:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL0oE0WvbNVBVNTP908ZWjiP_8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/4XfPOOAYcYXWw91c-kGkm6cST-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f5fdeb-3a14-4a9e-8815-e56b690fd30e/1/sL0oE0WvbNVBVNTP908ZWjiP_8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.75.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:95:52:51:9e:11:97:28:c6:ed:a0:36:de:42:bc:2c:79:7c:
d4:71:9a:bf:25:96:de:86:a3:b1:e1:60:f7:68:15:b1:3f:54:
48:11:bf:cd:90:eb:ab:f9:f7:20:9e:33:0d:c9:fd:7a:46:d4:
e7:88:8e:9d:31:95:af:46:0e:5f:9e:8d:77:b8:69:bd:6a:1c:
6b:2e:ef:c2:65:52:3e:08:f5:da:5f:e3:fd:6b:e9:62:41:ac:
af:ec:00:be:8a:13:9c:95:5e:e3:e0:08:88:2d:dc:73:2c:fd:
de:95:87:03:94:9c:97:ca:a2:03:fa:85:62:f7:b1:78:d9:4c:
09:3b:5b:22:2d:a0:e0:49:b4:f7:19:7e:19:cc:63:e0:c9:d6:
31:94:32:95:63:62:e8:3b:61:50:4d:0f:b6:66:4f:c2:e3:2d:
b2:cb:a4:1b:d0:06:a7:0d:dc:2f:3f:76:7c:80:90:e5:02:3f:
43:b4:a0:97:66:53:fe:21:c4:00:33:9e:0b:11:aa:11:85:ee:
1e:7a:f2:00:db:c6:e4:d2:f6:9b:3d:78:62:bb:c4:ee:3f:09:
55:67:ec:c8:b9:d9:be:e6:da:0f:8c:32:b6:fd:12:2e:54:1e:
58:e3:1f:bd:dc:05:7a:ad:32:37:e8:28:82:d4:fa:de:db:8a:
ae:1a:af:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:42 2025 by rpki-client