Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/POugpd8ftek7G9GgfBBS-HKU9H0.roa
File: POugpd8ftek7G9GgfBBS-HKU9H0.roa (raw, json)
Hash identifier: jdVIU07KC1o/dhMxw27fo6De8qJK2r6FpFTR5wwRdC8=
Subject key identifier: 3C:EB:A0:A5:DF:1F:B5:E9:3B:1B:D1:A0:7C:10:52:F8:72:94:F4:7D
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01935465114890DF5CEE611F9D402839D591
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/POugpd8ftek7G9GgfBBS-HKU9H0.roa
Signing time: Fri 22 Nov 2024 15:02:09 +0000
ROA not before: Fri 22 Nov 2024 15:02:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.246.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:65:11:48:90:df:5c:ee:61:1f:9d:40:28:39:d5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Nov 22 15:02:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ceba0a5df1fb5e93b1bd1a07c1052f87294f47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b6:c6:4f:07:3c:a0:aa:45:56:1b:ba:d9:18:
72:81:36:b9:30:cb:03:4b:45:3a:46:51:cd:f4:e4:
b6:40:ab:e1:b6:12:1f:f6:82:4e:18:c3:33:35:68:
51:97:fc:eb:14:cc:15:5f:72:ea:4c:d5:39:e2:e6:
8c:a5:d0:83:f4:40:33:e0:3b:d0:64:d5:8f:7f:db:
22:0e:c7:8a:5c:39:05:02:4e:81:8d:73:76:bf:47:
04:97:3b:5a:16:8e:95:5d:76:24:b8:a8:e8:13:a5:
24:cf:d9:39:47:25:7e:2a:5f:c7:1f:99:6b:85:7d:
df:e2:9c:63:d2:d6:a7:e2:7a:91:79:c4:89:36:e4:
0c:c4:6a:96:4f:bb:4d:22:0e:13:42:45:c3:e7:da:
51:fa:39:05:28:f0:34:14:e2:b1:55:2e:e9:a3:4e:
93:9e:d2:ab:78:0a:40:30:af:54:66:a2:ba:f9:c2:
f6:36:09:97:12:7d:db:da:7b:cf:b5:f1:78:3a:2f:
84:15:13:f0:8c:f9:11:c3:44:21:4d:0e:98:ce:ab:
44:4b:ce:f7:95:81:23:e0:7f:e5:ac:3c:61:c9:d2:
6c:c6:7a:ff:69:cf:cf:26:29:89:da:1a:e4:b3:08:
c9:8c:1c:17:22:82:b3:e3:d7:32:e2:50:e5:96:42:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EB:A0:A5:DF:1F:B5:E9:3B:1B:D1:A0:7C:10:52:F8:72:94:F4:7D
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/POugpd8ftek7G9GgfBBS-HKU9H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
15:67:e8:7c:ce:c5:81:33:19:6e:6e:53:86:f4:82:b4:b4:52:
39:96:99:47:e1:5f:c8:c3:d4:63:e6:35:61:ce:db:3e:63:a6:
14:f7:a3:c4:61:bd:c5:ec:35:57:15:14:1b:ce:2a:9f:10:ed:
72:ca:eb:54:89:05:cc:63:b3:e1:78:f1:a8:7b:90:77:58:c2:
ae:63:0e:ac:e1:8d:1f:11:f3:3c:07:c9:4b:3f:9d:98:91:48:
0c:c8:91:2b:78:fa:15:01:53:6d:81:2f:19:63:b1:21:ca:09:
7e:12:43:8c:3b:2c:a3:da:c0:dc:48:27:5a:f6:49:07:90:ab:
78:6d:08:90:b6:f5:62:0f:3d:55:72:c7:d0:86:46:65:5a:99:
fa:66:f9:c3:00:d7:46:e6:51:88:ea:a8:05:b1:02:36:46:9a:
d9:7e:f6:ae:ab:31:04:b3:b3:18:33:f7:6e:90:f4:3f:30:f3:
07:2c:72:43:cf:91:c1:cb:c0:97:f3:46:49:35:f1:f9:a4:04:
54:b2:70:91:46:df:ca:bf:cb:52:39:6c:f9:67:49:4e:d9:17:
0b:98:8f:86:8e:18:7d:d7:c4:62:72:b7:6c:b4:ab:32:16:23:
8d:00:96:bc:ee:36:06:9b:30:52:58:29:b5:da:9a:41:29:63:
08:d5:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:23 2025 by rpki-client