Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/pdXTI2KYbYS7ubvKJlkwpahEITg.roa
File: pdXTI2KYbYS7ubvKJlkwpahEITg.roa (raw, json)
Hash identifier: CBxqQQuVgJ4790l6xmLuBKpfJWsXyKUzuYFXvuT5m3I=
Subject key identifier: A5:D5:D3:23:62:98:6D:84:BB:B9:BB:CA:26:59:30:A5:A8:44:21:38
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0194228E34C4AF2F674D8173723641E5EDEC
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/pdXTI2KYbYS7ubvKJlkwpahEITg.roa
Signing time: Wed 01 Jan 2025 15:48:52 +0000
ROA not before: Wed 01 Jan 2025 15:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.246.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:34:c4:af:2f:67:4d:81:73:72:36:41:e5:ed:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5d5d32362986d84bbb9bbca265930a5a8442138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8c:72:6c:eb:cd:91:db:8a:42:55:60:f8:7f:
79:e8:02:fd:37:c9:1c:b8:f3:20:7c:15:b0:f3:0c:
4c:84:80:be:f3:c7:46:cb:60:93:05:6b:00:67:e2:
7a:52:8a:40:22:2b:6d:f4:3d:51:95:67:12:2b:c8:
e2:b4:22:be:c0:9a:a0:12:2f:46:a1:c4:fe:e0:7f:
2d:da:df:57:c7:18:90:e5:f0:40:9c:97:16:6b:4a:
4c:31:10:ba:49:29:bd:6e:e7:03:e7:69:5e:90:28:
c3:ad:fb:84:de:b9:f7:ec:05:ad:4a:64:a0:9c:27:
b1:6c:54:a6:87:6c:d0:f3:7c:3f:54:27:b6:d2:82:
6b:6a:ce:18:ec:ae:16:f2:da:ef:c6:5c:b9:79:25:
ef:bb:6c:fd:48:ee:f6:09:38:04:36:25:25:48:ab:
e7:5b:53:ad:27:5f:a4:66:75:89:68:1c:70:92:a6:
f2:e4:1a:82:49:7a:dc:c0:7e:2b:3d:42:85:c2:71:
bc:8c:7e:f5:98:b5:8a:8c:68:98:6b:24:dc:65:d3:
e1:7e:7f:84:30:8c:7d:df:70:27:86:e0:d8:ec:9d:
03:89:81:79:c1:24:2f:3e:c5:e8:2b:d2:23:c0:c5:
e6:28:1d:aa:d0:eb:5e:75:17:bb:96:3f:9e:29:8d:
e9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D5:D3:23:62:98:6D:84:BB:B9:BB:CA:26:59:30:A5:A8:44:21:38
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/pdXTI2KYbYS7ubvKJlkwpahEITg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.36.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6e:3b:c7:15:cb:4b:62:0f:c3:a8:75:57:1e:25:28:02:16:
ac:4d:e3:37:18:4b:47:6f:17:2f:1c:94:fe:c1:20:14:0c:5b:
5d:92:99:5a:6f:14:5e:ed:ab:27:89:8b:07:a6:1d:da:b7:af:
1e:f8:7b:9e:18:89:cd:48:54:eb:bf:5e:d3:dc:95:85:f9:f6:
a1:b6:33:75:c4:ee:fa:a6:2e:aa:e8:ee:bb:f0:a8:25:1e:8d:
1c:9e:1a:f2:d0:99:af:5c:69:1d:63:b1:3b:49:f0:25:41:26:
e5:6f:7c:50:65:e5:dc:4c:02:a8:cd:bc:63:3d:e5:68:46:ad:
4c:17:a9:90:bb:b0:b7:fb:68:54:96:9d:fe:a7:36:e5:eb:c5:
23:82:03:b4:1a:f8:73:0a:07:9b:9d:e7:d2:1d:48:2a:23:fb:
2a:8c:47:4d:d5:d0:8b:02:37:a7:d2:42:5c:10:9c:4e:a0:b4:
f0:49:a1:0e:46:64:4a:9f:16:29:fd:4a:11:11:05:50:90:f5:
28:7d:69:b2:96:b4:1b:17:7e:bf:d1:b2:6f:5e:7a:f5:68:86:
ec:90:b5:03:ff:d7:b8:e9:4e:a7:09:ea:40:19:09:77:ca:c3:
bf:16:14:94:af:a2:61:b6:ec:fb:1d:88:de:98:3a:5c:d3:9f:
e7:db:08:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:50:19 2025 by rpki-client