Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/iAnZ5coAUkQIezSEoSc6B6_I7O4.roa
File: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (raw, json)
Hash identifier: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=
Subject key identifier: 88:09:D9:E5:CA:00:52:44:08:7B:34:84:A1:27:3A:07:AF:C8:EC:EE
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 019427477B807786997F88A6AE53AC3C8FAC
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/iAnZ5coAUkQIezSEoSc6B6_I7O4.roa
Signing time: Thu 02 Jan 2025 13:49:43 +0000
ROA not before: Thu 02 Jan 2025 13:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9145
IP address blocks: 194.127.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:7b:80:77:86:99:7f:88:a6:ae:53:ac:3c:8f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Jan 2 13:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8809d9e5ca005244087b3484a1273a07afc8ecee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:26:0a:55:c8:2c:61:f8:64:e2:61:c9:10:61:
be:90:7c:86:7e:d4:5d:92:a5:01:39:bc:62:cb:02:
03:aa:c1:08:ca:8f:7d:c8:29:b0:44:14:7e:60:32:
04:a1:1a:b6:12:a0:34:87:df:35:16:1e:37:c5:f1:
a5:97:78:c4:4c:87:d5:ba:0c:69:66:75:ee:36:cb:
ab:bc:98:3a:8d:17:fb:cd:7d:89:76:7d:09:1e:81:
fd:17:95:b2:17:c9:d4:8e:21:ac:fd:20:6b:aa:f0:
26:da:d9:d7:ba:0e:79:d0:c5:7b:ab:f5:ac:47:dd:
49:29:56:74:59:d0:b8:4a:c4:c4:f9:31:4a:e1:12:
80:8c:8d:42:4f:a5:3a:9b:30:e4:f1:c2:10:06:28:
51:1b:c7:d9:bf:ef:96:83:4b:e3:d8:1e:23:0c:e7:
d3:07:89:0f:c6:ff:ff:0a:e0:e1:f7:76:4d:1f:a7:
75:1c:df:52:11:ff:3d:22:41:14:04:75:1e:eb:ab:
53:bd:76:c9:84:69:47:8c:65:16:41:d6:93:22:91:
40:3c:c1:50:50:98:f3:57:57:1e:c8:01:8c:18:0d:
b8:09:a8:ff:da:40:51:a7:d7:78:73:24:1d:45:b4:
f4:2f:f6:b8:58:91:26:84:fa:e3:7c:30:7a:21:c8:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:09:D9:E5:CA:00:52:44:08:7B:34:84:A1:27:3A:07:AF:C8:EC:EE
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/iAnZ5coAUkQIezSEoSc6B6_I7O4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.103.0/24
Signature Algorithm: sha256WithRSAEncryption
98:35:3c:5c:d7:4a:29:c5:06:48:74:f3:3d:dc:62:15:ea:b9:
20:af:9b:98:71:c3:9d:c0:45:2e:e0:66:b8:55:69:f2:d6:57:
44:03:35:76:cc:f8:6b:3c:33:81:c9:1a:04:bd:1b:44:da:38:
09:75:92:0c:e1:94:91:e6:81:38:3d:c9:da:77:4f:f5:69:d0:
77:66:12:c9:52:85:52:39:eb:85:c0:6a:14:0a:cc:d9:ba:a9:
e5:ae:7c:ec:0f:89:84:79:fa:72:b1:44:aa:b7:de:dd:b5:a1:
b9:a8:25:36:1b:e8:09:21:8f:8c:66:d9:5b:7a:aa:53:d9:51:
c5:77:3e:75:d3:5b:57:8c:ac:7f:d0:3b:f6:95:db:d0:7a:bf:
73:30:63:a0:72:49:d5:75:0d:26:ac:d4:27:49:37:69:09:17:
bf:29:6e:73:00:b4:bd:a4:12:bd:84:7f:9a:25:ee:76:69:55:
99:46:f4:8d:c1:ea:6f:ee:75:9d:99:70:ba:b9:7a:0f:bf:57:
a0:5e:4c:04:8e:04:6c:38:30:f6:92:97:d3:d5:68:f6:a9:93:
e7:59:7b:01:50:9c:12:b7:f9:35:07:8c:6e:b3:b2:7f:96:b9:
02:f0:99:6d:3e:c9:b5:16:d6:71:7c:c8:ae:7a:1d:bc:9b:12:
34:9c:2a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:50 2025 by rpki-client