Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/ECAqPGx51Z00QIK2nsNsbPmpugU.roa
File: ECAqPGx51Z00QIK2nsNsbPmpugU.roa (raw, json)
Hash identifier: HZJH2KP+4GUjxS9EOgilXL7MO2BjwBbNTgaJKakCYf0=
Subject key identifier: 10:20:2A:3C:6C:79:D5:9D:34:40:82:B6:9E:C3:6C:6C:F9:A9:BA:05
Certificate issuer: /CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Certificate serial: 019424B3951E8434D6E20CFC5231AA6C1D21
Authority key identifier: CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/ECAqPGx51Z00QIK2nsNsbPmpugU.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8298
IP address blocks: 194.1.163.0/24 maxlen: 24
2001:678:d78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:95:1e:84:34:d6:e2:0c:fc:52:31:aa:6c:1d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdf62cbd6cf7e808224f6cf8725e36e2a965352c
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10202a3c6c79d59d344082b69ec36c6cf9a9ba05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:18:64:9b:89:28:7a:eb:5c:cb:2b:f9:bf:
ad:4c:d8:20:12:a7:92:48:58:76:57:b3:c1:10:49:
e0:1b:7e:bf:67:48:9d:98:5c:aa:4e:34:92:31:26:
08:b3:6d:8d:88:78:28:52:61:ab:3e:3c:f1:20:67:
30:6e:d6:dc:07:de:09:9f:63:a7:11:cd:dd:27:86:
fe:bc:c4:58:e3:98:f4:84:55:b4:b6:43:ee:6b:78:
8b:3f:83:2e:78:70:cf:03:ae:09:1d:da:27:8c:f2:
d0:a4:ee:21:c7:86:93:cc:ee:cc:a7:04:ab:a7:61:
eb:8b:82:cb:8c:34:4d:d3:1d:41:d5:e6:4d:d6:8a:
b0:44:fb:e1:7c:ff:19:ec:a2:26:47:fd:b8:7f:11:
59:2a:28:d9:2a:ee:e3:ec:f7:53:8e:61:e0:df:81:
c2:9c:5e:28:eb:a9:20:b6:c7:76:b1:dd:64:99:a4:
cf:ca:b0:bf:6d:29:e1:a6:4a:5d:0d:79:72:65:8e:
5f:e3:2d:ff:82:3c:7e:43:c3:27:58:92:d8:8c:0a:
88:5f:ee:0b:25:45:29:54:12:82:ad:61:bf:ca:8d:
36:fe:29:9d:3d:30:c1:8b:9f:92:a0:9e:24:82:1b:
d0:4e:e9:30:f5:8c:87:13:45:61:2e:05:e7:5b:83:
52:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:2A:3C:6C:79:D5:9D:34:40:82:B6:9E:C3:6C:6C:F9:A9:BA:05
X509v3 Authority Key Identifier:
keyid:CD:F6:2C:BD:6C:F7:E8:08:22:4F:6C:F8:72:5E:36:E2:A9:65:35:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfYsvWz36AgiT2z4cl424qllNSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/ECAqPGx51Z00QIK2nsNsbPmpugU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e9169a-ee06-4e4a-b21e-849417ae634d/1/zfYsvWz36AgiT2z4cl424qllNSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.163.0/24
IPv6:
2001:678:d78::/48
Signature Algorithm: sha256WithRSAEncryption
61:1c:65:61:82:b6:ac:d2:79:4c:21:a6:de:89:ab:9f:da:5e:
d9:3c:70:a3:bb:39:a0:74:1c:5d:0e:4a:bd:d6:96:e3:b1:de:
57:a5:5b:89:c9:d9:13:6a:62:82:0e:19:73:6c:16:af:9d:4d:
ad:4a:68:7c:e9:24:f8:0d:e4:23:bc:4e:00:51:b2:52:85:42:
ad:9b:76:ed:a2:a4:95:76:89:cc:d3:e2:7e:5f:7d:7d:d8:cf:
ac:18:b4:ec:89:28:fe:02:39:54:49:d1:81:0f:9d:4c:c0:46:
4f:ed:50:07:99:d0:d2:e2:25:ae:34:e8:d1:d3:9e:69:10:ef:
bd:7d:a2:5a:42:68:ef:5a:22:0a:28:93:c3:fb:a8:87:24:ec:
c4:6a:92:5d:bf:d2:32:7d:89:a4:74:09:b9:78:47:07:96:f5:
71:58:7b:32:5e:13:0c:7c:e7:72:25:28:36:91:73:ef:25:ee:
ef:5a:e7:c8:77:09:ba:3a:ee:76:36:aa:39:ff:c3:9d:0e:c4:
52:9a:18:71:c0:73:21:1e:65:d2:71:f3:60:fb:f4:ad:bc:69:
fe:c1:23:09:90:4b:06:e2:56:7c:58:c2:8f:f3:89:55:3b:22:
99:06:b7:2e:18:8f:8f:97:91:bc:27:c4:08:38:6f:a3:5e:1a:
a8:dc:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:28:40 2025 by rpki-client