Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wSL45AIT5EJXXFGp5vg6M2DPNCk.roa
File: wSL45AIT5EJXXFGp5vg6M2DPNCk.roa (raw, json)
Hash identifier: 1wb4FcpLDXgZHELKVN0aczuYaHIxl0jPkQS+LI1QUhs=
Subject key identifier: C1:22:F8:E4:02:13:E4:42:57:5C:51:A9:E6:F8:3A:33:60:CF:34:29
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 019424456E0EEFCB61543A93B9FBED109E93
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wSL45AIT5EJXXFGp5vg6M2DPNCk.roa
Signing time: Wed 01 Jan 2025 23:48:37 +0000
ROA not before: Wed 01 Jan 2025 23:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211359
IP address blocks: 194.224.204.0/23 maxlen: 23
194.224.204.0/24 maxlen: 24
194.224.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:6e:0e:ef:cb:61:54:3a:93:b9:fb:ed:10:9e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 1 23:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c122f8e40213e442575c51a9e6f83a3360cf3429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:f9:a2:c4:e5:5d:85:1f:13:00:f5:2d:6e:
a6:86:87:32:c5:e7:57:9f:21:87:33:24:c0:ab:19:
a2:23:71:18:85:dd:62:b0:5c:5a:35:f9:c2:e6:45:
33:7a:65:ec:68:71:1a:38:37:5a:d4:a6:48:e3:6d:
82:1f:20:cf:ce:66:31:67:bd:88:d8:3a:76:6e:1d:
e5:a5:5d:9d:52:0c:5f:ca:47:5f:cf:6e:41:13:f5:
76:f1:85:b5:4e:19:db:14:af:ee:09:d5:a6:f9:ae:
8c:35:18:c2:3c:1f:5e:55:bd:f8:15:0b:b5:39:1c:
c4:37:54:61:62:e1:5a:15:de:09:bb:14:20:31:1c:
87:b3:04:11:fc:06:ff:34:1e:7c:ff:3e:dc:33:25:
e9:58:5f:2a:92:c9:bf:0e:b1:52:54:25:20:e9:68:
18:34:31:2f:ea:cb:4e:89:85:a8:f5:8c:70:f3:79:
2f:75:63:5e:3f:85:61:ee:3d:1d:fc:af:db:45:9e:
ea:1a:1d:56:e8:21:c2:fd:9f:cb:d1:30:26:cb:99:
35:d5:d1:47:d5:1b:19:55:a7:23:8b:3e:bd:82:31:
1d:e6:6f:52:2d:f0:7f:d1:1c:01:42:ef:64:8d:73:
7e:ef:ef:df:fa:85:79:2d:e9:2e:05:ad:17:35:15:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:F8:E4:02:13:E4:42:57:5C:51:A9:E6:F8:3A:33:60:CF:34:29
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/wSL45AIT5EJXXFGp5vg6M2DPNCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.224.204.0/23
Signature Algorithm: sha256WithRSAEncryption
69:05:0f:a6:cf:1b:24:ba:31:79:0b:7d:34:04:76:dd:d4:0c:
8c:3c:01:a3:31:8f:5d:65:b6:46:b2:6f:d7:5e:76:6c:2d:08:
b0:49:71:bb:3d:e8:e0:e4:f3:c2:36:d0:b8:72:0b:c2:b4:9a:
66:f5:b7:49:05:4e:80:43:25:e5:34:7f:e3:ee:05:41:1e:ce:
6d:6c:9f:61:e4:19:c2:94:49:0e:58:d6:83:8b:3d:04:76:da:
6d:98:6f:f8:a4:fa:67:ef:2a:6f:e2:a1:dc:8f:91:6f:b9:ee:
73:f3:61:79:c2:96:6f:8a:41:e1:76:7f:04:c4:5b:94:49:c7:
04:30:67:fb:e4:24:7f:6f:b1:25:53:dd:d2:86:d1:a5:87:17:
cc:f3:66:6c:55:09:ec:23:5c:f0:da:c2:70:56:ac:e6:f6:6c:
73:63:c9:e6:f4:24:f6:e1:4a:3d:74:8b:77:c6:e7:e6:9e:b1:
c0:43:32:8f:0e:00:05:fa:d2:78:96:5a:d8:a5:62:00:cd:12:
90:ff:0d:68:22:97:8b:1b:c3:0f:03:7a:c4:4e:a2:3a:d7:e3:
3c:06:78:28:bd:7a:b3:01:34:8c:67:04:7a:5c:a3:87:69:bc:
63:90:83:59:b7:f8:75:10:4b:63:16:13:36:63:c2:0c:b6:bc:
89:a1:8b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:20:22 2025 by rpki-client