Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/2co2CWHyAEWUlmkNDLU4f8jPJQg.roa
File: 2co2CWHyAEWUlmkNDLU4f8jPJQg.roa (raw, json)
Hash identifier: 46ReLpCYncpSiDnrC/4ChfPtfL50ZK29XsrvXazEWSQ=
Subject key identifier: D9:CA:36:09:61:F2:00:45:94:96:69:0D:0C:B5:38:7F:C8:CF:25:08
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 0194258F18E019F8ED59E3984D0DBBFF7CBD
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/2co2CWHyAEWUlmkNDLU4f8jPJQg.roa
Signing time: Thu 02 Jan 2025 05:48:42 +0000
ROA not before: Thu 02 Jan 2025 05:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13102
IP address blocks: 194.27.149.0/24 maxlen: 24
194.27.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:18:e0:19:f8:ed:59:e3:98:4d:0d:bb:ff:7c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 2 05:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9ca360961f200459496690d0cb5387fc8cf2508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:43:29:90:8e:bc:a5:5a:66:c5:0f:0b:c8:20:
2e:2c:5a:b0:83:0c:c4:65:25:08:7b:be:12:8a:17:
7b:4a:f7:6f:4b:b6:28:be:ee:8b:93:56:c5:23:ef:
6f:6c:9f:94:60:53:21:85:20:ce:de:82:41:6c:b2:
1d:f2:18:98:ab:fd:eb:67:89:20:0c:85:2b:07:ab:
35:22:db:65:70:43:b5:c7:88:dd:24:8b:d1:4b:84:
1f:13:16:98:5c:31:03:1c:1b:fc:74:e5:70:85:6a:
75:eb:8f:2a:4f:72:5b:51:69:36:3c:70:e5:d6:41:
8b:1f:7c:5e:36:04:98:c1:32:ed:fd:2e:08:55:12:
fb:ee:f0:53:70:78:7a:b1:a2:75:ee:a8:a7:68:00:
d1:e9:92:ec:c2:e6:58:80:b2:60:84:fd:d4:f1:62:
75:15:8a:f7:07:9f:b3:2c:db:41:c1:97:91:da:b3:
96:3e:e4:38:db:7c:0c:90:f5:6f:19:ad:f6:da:d1:
09:00:c0:b5:4b:5c:75:5f:bc:2e:26:01:22:81:42:
54:5c:b6:0f:34:52:d1:34:0e:56:dd:c4:b6:ae:43:
9d:67:64:57:13:10:d2:8e:c9:08:db:a5:8c:63:e8:
99:bc:5c:ea:e5:d5:ae:91:29:02:d0:2a:84:7b:22:
ff:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CA:36:09:61:F2:00:45:94:96:69:0D:0C:B5:38:7F:C8:CF:25:08
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/2co2CWHyAEWUlmkNDLU4f8jPJQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.27.149.0-194.27.150.255
Signature Algorithm: sha256WithRSAEncryption
59:de:be:e7:10:1c:55:18:73:a6:23:2f:95:7f:9d:c6:a5:7c:
a7:88:b1:1a:ff:31:48:98:96:f1:8a:4c:63:f0:03:df:7a:af:
d4:90:dd:4c:64:15:b8:a6:8b:77:27:f4:c2:5c:7a:cf:9d:fa:
55:72:18:f5:d3:b0:cf:8c:d8:a8:74:ab:c3:b2:c2:ad:d2:ce:
8a:42:1a:93:85:00:7c:8e:23:ad:14:c4:09:35:ea:73:0d:15:
58:76:33:29:3f:21:51:09:d0:3f:17:e1:78:c1:bb:d2:fd:af:
05:1a:0e:62:03:aa:39:d6:13:73:59:39:03:22:c5:54:7a:be:
fb:54:fa:ac:ad:de:e6:a4:bc:1f:2d:1b:e1:98:b1:23:6d:28:
8e:43:97:ae:36:49:fe:6e:38:6a:4d:f1:c7:1a:82:8d:57:34:
ad:2f:55:4c:65:36:05:aa:22:2c:43:5a:4a:a4:b2:96:13:26:
1c:5b:05:d1:6c:96:13:cf:85:68:6f:5a:b7:db:d9:f2:5a:45:
b1:32:2e:e0:74:a3:be:ba:c5:51:51:71:ce:5c:fa:26:53:31:
a4:86:ad:5b:8e:dc:7b:f9:09:84:a8:63:38:65:1b:d6:ad:d0:
d2:81:d9:57:96:eb:bf:09:18:68:3b:64:da:c6:81:33:28:49:
35:0f:6a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:58:11 2025 by rpki-client