Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Me2_Prx_OH84___bzQH13Qqoab0.roa
File: Me2_Prx_OH84___bzQH13Qqoab0.roa (raw, json)
Hash identifier: ly5wVLFcaAnRwLR2NQqlItbttmYZEyy9kWeipxzWvug=
Subject key identifier: 31:ED:BF:3E:BC:7F:38:7F:38:FF:FF:DB:CD:01:F5:DD:0A:A8:69:BD
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0194282646929AC22A2385D552A8575E95AC
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Me2_Prx_OH84___bzQH13Qqoab0.roa
Signing time: Thu 02 Jan 2025 17:53:04 +0000
ROA not before: Thu 02 Jan 2025 17:53:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211415
IP address blocks: 194.26.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:46:92:9a:c2:2a:23:85:d5:52:a8:57:5e:95:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 2 17:53:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31edbf3ebc7f387f38ffffdbcd01f5dd0aa869bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:05:5f:50:a5:fb:85:06:e7:2f:7d:2d:94:
f4:f0:8e:2a:cd:7e:82:e2:8c:29:53:8b:b5:5f:f3:
12:03:77:a3:1f:29:78:e3:1b:0d:85:49:4e:8c:1e:
36:d9:d5:2a:06:ca:b5:3a:10:df:d2:0d:b8:71:ee:
01:4a:28:f2:30:6c:bc:ac:2f:35:1a:f0:65:04:b2:
9c:c7:f9:69:bb:eb:61:7c:68:2d:10:c5:1a:47:ff:
4e:85:89:c0:52:2c:2a:6d:6d:c8:dc:e5:4d:c2:ab:
c4:b0:d5:dd:b5:ce:be:48:87:79:5c:ba:bb:7b:37:
1f:c3:cc:b6:da:1f:86:96:89:b5:28:7d:07:8b:9b:
ff:cc:9f:34:ab:29:95:34:a7:71:cf:95:c2:b3:ac:
e5:b1:9a:a2:da:c2:a8:b7:d8:3f:0b:a6:bd:8e:b3:
49:b9:1c:eb:46:10:ea:2b:f6:46:1c:07:7f:a6:2d:
59:e4:f6:22:f3:04:aa:ef:c2:bf:35:72:b7:e3:62:
03:a0:54:de:c0:25:74:b4:50:b1:16:c3:61:ff:e0:
cb:d9:87:92:b8:26:60:e6:e8:e1:c5:46:c7:c2:28:
b9:8c:ef:90:87:7a:4c:5e:51:87:95:8b:f6:f8:51:
2f:03:83:5b:4c:c6:a6:f2:3b:45:ed:e0:57:10:06:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:ED:BF:3E:BC:7F:38:7F:38:FF:FF:DB:CD:01:F5:DD:0A:A8:69:BD
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/Me2_Prx_OH84___bzQH13Qqoab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.235.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:2c:4e:34:79:7e:aa:3b:22:08:f8:e5:71:8e:a0:f9:9a:56:
72:08:76:e1:2c:ed:2c:51:3f:8d:9f:2a:b2:8c:f0:df:91:38:
df:be:ec:0f:6c:fb:4d:33:f3:a6:0a:94:d3:22:a8:a1:be:ba:
f3:a3:fe:c1:8b:ae:cf:44:79:30:6e:15:21:62:d6:e2:e4:20:
93:b9:bc:0e:16:f7:49:00:d2:e8:16:a2:45:ac:1e:fa:38:67:
61:f8:0e:35:99:20:4c:55:06:6a:33:3c:16:08:22:8f:16:8c:
6d:70:8b:1b:b3:c1:05:45:c0:fe:4f:ab:5b:60:83:1a:5a:00:
6a:e5:45:39:74:d6:33:8f:58:f8:f6:4b:07:78:91:e4:02:40:
65:62:9c:7c:af:cc:ae:86:da:3e:1c:ac:16:f9:29:a6:4b:0c:
0c:1b:2a:cb:fa:6c:9e:a0:75:9a:3e:19:b9:3b:bc:7d:b4:12:
23:58:7f:24:f5:db:18:56:89:79:96:63:9c:d3:98:a6:a2:b8:
6c:a6:78:78:d0:2f:35:c2:42:2f:2c:df:d4:bb:c1:5b:7a:05:
9c:35:5b:f4:91:56:05:8b:91:1b:5e:97:92:b4:15:71:6c:b7:
30:c5:45:c8:f3:57:c2:7f:20:d8:8d:c7:f3:63:fc:7a:82:41:
60:60:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:29:44 2025 by rpki-client