Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/0wAgKVyytNbhNR-_RR1IsIpFFy0.roa
File: 0wAgKVyytNbhNR-_RR1IsIpFFy0.roa (raw, json)
Hash identifier: hGr01I8nbqs/LJEbN09Cfzd/lbJVo6JwWOtLmEfD1wA=
Subject key identifier: D3:00:20:29:5C:B2:B4:D6:E1:35:1F:BF:45:1D:48:B0:8A:45:17:2D
Certificate issuer: /CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Certificate serial: 01941FFA75F9740A008ED4203F37C4F1513F
Authority key identifier: 3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/0wAgKVyytNbhNR-_RR1IsIpFFy0.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24951
IP address blocks: 194.11.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:75:f9:74:0a:00:8e:d4:20:3f:37:c4:f1:51:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d30020295cb2b4d6e1351fbf451d48b08a45172d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:62:81:b5:46:32:45:4d:7c:07:39:b6:2e:a0:
50:b2:b1:48:e5:22:0a:06:cb:f0:34:a8:6f:1c:de:
0a:5a:4a:a7:bb:88:00:f8:1b:79:55:2d:df:cc:cb:
3a:0b:f4:3d:e5:b6:58:38:d0:1c:ce:24:25:6d:71:
a5:ac:f4:5a:ce:c8:05:52:74:23:90:5e:ff:c5:44:
e2:cd:0b:88:28:e5:d4:44:f6:32:db:3e:e7:06:b9:
b0:05:aa:6b:c3:d3:9a:d3:32:9f:d9:77:c2:48:7b:
3b:6e:c7:52:9b:df:79:8a:3f:26:ad:0a:70:f4:85:
1c:0a:3e:0b:77:e5:e3:f1:40:21:5f:8b:08:26:df:
d3:b7:b2:a1:85:90:27:05:a4:82:fe:b7:39:b9:d2:
cf:fd:65:ca:97:53:b5:91:01:d2:3a:32:c6:45:a7:
33:e9:87:8d:2e:f9:cd:e1:f4:b1:69:3c:04:3f:91:
b6:41:d8:64:78:e9:34:81:63:23:a1:35:11:f4:c7:
13:05:8a:b1:0a:35:9a:d1:c2:3a:24:e8:fa:73:ab:
08:dd:e0:71:8c:81:05:78:1a:c1:39:65:ac:e9:00:
d7:fe:9f:61:3e:d1:de:61:55:54:7d:47:e7:c9:8c:
ef:93:b2:71:92:e0:5b:01:d0:80:ab:04:32:59:80:
f0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:00:20:29:5C:B2:B4:D6:E1:35:1F:BF:45:1D:48:B0:8A:45:17:2D
X509v3 Authority Key Identifier:
keyid:3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/0wAgKVyytNbhNR-_RR1IsIpFFy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.11.232.0/23
Signature Algorithm: sha256WithRSAEncryption
73:3f:33:cb:66:45:e8:f9:a0:8d:81:ea:83:8f:d2:af:d6:ef:
46:1a:0a:72:0a:e6:82:dc:eb:4d:e7:3d:e7:b1:c6:d7:3f:8d:
c0:27:31:7e:e6:6b:71:6e:8e:67:8e:c8:46:ca:2e:86:b8:41:
ca:d3:7c:29:b8:87:c1:fe:d1:0b:72:89:3a:7d:79:3c:2a:94:
ae:db:02:ac:00:c8:34:95:68:8d:b1:31:f5:99:fc:06:8c:b2:
da:60:ac:d2:d1:11:71:8b:dc:f2:33:38:ca:88:23:00:34:0d:
0f:4c:a3:8b:66:95:62:c6:22:40:f2:02:bd:3d:3e:4e:8c:1e:
6e:9b:21:2e:10:a5:99:3e:b9:90:ff:6f:66:62:cc:8c:22:e0:
fd:dc:c4:6d:06:65:b3:eb:58:2f:23:13:be:db:7e:63:e8:b2:
32:c6:3d:74:3d:2a:8a:56:fb:1f:a3:2c:2e:e4:02:23:26:9f:
a0:06:f9:fc:d9:7b:ac:57:9c:5a:93:32:c9:a3:90:8b:42:9a:
02:db:d1:10:3c:46:41:97:e9:a3:9e:b1:ee:79:51:5c:dd:c2:
63:75:87:13:4f:1d:8f:9c:6c:cc:d5:f5:f1:7f:42:b4:01:8d:
2b:d3:20:af:7f:8d:92:fb:bb:d8:c1:ba:2f:2d:37:d3:be:f1:
57:b8:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:57 2025 by rpki-client