Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa
File: C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa (raw, json)
Hash identifier: KoYq60161i4xpC6NqHZA/Q8w9Njte/PcskDc5lUbshM=
Subject key identifier: 0B:62:05:E8:B0:0C:36:7D:DF:24:96:F6:A9:86:84:9D:38:78:58:8E
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 019423D7204FB8FC00BE545B65ED42204C38
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400040
IP address blocks: 194.50.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:20:4f:b8:fc:00:be:54:5b:65:ed:42:20:4c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b6205e8b00c367ddf2496f6a986849d3878588e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d8:f4:1a:1a:6a:df:7b:0e:5a:76:a7:a9:39:
09:72:4c:69:d0:c9:d9:10:75:fd:9c:b5:c6:ba:47:
92:52:57:3e:df:d5:f0:2c:50:ca:3d:32:f9:3f:a9:
69:94:36:a4:5a:94:b2:89:ca:e9:1b:c5:02:4c:8a:
49:7c:17:c2:97:5f:ea:ee:8a:0e:21:25:db:2e:e6:
91:ca:fc:d1:3f:ea:6f:b5:76:2d:39:8a:de:a8:ba:
44:44:b7:ee:cc:b8:db:8a:ba:87:f6:a9:62:dc:62:
97:0a:89:e3:be:e7:39:81:b9:e4:00:05:07:35:fd:
42:98:9d:89:7e:3d:fb:c9:c1:7c:56:5a:49:8a:b5:
ed:b5:0b:64:10:d9:11:49:dd:b5:f1:da:01:15:9f:
4d:1a:ff:96:12:8e:4a:7f:78:26:a0:89:54:54:ca:
d3:fe:ea:5e:a3:f4:c5:a8:3a:45:9a:b0:3c:cf:f5:
ec:df:2c:03:23:e2:49:66:1a:06:37:eb:ae:f8:f1:
e4:bd:1d:6e:52:8d:e7:b8:8a:72:90:8b:d0:d2:8c:
df:cd:36:7d:69:1f:cb:c2:9d:54:be:ce:98:7f:8d:
51:b1:25:79:1b:9a:94:94:cc:d0:78:1b:65:dc:2c:
0e:61:8a:c3:ca:f0:17:3e:7b:c3:d9:85:2d:ce:99:
5f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:62:05:E8:B0:0C:36:7D:DF:24:96:F6:A9:86:84:9D:38:78:58:8E
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/C2IF6LAMNn3fJJb2qYaEnTh4WI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.4.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3c:1c:d0:29:4f:73:d9:b8:6c:dd:d8:f1:a7:a6:61:9d:f9:
27:66:d2:e9:89:1c:a4:05:5f:5d:22:56:84:0c:13:89:bd:65:
a2:17:ae:23:cc:79:91:44:63:75:a9:b3:13:d3:41:8e:d9:16:
ef:7c:ac:34:13:ed:00:76:36:f0:e4:4d:93:05:fd:67:c4:77:
2f:5f:26:4c:e2:53:dd:6c:92:05:d1:15:2b:71:fc:bc:38:79:
79:5d:82:43:0b:e5:0b:dd:3c:e9:77:02:43:a7:c1:ed:61:85:
f9:c0:b1:60:f4:67:a7:cb:a2:85:db:2a:42:7a:45:6f:ad:03:
7d:46:17:0a:6e:aa:c6:3d:6c:6c:ce:21:bf:a9:2d:68:4b:21:
06:84:5f:93:a3:8f:d9:2a:82:b2:a3:e0:43:2f:9a:68:1c:9e:
d6:51:c9:48:26:01:87:1a:44:64:33:a9:5b:75:16:f8:1b:05:
e3:0e:34:d8:43:6b:2f:12:49:72:f3:19:76:52:09:25:68:96:
76:45:15:5f:c5:37:db:3b:3c:40:20:82:17:fe:f7:b8:ac:ae:
31:b6:2c:ad:ce:20:8e:9e:ea:ea:f2:71:fe:ae:c5:ad:68:92:
7e:d7:27:2e:02:b0:b3:5d:b3:c8:15:ba:bc:a5:07:e3:fd:86:
54:78:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:34:26 2025 by rpki-client