Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/EUkbbi7GnEKpysPg4G8OVhys7tE.roa
File: EUkbbi7GnEKpysPg4G8OVhys7tE.roa (raw, json)
Hash identifier: nhtEGqZpdCVfs0bqsBxMG2VMAPOW4aSkrvEVl2fxE1M=
Subject key identifier: 11:49:1B:6E:2E:C6:9C:42:A9:CA:C3:E0:E0:6F:0E:56:1C:AC:EE:D1
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 019423D71DC9E3C06FA65FA64BE99917CD13
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/EUkbbi7GnEKpysPg4G8OVhys7tE.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48314
IP address blocks: 194.50.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1d:c9:e3:c0:6f:a6:5f:a6:4b:e9:99:17:cd:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11491b6e2ec69c42a9cac3e0e06f0e561caceed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:ca:d5:ad:19:01:e7:aa:e0:f6:4f:7f:9b:
1a:36:e5:29:4c:00:57:46:3c:56:38:06:3e:ae:88:
f0:3b:a1:71:66:e9:62:7c:97:ca:75:7b:f7:34:f5:
65:78:eb:8f:52:99:ca:55:f2:18:86:21:f9:ad:3b:
ed:42:f2:f6:be:d8:1e:b6:6b:ef:cd:64:50:90:b1:
fb:57:2c:74:44:97:27:ce:4a:40:40:ae:88:ef:fb:
2c:0e:d9:cb:97:31:09:62:c2:8d:80:70:e3:24:52:
bd:c6:3b:b1:9e:85:06:dc:2b:aa:d3:dd:65:00:45:
34:27:77:16:c1:84:df:9f:81:07:15:08:bd:91:cc:
f1:d9:f9:fb:aa:83:4a:fa:c3:69:b5:c9:31:eb:95:
d4:78:ba:1d:95:52:58:16:25:34:25:35:d6:18:31:
a4:2b:92:ad:7e:12:e3:26:05:41:ea:8c:54:0d:be:
23:70:d6:54:41:6e:e3:dc:7e:64:3e:22:64:16:d4:
be:3e:e7:8b:bc:08:0a:72:ae:36:0c:0c:66:8a:a9:
45:af:e1:63:e6:ba:3c:ff:c0:2c:4d:88:04:4f:7f:
83:43:82:ea:5e:0b:b2:07:c4:26:35:16:2b:4a:e9:
e2:0e:1e:4a:76:2c:f9:32:22:86:73:00:06:66:90:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:49:1B:6E:2E:C6:9C:42:A9:CA:C3:E0:E0:6F:0E:56:1C:AC:EE:D1
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/EUkbbi7GnEKpysPg4G8OVhys7tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7b:79:61:63:1a:3b:5b:05:95:0d:91:0b:08:02:17:f5:60:
03:cc:3e:0c:98:3c:ae:fc:7a:d4:75:10:0d:29:61:0d:01:5e:
9e:51:44:5b:90:2d:89:3e:cc:ae:e2:13:5c:04:b3:94:7e:5d:
58:9f:f6:12:e0:5d:e6:61:6f:fa:aa:00:0f:06:97:bc:0a:f7:
03:df:e5:a9:e7:aa:94:6b:c7:06:16:29:09:f9:b1:65:c8:58:
24:44:0a:b9:44:37:15:4b:e5:9b:b0:fd:b8:37:3b:2a:f6:c0:
ef:c6:65:49:ff:01:ae:d7:ab:d9:a0:39:3f:f4:50:1c:cb:63:
68:bb:cf:e2:b2:7b:a1:e9:92:70:38:d5:ae:01:ee:6f:86:0f:
e3:e0:61:00:b8:0c:75:8d:1d:f3:65:e6:e0:2d:3f:8c:22:42:
6f:4e:67:0b:1a:ea:fc:b8:52:b7:94:60:81:69:85:d5:0a:1c:
78:f3:82:0f:4f:bb:ef:68:2c:1c:b0:4d:50:62:e1:9d:1d:60:
fe:a6:30:45:d3:94:72:04:e4:1c:16:87:dd:a2:03:d0:e8:63:
35:15:9f:6c:ed:06:f9:7e:76:43:f3:b2:31:39:39:66:36:2e:
26:2b:80:5f:82:f1:26:49:b4:f9:3b:3c:c1:bc:94:7d:6f:f0:
65:73:b2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:28:45 2025 by rpki-client