Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/oD5ktIApamXxgwjGSpDfwIhQqYQ.roa
File: oD5ktIApamXxgwjGSpDfwIhQqYQ.roa (raw, json)
Hash identifier: yFFoY0qvHYFgL03wlalkQiMq33WT4afE35wQSaZE/qI=
Subject key identifier: A0:3E:64:B4:80:29:6A:65:F1:83:08:C6:4A:90:DF:C0:88:50:A9:84
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 019427B592A396754D76FC44CF7C67E75F7D
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/oD5ktIApamXxgwjGSpDfwIhQqYQ.roa
Signing time: Thu 02 Jan 2025 15:49:58 +0000
ROA not before: Thu 02 Jan 2025 15:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60026
IP address blocks: 194.61.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:92:a3:96:75:4d:76:fc:44:cf:7c:67:e7:5f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a03e64b480296a65f18308c64a90dfc08850a984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:4f:c2:54:79:3d:b9:3a:b8:7b:6e:5a:80:
06:c7:d1:78:5e:36:b5:8a:5a:e8:2f:5c:b1:c4:ed:
57:15:78:0a:d7:03:54:0e:ef:7d:3b:93:98:53:85:
80:be:e2:6f:69:58:c0:c3:90:e4:9c:6d:ec:3d:da:
cc:a6:51:aa:1a:51:57:44:74:ec:a6:d9:9b:9d:df:
79:e6:f2:64:78:e2:f8:83:38:8e:23:07:a9:99:42:
0c:7e:f5:c0:42:be:54:bd:be:4f:a8:d7:5e:0c:df:
6c:d4:22:04:28:f7:f5:5c:db:d7:2a:41:fa:92:a0:
ca:73:10:7b:76:29:92:ca:b9:e3:d9:11:8e:75:32:
5a:5a:e6:31:5e:a2:fd:1c:18:b3:b7:35:e1:a4:14:
2c:eb:d5:1a:1b:c1:ed:47:3f:7b:77:68:cc:fc:d6:
23:f8:4e:56:b8:8b:8a:ab:5e:93:8b:de:11:8b:33:
fb:0d:09:08:2a:90:4f:15:a4:37:f6:4c:72:b9:d4:
f3:26:bb:56:df:b9:3c:a3:00:69:9b:58:88:fc:22:
e4:be:03:47:81:56:04:3f:05:3a:c3:ba:03:5d:6f:
fa:92:5e:cd:35:51:99:47:d6:bc:08:65:b5:12:47:
e6:e0:d9:27:05:fc:cd:74:5c:ec:d0:81:d7:27:2f:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3E:64:B4:80:29:6A:65:F1:83:08:C6:4A:90:DF:C0:88:50:A9:84
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/oD5ktIApamXxgwjGSpDfwIhQqYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.80.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d6:ac:b2:ac:ea:1d:c6:e5:a3:d2:38:70:eb:70:9c:04:59:
68:12:f5:d4:55:e6:f2:3e:c0:07:58:4a:9d:dd:2f:d5:b6:36:
e1:2c:64:9f:f1:f0:1d:8b:81:54:bf:b3:9a:97:c2:54:8e:ce:
5e:38:e2:b3:8c:a7:de:8b:27:8e:80:fc:22:bf:a1:17:ea:c6:
58:1b:83:9b:50:9a:58:c4:0f:db:03:2f:96:72:08:9e:25:70:
a3:93:b2:63:95:f0:37:c8:29:03:23:ea:c0:5a:f1:c1:74:ae:
f6:04:f5:37:1e:16:53:de:a7:78:17:42:30:36:47:ae:fd:fc:
6f:e6:95:0e:19:97:8b:64:2c:3e:a2:13:11:40:8f:fc:22:e5:
2b:06:24:9e:0e:8c:14:f5:e7:18:17:9e:19:2c:65:9e:e6:d5:
9f:2a:df:60:d1:20:c4:40:23:03:a0:b6:4d:1e:3d:f4:91:f2:
21:2e:7b:ed:ca:ef:3a:a4:28:04:a3:96:e7:e7:cd:2d:1c:94:
80:fa:86:03:45:b4:0b:bc:39:69:21:91:2a:d4:a1:c1:d2:b2:
d3:4f:72:12:df:78:70:92:94:72:c7:f2:bd:0a:a9:42:ba:91:
b4:b5:f9:7a:4d:b7:20:84:3d:d5:f4:3e:9c:ef:27:23:04:3f:
db:95:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:50:21 2025 by rpki-client