Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hI8dS8k84X3o9juG0_Nx6KmIx_I.roa
File: hI8dS8k84X3o9juG0_Nx6KmIx_I.roa (raw, json)
Hash identifier: 5UjoWZrVBjrTLqzIEQTJ/HDCrXScXpDQSqE39fn7hHI=
Subject key identifier: 84:8F:1D:4B:C9:3C:E1:7D:E8:F6:3B:86:D3:F3:71:E8:A9:88:C7:F2
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D72330A04704583D0BF079F7E4CCFD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hI8dS8k84X3o9juG0_Nx6KmIx_I.roa
Signing time: Wed 01 Jan 2025 21:48:09 +0000
ROA not before: Wed 01 Jan 2025 21:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206425
IP address blocks: 194.36.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:23:30:a0:47:04:58:3d:0b:f0:79:f7:e4:cc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=848f1d4bc93ce17de8f63b86d3f371e8a988c7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bc:47:ba:58:38:7c:8c:0e:e8:34:bc:4b:53:
80:74:1f:e8:53:18:da:db:ee:74:f6:a0:0f:5d:bb:
5e:b4:62:e3:64:82:f7:36:39:b2:c8:f0:1d:2b:90:
1f:16:77:4e:4c:6d:51:a3:cc:d4:98:b3:fa:e1:96:
3b:aa:f3:88:e3:28:b0:ec:36:e8:7e:85:50:dc:49:
54:23:28:86:63:71:23:19:a3:4e:01:4a:40:6f:67:
09:86:92:c5:f2:a6:89:c6:69:c0:93:3c:23:b6:98:
24:ec:73:cf:83:a4:67:34:30:0b:8a:55:d0:12:db:
8b:b6:23:4b:16:50:b8:33:11:59:98:3b:48:66:01:
83:0f:3a:ea:4e:1c:e9:fc:91:ec:d2:30:8d:44:91:
17:1f:01:4e:d1:b9:bb:bc:a8:3d:65:96:92:60:0f:
86:f6:3c:e6:f6:45:78:b8:75:57:1f:a6:28:a0:8b:
a1:77:29:69:88:3f:fa:42:43:0b:7b:6f:98:a2:b3:
1f:be:21:41:58:39:73:5a:da:bf:a5:28:8c:f5:e8:
bc:dd:0b:af:04:d3:09:e9:0d:4f:04:3f:3f:c9:c7:
70:3b:28:07:45:d2:bd:e8:bf:ee:46:2b:2e:20:a0:
6f:51:da:e9:73:82:0b:ba:b2:2f:0b:53:c7:59:01:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8F:1D:4B:C9:3C:E1:7D:E8:F6:3B:86:D3:F3:71:E8:A9:88:C7:F2
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/hI8dS8k84X3o9juG0_Nx6KmIx_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
08:82:ba:60:00:42:04:1c:37:9d:89:17:15:5d:07:6c:55:0b:
8c:42:b5:5d:a5:2b:5b:16:41:4a:be:c3:e6:9b:be:4d:3a:94:
fc:db:d2:a7:a0:2a:3d:ba:17:7f:60:c6:60:40:d3:df:e4:b3:
94:33:dc:b1:62:df:75:41:6a:6b:ce:f2:b4:b5:60:71:0c:9f:
8d:11:1d:c8:96:b4:9a:ad:58:e7:be:c3:b7:ad:6a:f3:06:40:
dd:02:92:c4:22:41:26:64:34:82:d3:a6:89:80:f7:5c:82:a6:
b2:f6:73:4f:5b:06:97:16:e9:f9:f6:39:57:53:f7:15:37:54:
90:8e:fc:cf:78:e0:74:e5:27:48:cf:c1:54:21:2f:3a:d9:f2:
b3:e0:68:65:66:33:2d:eb:ee:eb:b0:74:7e:03:2a:63:b8:2f:
27:cc:00:a5:95:77:11:b1:54:6f:cb:cc:7f:9f:01:01:35:63:
02:51:e2:b3:e4:8f:8b:88:90:ac:17:96:61:3e:db:36:7d:6c:
df:3f:f0:b4:6c:13:50:75:4c:ac:e8:f4:e2:2e:dc:d2:dd:9e:
a7:02:6b:15:a1:fa:37:9e:e6:22:e1:ab:83:b9:18:f8:5c:8e:
27:a8:86:9d:9b:92:61:18:b4:d3:f0:b3:81:e4:4e:60:67:1c:
79:d6:81:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:55:30 2025 by rpki-client