Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa
File: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (raw, json)
Hash identifier: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=
Subject key identifier: F9:D7:92:0F:46:71:EE:66:45:68:A2:E0:BE:9E:4C:7C:D3:4B:E8:1D
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 0194214462632486EF0485A1F516792F1B9E
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa
Signing time: Wed 01 Jan 2025 09:48:37 +0000
ROA not before: Wed 01 Jan 2025 09:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200339
IP address blocks: 194.147.153.0/24 maxlen: 24
194.147.154.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:62:63:24:86:ef:04:85:a1:f5:16:79:2f:1b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Jan 1 09:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9d7920f4671ee664568a2e0be9e4c7cd34be81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:85:2b:e8:2c:b2:b4:43:5a:d4:fb:64:b9:
3c:68:97:10:5b:0f:f9:4b:b3:63:2d:8e:7f:50:01:
1a:f9:23:36:24:85:fb:cf:d7:e2:c3:3f:67:12:7c:
6e:a3:e2:cf:fc:a7:b5:24:1f:ae:f8:4e:99:5e:f9:
4e:00:9a:8f:2e:03:d2:92:c1:86:cf:0c:12:6e:0b:
a9:c1:0b:d8:e8:cc:57:4d:b6:b2:d8:41:f3:64:78:
3c:76:c2:3a:20:68:31:7b:f5:73:3a:74:03:12:85:
83:29:54:24:66:28:f5:a5:30:31:51:cb:13:7c:e6:
67:5f:a3:23:d2:43:48:14:55:9e:ee:f7:bc:d1:52:
de:3f:ee:59:2e:fc:47:bf:69:49:f4:8f:15:9a:35:
ac:d6:62:4f:b6:5f:2b:c3:e7:38:fc:fb:69:a4:b8:
71:90:d4:d8:e0:cb:a6:bc:9c:f3:57:c1:99:d2:73:
50:59:2f:68:fe:f0:8e:a5:92:ba:9b:6c:4e:69:ad:
f2:fd:96:d6:2e:33:7c:f3:8b:30:2e:60:e5:f2:b0:
30:d6:b0:30:17:f6:f6:c2:7a:1f:59:50:a5:27:e0:
4c:f8:0c:58:69:b2:c2:29:a8:34:6a:56:bc:90:12:
0b:b0:95:07:88:ce:86:a6:50:dc:c5:29:a4:99:4d:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D7:92:0F:46:71:EE:66:45:68:A2:E0:BE:9E:4C:7C:D3:4B:E8:1D
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.153.0-194.147.155.255
Signature Algorithm: sha256WithRSAEncryption
a2:a7:35:81:cd:1c:ef:44:37:ae:28:ff:2a:e1:e6:f2:f5:4d:
14:19:8c:8b:83:8e:97:f6:8d:98:97:af:de:50:94:4f:35:ed:
72:89:ee:9f:5a:33:74:7c:a5:00:82:80:b1:b9:60:6a:91:49:
5a:a9:4f:c2:67:f6:86:01:f0:7b:20:b2:e7:e6:18:7f:cf:4a:
ad:dc:a8:e5:8a:6f:15:74:8f:10:8f:e0:ce:f2:fa:76:54:48:
80:20:a1:03:a4:09:a0:45:0a:87:5e:3b:cc:86:a5:e0:4d:17:
30:e3:2c:41:77:ed:df:53:b2:e3:e6:5f:dc:bb:ce:8b:63:59:
37:ef:fe:16:98:7c:5c:1d:58:39:a2:ab:15:bf:19:76:e6:7c:
ef:00:0c:72:1e:00:1d:d1:54:e9:85:3f:35:2c:68:c8:21:97:
02:09:3d:71:95:fc:ce:29:86:eb:27:3e:38:f2:51:6e:36:f3:
af:b4:e1:1c:91:07:cf:3d:05:1d:0a:df:cf:05:d8:24:4f:1d:
a8:68:cf:70:8d:e3:e3:e3:73:7d:b2:e0:2b:19:8b:4e:16:90:
0e:4a:79:e7:ae:85:56:4c:7d:b6:a9:79:fc:05:c7:d2:f3:73:
61:71:16:09:d7:28:19:43:12:7c:11:d2:51:e1:fb:c3:6a:31:
1b:3b:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:41:10 2025 by rpki-client