Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/iKIjaWdjTkY5n1l2vyweQI5-tfA.roa
File: iKIjaWdjTkY5n1l2vyweQI5-tfA.roa (raw, json)
Hash identifier: SVDF3jNx8llqtIqxRNOn6uI2kyyC4zCOalfFLLTEvn8=
Subject key identifier: 88:A2:23:69:67:63:4E:46:39:9F:59:76:BF:2C:1E:40:8E:7E:B5:F0
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 0194274832B643C68AEEBE1D9C53052DC12D
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/iKIjaWdjTkY5n1l2vyweQI5-tfA.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1103
IP address blocks: 194.104.240.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:32:b6:43:c6:8a:ee:be:1d:9c:53:05:2d:c1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88a2236967634e46399f5976bf2c1e408e7eb5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:9e:aa:e4:ac:a3:0f:93:c5:50:ff:bd:cf:
7e:d0:03:f9:ae:52:67:ef:c4:81:46:18:d2:0c:ca:
1c:29:53:de:85:b5:57:f3:63:4c:d3:4e:21:05:f2:
b1:c2:b0:8c:77:4b:6b:26:29:81:6a:3e:df:68:3d:
9a:78:4f:aa:40:0c:c3:e9:83:59:51:c0:ca:cc:ce:
88:49:b0:aa:f8:d8:9e:5a:56:15:18:bf:28:7c:09:
72:10:98:61:bf:6e:ad:ac:4f:21:fe:01:d8:f9:e7:
f3:ba:94:fd:e7:03:70:e6:72:f2:d6:4c:76:e0:2c:
c4:54:6b:39:72:d6:6a:2a:2c:b8:2b:2c:34:30:15:
ea:de:24:54:f3:84:ac:3f:f1:b7:3f:4a:19:a2:c6:
c2:39:84:a5:3c:16:c2:ad:e7:33:3d:ca:5f:8b:c1:
cb:c7:c3:07:ee:35:da:dd:85:93:02:41:47:c8:5d:
2b:d4:31:68:e6:7f:cd:c7:42:31:e6:35:92:07:70:
77:e1:96:a1:94:b4:4f:d5:41:92:7c:55:10:61:d6:
77:76:17:75:ba:af:33:ef:78:39:f7:1d:09:56:ef:
80:ce:5c:5c:4a:e7:7c:ba:fd:aa:ae:41:08:4f:43:
b0:84:ae:66:91:47:d7:d5:06:e9:e9:46:81:c8:14:
45:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A2:23:69:67:63:4E:46:39:9F:59:76:BF:2C:1E:40:8E:7E:B5:F0
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/iKIjaWdjTkY5n1l2vyweQI5-tfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:b0:01:45:79:6d:e0:df:e2:9b:39:5e:6f:0f:e8:a5:7b:10:
40:29:76:4a:94:8c:09:3a:8c:f0:d1:ed:02:3c:f2:9e:fa:c4:
88:34:f4:48:39:26:06:ec:46:51:74:6a:0f:e1:87:43:d3:e7:
ed:7d:7d:a3:3e:27:78:21:90:a4:b0:78:78:b1:7d:35:1a:25:
fa:24:16:fc:4b:01:dd:de:48:32:40:7f:e0:d6:fb:bd:89:26:
79:14:72:17:a2:4b:4f:b4:0c:28:98:8d:40:e4:c1:06:a7:c7:
33:16:fd:83:a3:9c:b0:5f:a0:97:95:35:d6:4b:2e:8a:c3:d8:
30:c3:40:60:12:b6:2e:6c:00:75:a2:7e:fa:11:fd:40:f3:0a:
11:67:84:23:33:69:9c:b6:a9:f4:bd:c9:35:9f:62:43:f3:e5:
a0:54:8a:12:16:11:22:37:2d:42:99:9f:26:27:42:ea:c6:46:
5a:98:66:c8:c8:4b:ae:8d:1c:b6:57:c6:58:30:70:a0:95:f4:
b3:d4:39:59:12:be:b4:c3:e0:3b:79:34:79:7a:3a:cf:0b:b1:
da:fe:35:ae:76:9b:f3:05:9f:14:07:85:d4:93:16:c7:b7:cc:
86:44:91:a2:6f:b2:52:77:c7:42:7c:38:98:07:e0:f5:61:9e:
eb:6f:ce:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:03:52 2025 by rpki-client