Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa
File: oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa (raw, json)
Hash identifier: chkdnhybp0jJ1hG80xmgFXkOcgLkze7nqAVVBuJ+bhU=
Subject key identifier: A2:3E:69:3B:A3:DB:00:87:9D:AF:02:21:5F:E4:A0:5E:4B:B1:3E:04
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 019422FBFF3F4A1136555F577E149C48C709
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa
Signing time: Wed 01 Jan 2025 17:48:47 +0000
ROA not before: Wed 01 Jan 2025 17:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12843
IP address blocks: 194.180.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ff:3f:4a:11:36:55:5f:57:7e:14:9c:48:c7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Jan 1 17:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a23e693ba3db00879daf02215fe4a05e4bb13e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:83:30:a9:3d:84:cb:aa:ea:a1:10:a2:88:
db:5b:5f:e0:94:6d:8e:c2:2f:f6:b7:c0:f9:34:f4:
ef:f1:79:a6:a4:8c:09:6b:80:c8:3a:93:0c:b3:9a:
e3:28:7f:b2:94:8d:76:bc:ad:01:41:9c:69:24:6b:
70:ec:9d:73:cf:9e:ab:6f:1d:85:35:20:7f:69:9e:
1a:96:78:73:f7:68:b6:88:94:81:9d:fd:7f:c1:89:
32:4e:ca:d5:52:f5:a6:e7:d8:00:6f:0c:28:69:2d:
83:45:5f:69:15:97:32:57:85:92:c4:f1:18:2c:17:
08:84:92:6f:6c:20:ef:3b:35:a1:ed:73:2c:0b:19:
75:58:d4:f0:e6:c4:aa:c4:18:2b:62:dc:55:b3:02:
48:3d:00:5a:f7:50:87:e4:11:e8:52:6a:5e:3d:68:
53:91:bf:19:65:13:b8:6d:7d:96:3d:46:d3:80:28:
0b:b8:1b:67:fa:97:30:df:0e:65:bf:c6:b7:3b:21:
de:c8:b0:d8:d5:78:6b:50:10:27:d6:3f:68:be:9f:
c6:f5:0e:2b:1b:28:b1:4e:05:7e:8f:3c:ad:d5:da:
05:e9:b9:85:16:f0:8b:96:4d:c5:a1:ad:82:82:b9:
c7:b5:4d:1f:80:1f:f3:6f:1f:ae:d3:83:ab:12:74:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3E:69:3B:A3:DB:00:87:9D:AF:02:21:5F:E4:A0:5E:4B:B1:3E:04
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.204.0/24
Signature Algorithm: sha256WithRSAEncryption
f5:a7:13:1f:e5:e1:d8:38:0d:e1:6d:10:d8:d5:23:84:86:e2:
07:b2:07:9e:67:33:61:35:bd:54:c7:45:25:45:40:90:f7:0a:
13:e4:06:02:69:89:d0:5c:fb:1f:35:b5:b2:dc:7d:8c:b3:43:
a9:21:d7:da:4f:c1:c4:ef:f5:3e:63:90:a9:dd:06:c1:1c:46:
80:40:6c:a0:42:99:a8:e4:db:fa:5e:cb:d5:cb:fd:73:48:c6:
3b:c4:9b:ce:5a:9b:46:5d:2e:ed:07:be:85:7d:9c:b3:4e:6b:
22:a0:9f:1b:02:2f:62:b6:a4:89:c9:73:25:5c:00:12:31:b7:
72:00:4c:ab:7d:32:5b:08:39:89:be:64:19:a8:a0:6e:e9:92:
ed:e2:72:ec:ae:62:1b:ac:f5:c8:49:a3:bd:32:d7:35:33:d1:
5a:d1:34:df:13:47:f1:67:5f:5b:3a:8e:4c:04:9f:49:ba:cc:
9e:3f:c3:64:b8:61:81:1d:34:37:3d:ce:67:b2:79:d1:f9:67:
8d:94:78:c3:e3:81:ca:4e:7c:6a:a4:f6:6e:d6:d4:71:d8:74:
6a:28:dd:ea:d3:b9:9b:8a:55:0b:f2:ce:46:e8:d2:be:32:9b:
82:5b:da:f3:22:98:28:2b:7f:79:70:41:07:ef:23:8a:3b:c6:
da:10:4c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:03:58 2025 by rpki-client