Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/n1PTEhl7Gziga25ysIXwX8mtN4U.roa
File: n1PTEhl7Gziga25ysIXwX8mtN4U.roa (raw, json)
Hash identifier: KSZYpewqSAjVFCxzSjZtUiIlaneZeCT324rbdqEnXck=
Subject key identifier: 9F:53:D3:12:19:7B:1B:38:A0:6B:6E:72:B0:85:F0:5F:C9:AD:37:85
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194A7494DC45F36F94E9E0082CC5947767F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/n1PTEhl7Gziga25ysIXwX8mtN4U.roa
Signing time: Mon 27 Jan 2025 10:23:06 +0000
ROA not before: Mon 27 Jan 2025 10:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59993
IP address blocks: 194.145.142.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:49:4d:c4:5f:36:f9:4e:9e:00:82:cc:59:47:76:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 27 10:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f53d312197b1b38a06b6e72b085f05fc9ad3785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:f9:5b:a2:be:a9:7e:92:4c:3a:8f:79:9b:
22:48:37:84:05:f9:1b:88:ed:76:61:b4:a4:ae:0f:
c4:7d:be:c7:da:71:ec:11:3e:c9:a8:26:fa:3e:5a:
0d:aa:08:1b:a2:5c:4f:da:44:d2:d5:d9:8f:77:29:
fc:d1:25:d8:43:41:9a:5f:85:91:fc:b7:7a:f2:d6:
1a:6a:70:bf:37:b4:a2:25:3e:01:05:1b:7f:ce:73:
c8:f1:57:c1:f5:17:03:64:62:f0:30:ad:d2:62:44:
a8:6c:38:55:0f:91:36:54:66:d9:36:fc:c6:9d:d5:
ff:b7:08:00:d4:18:4f:27:4a:52:09:97:5a:a3:b8:
4c:c3:04:a4:72:55:64:c2:87:7a:13:f9:7f:67:9c:
bf:20:bb:21:fa:ea:f5:5d:f0:ed:3d:60:95:a7:b7:
dd:cb:a7:63:22:9f:29:1b:ee:5b:4b:73:dd:cd:c0:
0e:c8:1d:ae:0f:32:ce:c5:0b:8f:20:15:ea:89:9f:
3d:b4:f2:d0:c2:c5:70:3a:1b:39:81:21:e0:b5:e0:
89:40:1f:03:96:8e:b8:be:22:ba:b1:4e:b5:00:7e:
6f:84:25:4d:df:00:dd:63:6a:5c:eb:48:0e:d2:0d:
a1:5a:65:1d:f4:84:f9:4d:6e:21:af:8e:46:c7:c1:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:53:D3:12:19:7B:1B:38:A0:6B:6E:72:B0:85:F0:5F:C9:AD:37:85
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/n1PTEhl7Gziga25ysIXwX8mtN4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.142.0/24
Signature Algorithm: sha256WithRSAEncryption
81:bd:13:2e:5d:ca:4c:19:44:69:dc:2a:2b:aa:24:7b:b8:dd:
d0:7d:0b:2e:2d:0b:5b:ff:8e:75:0c:83:7d:24:20:fa:1e:3d:
d7:15:04:33:1d:99:af:fd:7b:5d:a9:11:9b:b6:8f:35:bb:ac:
d6:c6:1a:67:0d:31:95:0c:98:9c:55:58:eb:0a:77:b0:e4:ae:
56:99:0e:4e:ac:26:46:52:45:e6:97:ce:64:1c:7d:e8:42:d0:
83:1c:40:42:5d:f3:d4:26:ea:3a:c3:72:f3:73:0c:6f:21:6d:
a9:2b:b6:2f:03:a7:b1:31:b5:f8:13:f9:80:50:97:44:07:34:
c9:50:99:d3:5b:e7:85:4e:fa:fa:3b:7a:46:cd:d9:d0:16:6c:
91:99:5d:ca:6a:d1:98:ac:e6:05:6f:0e:0c:e0:37:5e:85:8b:
a5:e2:3f:76:0c:47:e3:d5:0f:86:82:57:cf:fe:2d:26:9a:97:
9a:be:5c:f1:52:94:9c:64:67:97:60:92:02:5e:b8:6b:1f:c2:
cd:57:f8:90:f5:15:80:b1:60:06:87:1d:ab:75:91:ff:de:be:
9b:04:b9:af:16:cf:02:0f:c8:fa:f3:9d:0f:b1:a2:c5:f2:bd:
a0:7f:38:32:a8:f3:f6:8d:ab:31:77:70:ef:95:11:0e:ca:65:
1e:e3:d1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:37:57 2025 by rpki-client