Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/u5WF448UeoYWgT-skS-wygoPrG4.roa
File: u5WF448UeoYWgT-skS-wygoPrG4.roa (raw, json)
Hash identifier: 5T0ShNB0lHKnMRiZ5erlCBdkQXA1/Sd8dVjXraF679Y=
Subject key identifier: BB:95:85:E3:8F:14:7A:86:16:81:3F:AC:91:2F:B0:CA:0A:0F:AC:6E
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A31A43372747B6644368378FBB24C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/u5WF448UeoYWgT-skS-wygoPrG4.roa
Signing time: Wed 01 Jan 2025 19:49:09 +0000
ROA not before: Wed 01 Jan 2025 19:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 194.34.228.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:31:a4:33:72:74:7b:66:44:36:83:78:fb:b2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb9585e38f147a8616813fac912fb0ca0a0fac6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:59:d7:b5:fd:17:07:58:9a:d7:b4:1b:ed:1d:
94:0c:64:1b:5f:70:1e:14:e7:a1:3b:55:5d:b4:9f:
43:cb:c7:af:81:48:41:2d:09:40:73:3d:f3:e5:3d:
e0:d7:b4:d5:5b:f1:dc:d9:43:ad:61:a2:b3:e0:a3:
55:52:0e:46:49:0d:db:56:81:a4:ed:b0:85:e1:c3:
4c:9a:02:76:90:e3:01:f0:ce:80:0d:82:3d:41:ed:
d4:db:f5:00:5f:13:20:8f:83:5d:57:e4:83:80:3f:
dc:a4:1b:51:55:4a:3c:51:31:4c:0c:60:fc:1f:92:
95:f6:d5:77:fb:f7:72:fc:17:c3:b8:41:a9:ce:c8:
90:b7:a8:ac:6d:07:3e:ad:fc:5d:29:08:ac:ed:95:
72:9f:65:d8:14:3f:9d:86:5c:f3:00:90:34:f3:df:
32:f4:63:8c:d0:37:fc:5e:48:5c:54:2a:fb:6e:49:
ac:74:77:cd:58:a8:65:1a:f4:08:d1:37:af:f5:21:
70:f9:27:d5:9e:6b:d2:ee:da:77:f5:65:dd:2b:ec:
f7:6b:c6:42:cc:16:5b:ef:e7:18:f6:1d:f5:64:4e:
c6:39:d6:e8:f4:2c:7f:3f:f1:5c:93:41:d5:b2:41:
01:a0:72:36:23:7e:01:e3:5d:ad:e4:4e:e7:ce:71:
f9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:95:85:E3:8F:14:7A:86:16:81:3F:AC:91:2F:B0:CA:0A:0F:AC:6E
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/u5WF448UeoYWgT-skS-wygoPrG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.228.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c5:b1:02:84:83:cd:56:56:28:d8:19:c9:d9:96:46:8c:f8:
72:03:b3:45:96:49:aa:21:96:e7:27:0f:f2:7a:99:d5:87:04:
3f:c4:d3:3e:a3:32:cb:fd:40:37:8b:13:e6:c3:62:00:17:52:
08:d4:d5:26:9c:a6:54:b0:97:ce:46:45:af:5b:ab:1a:cf:54:
e3:de:b1:f8:af:9b:21:f0:e0:4d:0c:d6:eb:3b:c8:39:29:5a:
1d:b6:9e:c1:63:0b:6b:e9:d3:c4:ab:b1:1f:47:48:c8:f0:ec:
e0:c4:17:15:7a:7f:b6:c3:62:0b:a8:ab:ec:ff:7d:b0:5e:a7:
22:bc:7a:4d:a8:c8:c0:9c:1c:f0:43:1a:fd:52:60:69:98:33:
74:76:6b:93:30:e7:58:94:76:e9:de:46:f5:a2:56:0c:5f:f0:
48:b9:57:cd:0f:de:9d:15:6a:52:42:a0:53:6a:9f:d2:06:27:
55:79:7a:b8:0c:de:d8:89:11:b4:b5:2f:de:fb:01:fa:95:f1:
c2:59:54:4f:68:29:c5:70:27:4d:17:85:aa:c0:11:4f:67:c9:
4b:6b:8b:a9:51:9e:74:4c:32:17:43:8e:93:f1:d8:4c:64:a0:
97:b6:15:ce:05:e4:a8:f3:fb:d0:b1:7b:d6:4e:7a:a7:df:39:
81:fd:87:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:08:51 2025 by rpki-client