Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/1L32NBd1E2LxRZcjtZjCvNjO2fM.roa
File: 1L32NBd1E2LxRZcjtZjCvNjO2fM.roa (raw, json)
Hash identifier: J+VLnhDl9h8sQI+SXJVfNcMU1Hqy3oPczWK0kv0OsJA=
Subject key identifier: D4:BD:F6:34:17:75:13:62:F1:45:97:23:B5:98:C2:BC:D8:CE:D9:F3
Certificate issuer: /CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Certificate serial: 01915563F545BCBBFC36DCA6A76EC2755FC8
Authority key identifier: 66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/1L32NBd1E2LxRZcjtZjCvNjO2fM.roa
Signing time: Thu 15 Aug 2024 09:34:59 +0000
ROA not before: Thu 15 Aug 2024 09:34:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4466
IP address blocks: 194.69.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:63:f5:45:bc:bb:fc:36:dc:a6:a7:6e:c2:75:5f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6647892437160dd5777ed3ed78d49bc72b5e1c5e
Validity
Not Before: Aug 15 09:34:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4bdf63417751362f1459723b598c2bcd8ced9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:42:de:97:ad:10:dd:0b:48:9b:76:8d:e5:
c6:cd:c7:a6:7a:08:b2:32:ba:bc:18:1e:85:45:74:
af:19:57:6b:bc:d6:79:6b:e9:a2:ca:98:50:5d:3a:
5b:55:b9:2a:ff:6c:ea:29:e6:cf:d3:90:8f:e6:78:
80:39:62:2a:89:27:4c:8b:b1:e8:ed:34:f0:4c:33:
1d:18:a1:93:7d:aa:28:96:fa:b6:4a:27:94:f9:51:
e3:9a:f1:82:6f:56:d4:fe:f1:5b:7f:14:47:97:65:
4f:f1:4c:83:8e:ba:2a:75:24:a0:59:cd:28:5b:cd:
d7:d6:45:34:c9:f7:7e:91:70:0b:bb:31:3f:b8:97:
cd:80:ed:f0:87:ca:2d:e5:43:ce:4c:ee:3e:96:71:
5d:ee:fe:02:7c:fb:e9:28:2a:c9:eb:a8:dc:1a:ea:
81:cc:38:7f:fd:3d:d1:01:b5:bf:b0:22:04:0f:7b:
e6:0e:19:47:98:00:1b:bf:02:76:f2:cc:30:4c:df:
33:64:1f:2b:bb:eb:fb:d4:82:ab:05:5f:8d:6f:63:
74:d6:ef:d8:ee:9f:92:c6:61:36:67:83:82:2b:b8:
6b:1c:e1:b2:c2:ae:88:6e:b8:d6:84:20:30:70:af:
8a:21:ca:54:3b:3a:48:1c:38:63:49:cb:30:17:44:
64:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BD:F6:34:17:75:13:62:F1:45:97:23:B5:98:C2:BC:D8:CE:D9:F3
X509v3 Authority Key Identifier:
keyid:66:47:89:24:37:16:0D:D5:77:7E:D3:ED:78:D4:9B:C7:2B:5E:1C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkeJJDcWDdV3ftPteNSbxyteHF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/1L32NBd1E2LxRZcjtZjCvNjO2fM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/19118c-ae60-48e3-a032-f8af568563e4/1/ZkeJJDcWDdV3ftPteNSbxyteHF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.149.0/24
Signature Algorithm: sha256WithRSAEncryption
31:f9:b3:e2:9f:fc:23:bf:1a:73:0d:5c:2c:b0:60:6b:23:eb:
ee:22:22:19:ac:52:87:c6:c0:87:f5:c3:9b:f5:21:b3:d2:94:
0b:64:08:6e:57:01:5f:8f:73:7f:75:49:10:ed:ab:3a:5c:69:
5e:24:99:51:89:9d:f4:92:13:9f:c8:66:91:07:51:1c:d0:9d:
0b:e9:51:09:d5:a9:57:dc:b5:e3:8f:bd:40:ac:63:72:51:40:
4a:af:ed:43:89:4a:38:aa:a4:fe:c1:70:f8:11:86:01:32:21:
01:5e:a7:f6:28:d9:83:dc:f5:90:a2:41:cc:60:9a:38:58:50:
85:1f:68:2d:03:30:6f:d9:5b:df:a9:2c:18:e5:d8:cd:16:2d:
54:3c:3a:7d:8d:cc:c3:ff:98:69:01:e5:f7:28:dc:cd:72:01:
ae:3e:e8:ec:f8:82:66:58:79:6c:41:52:1d:ed:5a:3b:5c:31:
ca:70:d4:79:5e:58:d3:95:1c:f1:72:e8:71:f8:2b:90:b0:a9:
e6:f5:6e:f0:5d:31:1b:36:05:11:40:7d:03:b5:c6:e2:90:43:
08:15:10:2c:58:40:5a:20:62:24:8c:6a:0c:95:2c:15:24:79:
ff:4f:8d:a7:8a:b6:35:cd:4e:b0:ee:8d:2e:e4:b5:08:06:18:
51:5b:3b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:36:56 2025 by rpki-client