Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/16vis8mKCMw0Lqb7iG4NH7TCbeU.roa
File: 16vis8mKCMw0Lqb7iG4NH7TCbeU.roa (raw, json)
Hash identifier: 7jQbnk7QOCJ8ZAWzucJtV6/4pdB8lxfRJErUH5wxQnk=
Subject key identifier: D7:AB:E2:B3:C9:8A:08:CC:34:2E:A6:FB:88:6E:0D:1F:B4:C2:6D:E5
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 0194CD2A9102559C2C9B610C78BDA81105D9
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/16vis8mKCMw0Lqb7iG4NH7TCbeU.roa
Signing time: Mon 03 Feb 2025 18:55:06 +0000
ROA not before: Mon 03 Feb 2025 18:55:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 194.187.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cd:2a:91:02:55:9c:2c:9b:61:0c:78:bd:a8:11:05:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Feb 3 18:55:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7abe2b3c98a08cc342ea6fb886e0d1fb4c26de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:1a:b5:06:ba:6b:1d:fc:8d:33:69:86:b4:
50:0c:19:21:68:06:4d:bc:3e:9e:97:2f:05:95:f0:
ab:d5:70:e9:88:26:33:96:fa:63:38:8b:e5:2d:60:
a3:6e:3a:c0:77:d3:b8:47:be:24:5b:74:dc:24:e6:
f8:25:be:07:dd:38:a9:fe:c2:56:1b:3b:68:6d:4a:
a8:78:c6:3f:22:fd:6e:ff:3e:e5:3b:a8:93:e9:03:
67:aa:b9:b4:ef:ce:00:71:e7:92:93:f8:85:96:5c:
11:11:93:f6:ea:35:47:aa:84:50:20:37:c5:48:b3:
9a:2e:21:1f:b3:f8:88:f0:18:62:d5:13:38:dd:59:
63:50:d3:ba:bd:f4:96:6c:ff:8c:97:c3:08:ec:e9:
30:e2:a5:7f:d9:3d:d3:11:ff:65:90:8c:67:ee:83:
ce:4e:23:3f:7b:19:26:38:10:4c:a9:44:df:95:89:
ee:e4:0d:eb:33:1d:d3:0f:80:ab:df:22:fe:e6:f0:
e8:63:70:fc:93:43:f0:2b:86:e1:63:81:e0:a2:ab:
35:70:47:f2:6c:ca:d3:bc:b8:cd:3a:04:1b:fd:b0:
46:45:eb:0b:1c:7a:67:40:07:7d:b5:43:d3:de:d4:
8c:96:f8:0b:87:c0:19:ce:dd:67:02:28:36:3e:43:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AB:E2:B3:C9:8A:08:CC:34:2E:A6:FB:88:6E:0D:1F:B4:C2:6D:E5
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/16vis8mKCMw0Lqb7iG4NH7TCbeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.209.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f1:da:7a:c4:e1:b8:4e:2a:f8:8a:7a:58:cc:02:7b:29:f0:
bb:84:e2:c9:f1:01:ab:c7:8b:cf:a8:22:d2:9a:45:fd:08:73:
b0:ab:94:5b:f9:07:4e:8b:3d:ae:81:74:c1:47:25:c2:c5:ff:
bb:bd:b0:15:a9:01:15:08:35:e1:ae:d6:d3:85:9e:06:13:6a:
58:a1:49:0b:9b:c8:00:b4:01:a4:ac:b7:5e:c3:6c:df:ba:91:
ed:7f:ce:4e:e0:3f:5a:14:a9:ea:8a:6b:43:e4:be:a5:cb:df:
f8:7a:b7:3e:ae:f9:60:95:69:2a:5b:36:d6:56:6e:80:a4:49:
7c:18:8a:ce:eb:e7:57:dd:ef:66:69:c5:14:c4:85:cf:a9:a7:
40:44:91:6c:fc:73:26:ee:82:53:bf:95:38:9f:b2:a7:24:1a:
34:ad:30:21:39:9c:7d:fe:7d:fa:58:80:75:b1:f3:26:67:84:
8f:0f:2b:ff:dc:24:8f:8b:e8:56:1a:9e:0b:63:03:e4:a8:28:
94:d4:d1:e9:e5:85:5a:61:99:8b:dc:bf:e3:7e:6f:76:41:05:
0c:15:7c:d0:75:20:8d:f7:cb:10:b2:1a:88:4d:83:ad:34:e8:
3f:b2:a7:ab:a2:ae:94:67:c9:8e:4d:bf:7c:fa:01:7b:8a:8d:
30:78:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:42 2025 by rpki-client