Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/WmLDow5KPtPm7R4XsODNb3nK6Og.roa
File: WmLDow5KPtPm7R4XsODNb3nK6Og.roa (raw, json)
Hash identifier: 4GYJeuCBXCBDgFT4ZnecJgi27g3BGxeNgDA7fyyOWHA=
Subject key identifier: 5A:62:C3:A3:0E:4A:3E:D3:E6:ED:1E:17:B0:E0:CD:6F:79:CA:E8:E8
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 0194CC19BD7E7EF18244DA366F100C03A2A6
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/WmLDow5KPtPm7R4XsODNb3nK6Og.roa
Signing time: Mon 03 Feb 2025 13:57:06 +0000
ROA not before: Mon 03 Feb 2025 13:57:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 194.187.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:19:bd:7e:7e:f1:82:44:da:36:6f:10:0c:03:a2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Feb 3 13:57:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a62c3a30e4a3ed3e6ed1e17b0e0cd6f79cae8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:47:c0:16:1c:f7:d2:2b:c0:43:3b:87:e2:
4b:9e:d6:d8:31:b5:2c:42:14:b7:d7:53:c0:86:d2:
c6:db:03:56:e0:92:b6:34:63:65:23:db:a2:62:1e:
26:33:f9:6c:34:49:5b:34:90:b1:37:5d:f1:b0:af:
22:71:d4:79:e6:88:40:af:51:b4:c2:41:5a:2e:7e:
9d:c4:42:b3:51:3e:73:c5:5b:ac:53:3e:12:7b:70:
02:8b:d8:a9:0c:0e:ab:70:e7:13:fd:75:e0:ef:27:
f7:57:73:9f:30:67:33:43:dc:ae:89:09:f7:5c:c3:
af:55:60:bb:56:06:0f:39:5e:5d:a0:a6:1b:f0:d3:
41:8c:cd:65:e8:81:ba:bf:18:42:9c:18:f5:75:3f:
1d:7d:cb:82:59:7c:80:24:bb:f3:16:11:f4:69:fb:
4c:81:82:0a:cf:36:2a:b1:cb:eb:ba:b1:ca:f3:1c:
4c:c3:0a:8f:97:58:cc:2a:21:2f:4e:45:f9:48:53:
22:b1:d5:72:b4:5e:5a:bf:91:7f:8b:eb:f4:ce:9f:
d8:2e:e5:be:5c:2b:e5:d7:42:06:be:b9:3f:06:0c:
67:46:c6:43:b3:84:41:ce:80:db:e0:aa:b2:40:1f:
bf:67:c3:5e:e2:6b:2e:09:f1:92:52:68:c3:04:3d:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:C3:A3:0E:4A:3E:D3:E6:ED:1E:17:B0:E0:CD:6F:79:CA:E8:E8
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/WmLDow5KPtPm7R4XsODNb3nK6Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.209.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d1:83:f6:f9:f5:35:f1:73:62:42:26:62:6f:3c:3f:bb:7d:
34:ba:5b:bb:77:25:44:4b:b2:c3:e7:01:2a:50:f8:dd:1d:95:
0c:d2:03:e3:0e:ba:67:f3:ce:b5:7c:3e:0b:8b:94:d5:ee:b0:
b1:9a:0a:c4:b2:07:5e:bf:d5:35:0f:44:e2:3a:b3:1d:85:a8:
ae:d8:d5:2d:e9:26:c4:7d:fa:4d:17:5f:9d:c6:0c:c8:82:8e:
df:05:c4:c9:34:f6:98:32:eb:85:56:85:9f:72:23:20:34:f9:
a0:37:a9:a8:01:be:df:5d:87:8f:b3:fd:3f:70:76:1e:0a:b4:
4c:c2:c0:ca:3b:d2:b7:ff:47:70:73:21:d8:90:a4:40:43:61:
ac:7a:25:aa:5a:7d:f6:4e:fa:01:60:db:ef:c2:3a:8b:6c:23:
5e:2f:d7:3b:50:1a:33:af:ce:46:3f:74:a7:e2:55:69:2d:10:
30:81:66:88:b0:de:5e:00:f4:46:4d:5c:e9:2d:4f:1a:29:d5:
44:fd:94:b5:f4:5e:9c:36:6e:ce:72:04:65:32:59:cf:bf:b2:
e4:07:64:23:32:f7:aa:d6:69:23:ef:c7:40:5e:8f:b0:90:ab:
12:78:3a:e8:5b:81:78:25:82:2c:ae:b5:ba:cd:9c:aa:75:3f:
02:04:d8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:52:00 2025 by rpki-client