Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-02vBodM2V-dL9fyXp07EK04Nd8.roa
File: 1-02vBodM2V-dL9fyXp07EK04Nd8.roa (raw, json)
Hash identifier: b7npRRfvXnva+MTmG0ByfKit5qeLqR4u1RB9PTf2pUw=
Subject key identifier: FB:4D:AF:06:87:4C:D9:5F:9D:2F:D7:F2:5E:9D:3B:10:AD:38:35:DF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274839C2AD403C6F4CED2081BCB7FD3D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-02vBodM2V-dL9fyXp07EK04Nd8.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2856
IP address blocks: 194.132.24.0/24 maxlen: 24
194.132.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:39:c2:ad:40:3c:6f:4c:ed:20:81:bc:b7:fd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb4daf06874cd95f9d2fd7f25e9d3b10ad3835df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:de:e6:c7:76:6e:50:52:0d:ab:70:1b:89:99:
b9:23:11:a0:02:20:32:48:ff:0a:ab:c3:da:65:63:
2b:e2:c8:ab:6c:3e:7f:d1:9c:76:8f:f0:ed:22:5a:
18:7b:40:d1:73:00:4d:48:ef:76:f9:71:a6:3f:9b:
d1:95:2f:b0:42:d4:5e:d5:08:15:a2:78:d2:e6:1a:
be:12:d1:f2:c9:c7:2e:12:99:f9:61:7f:ad:24:67:
97:81:f3:a6:3b:c1:81:4c:29:b6:cb:77:dc:ca:8f:
52:36:a5:d7:63:05:0f:c2:01:e2:b6:48:1d:6b:96:
7a:ee:30:63:fe:75:5b:ab:50:65:39:c6:2a:1b:07:
3e:98:56:e5:23:81:34:b1:67:a1:f1:8d:e8:a6:97:
56:fd:3a:12:27:98:be:f1:1a:f6:fe:81:ed:1f:99:
80:89:81:6c:11:ba:76:e1:1e:6f:44:fc:24:9b:66:
b7:e2:31:8d:5b:d5:22:e5:c9:22:39:8e:be:71:b8:
c4:2c:06:d2:b2:6a:90:4d:ac:fb:34:c8:db:21:cc:
cf:3a:e6:d5:be:ed:dc:07:57:bb:74:70:7b:51:c5:
6e:33:7e:e4:80:a9:df:8a:95:69:7b:cf:ca:b8:97:
9b:ff:b6:16:9e:04:af:ce:f5:fb:fd:5a:41:94:8c:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:4D:AF:06:87:4C:D9:5F:9D:2F:D7:F2:5E:9D:3B:10:AD:38:35:DF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-02vBodM2V-dL9fyXp07EK04Nd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.24.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:2a:fa:a8:dd:ae:b2:0c:d1:b7:8a:6a:27:91:d0:84:08:99:
5c:fd:fe:cd:67:d8:4d:5d:f2:4c:36:fd:c9:95:46:69:90:77:
1b:35:c6:eb:f3:6f:2a:69:cb:93:81:1f:18:40:02:fe:e8:7c:
ce:54:d9:77:3c:75:f9:ff:c8:f0:cc:80:eb:80:e9:5c:a5:9f:
4c:ba:09:df:c9:ff:b0:2e:bf:5c:e2:06:7e:90:bd:d5:bb:e3:
a5:bb:6d:bb:0c:b2:7d:86:f7:6f:1b:03:77:52:09:57:3f:c1:
78:2a:2e:19:f3:ea:f9:3a:a5:ea:2b:cc:a0:a9:af:b5:a9:e9:
33:97:94:62:52:30:d2:0f:47:29:83:b7:94:9d:8c:72:d6:9a:
60:0c:01:93:ef:a2:28:7c:76:8b:d2:74:77:3b:e1:99:2e:56:
04:d2:38:cf:70:e7:77:09:a3:22:31:d2:f4:ad:de:51:c2:8e:
74:4a:a4:33:36:1f:69:d2:24:73:69:ff:7a:88:59:61:2d:92:
3c:2e:1c:e8:c5:0d:51:42:03:f5:df:58:cb:e0:0e:68:94:2d:
e0:1e:7d:e4:1f:28:18:dd:c0:2c:9d:4b:06:c0:76:73:3d:e6:
28:dc:51:91:78:a1:db:0f:b6:21:54:d3:25:57:7c:57:75:4b:
c1:0f:62:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:29 2025 by rpki-client