Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9NV5skWoGUTEX3wJC1DGhWi52yM.roa
File: 9NV5skWoGUTEX3wJC1DGhWi52yM.roa (raw, json)
Hash identifier: L0GIHI29Mye8A9dq3Gt0mgiAXr6xbidaeKFAE5m6L+Q=
Subject key identifier: F4:D5:79:B2:45:A8:19:44:C4:5F:7C:09:0B:50:C6:85:68:B9:DB:23
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427485C2C71AEA7B2FF13629E66E8A18F
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9NV5skWoGUTEX3wJC1DGhWi52yM.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49515
IP address blocks: 194.68.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5c:2c:71:ae:a7:b2:ff:13:62:9e:66:e8:a1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4d579b245a81944c45f7c090b50c68568b9db23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:bc:0a:a9:2d:c8:5d:41:71:72:69:3f:84:
e3:20:a7:22:b7:6e:21:d1:71:e8:3b:2d:13:ff:c7:
1e:04:22:8b:9d:66:b2:09:ea:8b:1e:50:dc:fb:b2:
98:5f:1e:ad:2f:4e:0b:e3:7f:1e:18:b0:32:00:bd:
a0:61:91:be:22:df:63:84:cc:9b:a0:d3:db:68:80:
f9:cb:48:2e:ae:56:62:64:71:a7:de:09:bb:aa:5f:
c2:49:43:50:25:70:43:21:31:d7:d8:54:44:95:3c:
5d:4a:02:f7:9c:2b:58:ea:ee:dc:8e:dd:9d:54:0c:
6f:a0:5f:ec:ab:6a:9b:28:2e:2b:6e:42:51:84:65:
6f:a3:4c:32:cc:d3:2b:6c:c1:9c:d9:67:1e:82:a4:
29:10:04:73:d7:6b:b9:af:f8:e9:b5:08:a7:66:cd:
c1:3d:32:8e:67:cf:f5:4c:af:27:90:80:a8:fc:86:
eb:6d:75:56:05:aa:6a:ef:e0:b6:9e:1e:d4:31:3e:
65:d9:f4:c7:fb:cf:1d:d2:23:b4:86:e1:e5:e3:0b:
e2:79:27:f9:1f:02:19:cd:e5:cb:76:4a:4f:d7:f3:
16:01:51:79:9e:6b:00:11:3c:d7:6f:6a:0c:ac:d5:
04:45:21:85:38:2b:b3:69:17:d6:3f:0a:7e:d4:37:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D5:79:B2:45:A8:19:44:C4:5F:7C:09:0B:50:C6:85:68:B9:DB:23
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9NV5skWoGUTEX3wJC1DGhWi52yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:da:c8:50:d8:c3:93:b2:b9:01:62:97:c9:c5:46:79:26:90:
ce:4b:20:3f:c2:d1:8d:01:b1:cc:bc:02:48:3c:11:af:77:58:
16:91:d2:fe:ec:ee:74:bc:b6:f3:69:60:0a:71:95:fa:52:54:
f6:57:57:3b:c6:be:51:bc:8f:f1:cb:93:f6:64:1c:c5:f5:79:
86:0a:21:4c:d3:6c:36:48:4c:7c:f0:a8:cd:b9:8c:c6:09:c5:
6a:0d:88:43:76:79:80:43:be:a9:45:9c:f0:5f:b8:aa:b2:e5:
17:ba:54:28:be:2d:3b:19:78:b3:cb:97:c0:87:2e:ab:b8:50:
aa:10:14:dd:d5:a8:07:e1:0c:d6:5c:69:35:8e:c5:94:20:41:
e2:3a:d9:a6:8d:5b:f1:a1:98:4a:a5:13:b7:26:3b:02:d5:db:
54:ca:ae:2a:4b:7f:b6:7a:47:6e:8b:0f:e4:c6:9e:42:0a:97:
a3:e5:9d:d0:e7:70:46:36:d7:83:e2:3f:fa:b8:e0:a6:7c:a1:
0e:9f:0d:48:f2:f9:7f:74:0c:78:eb:8b:8d:bc:8e:2e:a6:cd:
9e:28:67:50:3d:45:75:fa:3f:be:73:9e:33:54:18:93:45:8f:
e3:c5:7c:79:45:fd:e3:53:39:69:a2:a6:99:57:04:24:f1:5c:
02:83:8b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:41 2025 by rpki-client