Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hJceQIRlEq1tw8JNL5n5oUXHLTI.roa
File: hJceQIRlEq1tw8JNL5n5oUXHLTI.roa (raw, json)
Hash identifier: RP0uHdwJtDhwyfb1rd+6djy7JkqNJsKKeJQTioQCnnc=
Subject key identifier: 84:97:1E:40:84:65:12:AD:6D:C3:C2:4D:2F:99:F9:A1:45:C7:2D:32
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274877C9ED8BA60480AE9DC8766C8929
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hJceQIRlEq1tw8JNL5n5oUXHLTI.roa
Signing time: Thu 02 Jan 2025 13:50:48 +0000
ROA not before: Thu 02 Jan 2025 13:50:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206884
IP address blocks: 194.14.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:77:c9:ed:8b:a6:04:80:ae:9d:c8:76:6c:89:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84971e40846512ad6dc3c24d2f99f9a145c72d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c9:30:64:bd:9c:c1:54:02:ed:e0:91:ca:9f:
b9:c6:1a:5e:79:27:58:55:fa:36:a5:ad:ab:00:77:
96:c3:cd:bd:5f:ca:f8:9b:e3:1e:52:7a:e5:c1:b9:
b6:c3:17:8a:77:60:84:da:68:3f:01:00:4e:c9:4b:
bb:0c:1e:51:8e:22:bb:19:b6:81:a5:9a:ce:3e:65:
a6:f0:ee:2d:c8:59:c4:2e:62:be:13:ad:db:63:fc:
d5:fa:32:08:17:8a:bf:76:b5:1d:3d:61:cb:b2:d7:
4d:01:05:34:d1:28:f2:b9:f1:04:46:e2:66:e5:db:
87:c5:e3:b9:73:1d:c8:6b:d4:db:78:c0:da:43:c6:
07:95:6d:64:ac:d8:cc:ae:e8:75:dc:48:38:75:f2:
13:52:83:c7:3e:8c:20:e1:fe:dd:f5:0a:8e:4c:1a:
c3:de:5a:9d:85:db:03:e3:74:c2:23:ce:92:bc:f4:
86:30:85:61:34:ff:9d:ae:2d:ce:66:41:ab:76:e7:
d2:44:66:15:f5:1a:9c:52:ef:22:16:eb:33:60:01:
4b:50:45:d7:c6:0c:01:67:da:c4:49:d0:73:ce:0f:
a9:0f:1e:66:12:80:0f:00:cc:55:15:66:9c:25:15:
15:bc:01:10:85:4c:36:fc:ce:15:b5:77:c1:fd:f4:
62:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:97:1E:40:84:65:12:AD:6D:C3:C2:4D:2F:99:F9:A1:45:C7:2D:32
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hJceQIRlEq1tw8JNL5n5oUXHLTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.76.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c8:45:9e:87:2d:46:7b:25:1a:be:15:15:f7:af:54:d8:47:
ed:9b:32:b8:c7:fd:1b:0d:c5:b2:b5:51:5b:0a:a3:b0:70:1b:
93:fc:64:42:a1:c2:b5:81:8e:71:bd:38:d2:89:f2:8f:e2:d2:
af:5b:a9:dc:8b:46:98:17:cc:d6:90:f0:fc:8f:c4:cb:1c:f1:
51:c5:53:56:08:38:0f:63:4b:9b:b5:33:f7:c9:93:d7:30:2c:
87:ba:23:b2:ca:c7:28:cf:0a:8d:c4:16:8d:d6:a7:d0:33:d2:
98:c0:04:30:e0:7d:28:55:91:12:7f:a6:00:4f:b2:3d:4e:07:
9a:1f:9e:3e:96:6c:8c:8b:b7:97:fa:56:23:91:9d:23:d1:8c:
8e:93:18:05:16:84:5c:ba:d6:a4:cc:3a:e1:cc:7a:94:6d:96:
de:87:5c:ca:de:93:d6:81:e0:53:5f:70:41:e3:04:f8:27:07:
da:0c:52:9a:e4:1d:ab:02:a7:d3:ec:21:60:d2:34:3e:2c:2d:
50:0f:59:8f:bc:79:91:f4:42:67:26:d3:13:b1:c2:c7:78:2d:
09:61:90:8c:89:e8:ee:de:b4:ae:2b:31:f1:7d:f3:22:b2:32:
18:95:d5:9e:4b:40:30:4e:a4:05:60:5b:10:d2:df:54:84:67:
bc:ac:70:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:12 2025 by rpki-client