Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa
File: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (raw, json)
Hash identifier: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=
Subject key identifier: B8:4E:D8:AF:49:AB:74:17:14:5F:52:16:E8:5B:B3:1D:69:25:15:61
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F258284298E0C0B15F7221BF652EE
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa
Signing time: Thu 02 Jan 2025 05:48:45 +0000
ROA not before: Thu 02 Jan 2025 05:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200456
IP address blocks: 194.146.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:25:82:84:29:8e:0c:0b:15:f7:22:1b:f6:52:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b84ed8af49ab7417145f5216e85bb31d69251561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:bb:84:12:d2:f8:4c:8d:db:7c:d4:fa:8b:
e1:45:90:5d:0d:64:39:2a:c7:15:06:04:51:e7:01:
bf:96:4b:30:3d:84:97:1e:ae:0e:bf:c8:1a:63:a9:
58:ff:62:9e:d8:f3:2d:b4:76:51:05:4d:39:a7:40:
65:17:d9:70:39:b9:c3:f4:8a:1c:7d:53:ce:9c:6b:
46:98:ff:0a:4c:39:90:71:98:e7:ad:7e:96:66:09:
e8:5b:9e:84:2b:bc:fb:18:f3:d4:b2:48:12:ac:50:
0c:43:2a:5c:18:f1:4f:b0:6f:7c:7b:12:69:ae:fb:
67:7a:df:6b:4d:0f:eb:da:6f:b3:4f:28:17:8a:ab:
a8:dc:c1:b8:d7:49:0e:6c:dc:3f:bc:32:39:f7:64:
f1:fb:41:78:3d:17:2a:31:15:9c:20:c0:2a:0a:c9:
3d:41:67:c8:b8:38:a0:62:ed:84:88:7c:47:a9:5e:
5a:00:f9:37:4b:dd:ac:54:44:37:ac:85:14:ee:dc:
26:6f:d0:33:82:48:75:13:59:9c:c9:9d:60:49:6e:
2b:3e:2d:6a:50:94:d3:da:5b:5b:f4:89:bb:63:25:
0b:fe:18:3e:e9:d1:19:28:a3:bf:88:85:d2:33:4f:
cd:95:7d:32:6b:78:06:0d:10:16:e6:61:47:b2:c2:
23:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4E:D8:AF:49:AB:74:17:14:5F:52:16:E8:5B:B3:1D:69:25:15:61
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.50.0/24
Signature Algorithm: sha256WithRSAEncryption
67:75:97:68:72:ac:fd:0d:67:0e:68:64:b9:5c:5a:22:ba:a1:
e9:d2:bd:e3:91:70:e4:06:37:ad:e7:7a:96:78:1f:1e:5f:40:
cf:ec:b4:b1:92:6a:cb:b3:fd:0c:8e:64:1a:a0:f7:e7:d3:5c:
2c:f2:fb:ad:02:76:70:7a:5d:bc:47:95:80:0d:22:b5:cf:be:
7b:2d:e0:e6:20:bd:56:9c:06:1c:03:8c:8d:c4:ed:ba:d2:cd:
e6:3d:e3:77:d2:4e:68:0c:12:da:2d:db:a9:55:3d:81:28:18:
3b:5b:e0:ab:f0:8c:ac:92:47:3f:48:6f:64:02:c1:f2:d5:bb:
d6:87:1a:84:88:23:4c:b2:f9:e2:43:5a:58:5e:d3:a0:df:91:
7e:9e:75:54:5b:71:97:14:f6:89:89:f3:9a:c6:2a:5a:56:70:
bf:b8:66:9b:28:fa:a5:ea:40:ce:56:0c:91:bd:94:8f:be:2d:
6b:5c:80:61:a0:80:46:f3:2d:e0:ab:0f:80:58:a7:85:3a:9b:
53:11:51:9f:23:ea:6c:a8:b4:08:73:4e:83:48:10:fe:1c:99:
4d:7b:2a:7c:b7:e1:49:8c:65:a5:38:65:3b:d5:3d:87:44:6d:
87:0e:15:68:fb:83:2d:3f:26:16:f5:4a:9a:1e:26:35:4b:39:
45:ea:9b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:18 2025 by rpki-client