Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yAovCx547nNNqT1C-VxfyyBSh-w.roa
File: yAovCx547nNNqT1C-VxfyyBSh-w.roa (raw, json)
Hash identifier: Ez+LaUznI1kOaOhKM6LzqMC4HGfJv/JhmnV6XyVdwx8=
Subject key identifier: C8:0A:2F:0B:1E:78:EE:73:4D:A9:3D:42:F9:5C:5F:CB:20:52:87:EC
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 0194258F23B23EA1EEFCB267C325F21C395B
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yAovCx547nNNqT1C-VxfyyBSh-w.roa
Signing time: Thu 02 Jan 2025 05:48:45 +0000
ROA not before: Thu 02 Jan 2025 05:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200193
IP address blocks: 194.116.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:23:b2:3e:a1:ee:fc:b2:67:c3:25:f2:1c:39:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Jan 2 05:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c80a2f0b1e78ee734da93d42f95c5fcb205287ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:5e:0b:8f:56:a5:53:e3:62:47:b7:97:c6:
48:2a:a0:26:70:2d:0e:85:33:7d:74:f2:f0:9a:92:
93:79:06:b0:7f:06:f8:31:60:b1:a0:ef:f8:1a:8a:
33:00:ca:c0:d8:60:13:e0:27:ba:01:4a:65:f8:44:
de:48:e3:5d:d2:b2:92:0e:36:7d:84:49:ae:7f:6d:
1c:f5:f6:d9:f0:d3:f5:14:4e:ac:b5:cb:4e:9f:9d:
90:dc:65:45:4f:1d:8a:9c:c1:8a:45:ca:00:ac:f1:
5c:15:ff:ef:68:55:75:4b:49:b6:a7:5c:a0:fa:aa:
99:1d:c6:b7:5a:30:72:68:6f:fa:83:10:c6:ca:4f:
e0:03:0f:56:ae:f6:11:54:78:0c:b9:5d:bb:1a:09:
81:4d:2e:57:af:44:bc:bd:4c:86:61:93:dc:39:4b:
bb:f8:af:3c:0f:b0:60:88:2a:e4:97:4f:1d:51:9f:
3d:99:b3:57:29:c2:75:45:f4:2d:ae:a7:6d:ef:3d:
9d:4c:29:80:b4:3b:b1:90:f0:89:0f:f1:74:c7:9e:
c9:07:48:fb:1c:78:3a:a4:e8:af:6b:fa:58:81:f2:
9b:c2:88:35:4b:43:42:b7:74:3c:1e:3e:cd:e1:e3:
2a:d2:fc:1e:a3:88:9b:b2:15:86:45:ed:05:c6:d3:
6b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0A:2F:0B:1E:78:EE:73:4D:A9:3D:42:F9:5C:5F:CB:20:52:87:EC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/yAovCx547nNNqT1C-VxfyyBSh-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bb:ab:1c:c3:f1:df:8b:f5:98:f4:41:5a:00:50:05:24:cf:
f4:44:15:39:ad:39:1f:43:bf:51:5a:6b:41:b2:2a:95:dd:0e:
85:08:50:33:60:1f:41:0f:7e:7c:ed:d8:ef:75:6e:40:68:d0:
f2:a8:43:c2:62:f2:b3:7b:f6:19:c7:3b:81:63:bf:8b:88:9f:
ad:2c:94:67:a9:2b:53:ef:85:c9:57:c9:79:17:74:d5:57:1b:
94:4e:18:b6:7c:62:dc:49:82:1f:16:6e:1a:2d:da:29:78:2e:
97:c6:bd:b7:8b:b6:2c:47:56:58:f7:e6:5d:44:2f:76:a2:a1:
e9:c9:49:33:b7:0a:6b:dd:e4:b5:dd:91:08:40:d0:7f:b2:82:
0b:f7:21:02:cf:ab:83:d0:ea:ae:36:a6:b7:50:11:c2:b2:6b:
23:01:27:97:e1:4a:fd:11:b0:bf:9e:ef:a5:d7:b0:7e:e7:4b:
00:b9:16:e8:fd:5b:f8:fe:33:bf:b3:08:aa:57:cb:e3:5b:c8:
54:97:44:23:87:15:68:84:60:99:2b:fa:23:87:33:f2:55:a1:
c9:1f:37:38:46:31:82:4e:41:d7:a2:47:33:06:36:f3:b4:3e:
f0:38:8b:26:be:19:00:98:5c:d4:30:85:93:01:dc:38:70:d9:
e1:f2:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:26 2025 by rpki-client