Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa
File: tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa (raw, json)
Hash identifier: oZHMmFERFSMV3UaFbDA8Gmy32zJZA3mRLZIu5Egtw7c=
Subject key identifier: B4:CD:58:AB:66:D7:88:1D:64:58:74:2A:C3:54:7B:AA:A8:72:24:DD
Certificate issuer: /CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Certificate serial: 0194258F69D4809024899CC2DA13D6BC2256
Authority key identifier: 42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa
Signing time: Thu 02 Jan 2025 05:49:03 +0000
ROA not before: Thu 02 Jan 2025 05:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211043
IP address blocks: 194.31.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:69:d4:80:90:24:89:9c:c2:da:13:d6:bc:22:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424feffb576e411de511871dc1e0bd7a20e2c4d7
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4cd58ab66d7881d6458742ac3547baaa87224dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:7c:26:8b:8e:ba:6b:31:0f:03:f2:cf:5b:
73:b1:f3:69:56:d0:fb:b9:f2:c1:4a:58:e2:29:b9:
fe:ff:f3:35:8c:ec:74:9e:d1:e9:ef:57:8b:cd:92:
a9:57:ea:0c:78:9a:d5:c2:6a:d8:f6:e0:a1:b0:fc:
33:e3:64:aa:10:fe:9d:4f:f4:17:b5:57:d7:bd:33:
92:ee:06:8a:16:3c:fc:95:8e:55:3d:68:83:83:cb:
dd:38:39:a4:b8:7b:92:c6:dc:a5:3e:f3:ff:e0:3a:
59:cb:23:a4:da:7e:c4:b6:36:59:81:dc:b4:73:38:
f9:05:3f:cd:a4:73:94:4f:69:a1:bc:b4:90:44:a0:
44:1d:45:6d:22:3e:49:96:f4:c5:6b:9f:15:8f:9e:
b1:65:84:8b:d8:66:35:ef:44:0e:c3:66:8e:a2:66:
b4:9d:02:3a:1e:a7:9d:fe:6e:ed:ef:0d:7c:2d:09:
c0:40:43:33:b0:9d:98:42:4e:01:99:b0:aa:d3:1d:
c2:a7:cc:ae:96:d8:56:5b:4b:75:04:3c:97:53:8e:
72:b2:5c:75:38:e7:10:85:06:e7:a9:f9:0a:dc:ae:
21:bc:f4:b0:dc:9c:5d:c9:2a:03:e4:73:51:74:66:
3f:7a:aa:75:24:cc:67:96:09:de:aa:21:4c:44:a3:
09:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CD:58:AB:66:D7:88:1D:64:58:74:2A:C3:54:7B:AA:A8:72:24:DD
X509v3 Authority Key Identifier:
keyid:42:4F:EF:FB:57:6E:41:1D:E5:11:87:1D:C1:E0:BD:7A:20:E2:C4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_v-1duQR3lEYcdweC9eiDixNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/tM1Yq2bXiB1kWHQqw1R7qqhyJN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/613508-0832-41f6-acb7-831f7e6f5ccd/1/Qk_v-1duQR3lEYcdweC9eiDixNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.96.0/24
Signature Algorithm: sha256WithRSAEncryption
54:92:a2:63:0c:d4:3a:65:64:bd:70:81:2b:a0:ba:8c:cb:1e:
70:c6:a3:f2:02:c8:08:3e:66:fa:8c:3d:67:f4:fe:e8:68:fd:
55:5f:cf:9c:42:f7:98:e7:b2:0a:9d:1c:a0:0b:1e:c3:b2:34:
77:f5:36:be:c2:6b:76:41:8c:54:e5:8f:ed:82:23:95:84:3b:
73:12:2e:1c:72:37:3c:9a:ac:83:c6:84:fb:f5:52:d3:08:f1:
e4:d5:c8:4a:f1:33:f4:51:ba:d2:b7:90:ed:d9:eb:38:e3:1d:
4f:e7:29:8e:e7:b4:48:ec:e3:27:62:19:00:cb:e0:d7:8e:58:
4a:d7:c4:ed:34:be:41:35:99:d0:3a:94:a0:7c:57:23:7a:1e:
5e:c7:8a:56:5c:fd:b2:de:de:31:dc:39:41:44:73:d3:f8:6c:
78:8d:b6:5e:ab:ac:66:58:b8:ed:82:e6:ae:e6:d1:85:e5:a0:
53:8c:ce:85:3c:e7:34:54:87:a3:95:d7:99:ac:4f:09:87:a4:
96:9b:97:c8:a2:eb:d9:41:53:16:ca:6b:37:1e:13:ef:66:b7:
bf:bb:76:9a:2c:0c:d4:cc:99:ac:a8:93:ff:58:fa:a6:a9:0c:
79:db:a1:3b:f6:53:65:d8:5d:98:a8:02:8d:c2:04:a2:fe:0b:
ab:e6:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:44:20 2025 by rpki-client