Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7RQWscOZ71M4nvULQ7mym1hiZnc.roa
File: 7RQWscOZ71M4nvULQ7mym1hiZnc.roa (raw, json)
Hash identifier: /gYNkqXKRVpumpI4MZHTteQuTtYjJQXeQYRQc1+6y+Q=
Subject key identifier: ED:14:16:B1:C3:99:EF:53:38:9E:F5:0B:43:B9:B2:9B:58:62:66:77
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01958F9D5EE2ACB8A41A0CE3FDB9D101F764
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7RQWscOZ71M4nvULQ7mym1hiZnc.roa
Signing time: Thu 13 Mar 2025 13:06:50 +0000
ROA not before: Thu 13 Mar 2025 13:06:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48525
IP address blocks: 194.147.110.0/23 maxlen: 23
194.147.110.0/24 maxlen: 24
194.147.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:9d:5e:e2:ac:b8:a4:1a:0c:e3:fd:b9:d1:01:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 13 13:06:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed1416b1c399ef53389ef50b43b9b29b58626677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:d4:a4:3e:ea:13:57:86:be:6c:38:d0:b2:
b3:dc:17:a6:e3:21:21:49:d0:67:e4:ee:1a:32:8d:
03:17:95:78:4c:e4:f1:fd:2b:d4:5f:61:d0:d1:d6:
01:b1:7a:fa:e9:97:54:78:f4:69:40:d3:c5:91:40:
bd:ce:ee:cd:36:01:a9:e8:e2:e0:49:55:97:7f:61:
9a:e0:a7:57:b2:e9:66:7a:ea:b5:f7:df:3b:32:fc:
04:bc:7f:1b:41:ee:1d:2b:44:39:dd:d8:28:b4:26:
5d:26:80:bb:63:af:46:b3:7f:0c:69:12:94:35:49:
2b:f5:79:68:6f:ad:8c:5a:b1:3a:4b:9f:4a:6e:52:
6c:57:90:20:46:5e:63:2f:5c:82:ac:dd:10:d7:18:
9f:b3:3d:9f:65:17:3e:21:4b:5f:a4:a2:9f:37:0b:
8c:f1:92:62:4a:22:b2:a8:44:69:07:ac:f4:79:72:
a7:c0:2f:fb:44:02:21:54:c4:3b:1f:2c:bc:1b:e8:
cc:8d:76:19:0d:b5:50:c5:8f:8e:d8:fc:51:fe:c4:
e2:1d:aa:4b:af:79:75:1c:04:56:99:06:d1:f7:ae:
4d:cc:27:8b:3d:bc:27:d6:23:63:f8:73:a1:f0:80:
dc:d7:c7:34:a6:e0:b1:26:f1:82:3d:c3:2a:20:4e:
1c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:14:16:B1:C3:99:EF:53:38:9E:F5:0B:43:B9:B2:9B:58:62:66:77
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/7RQWscOZ71M4nvULQ7mym1hiZnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.110.0/23
Signature Algorithm: sha256WithRSAEncryption
49:02:5d:49:93:a8:15:62:77:e5:88:a6:9e:db:a1:ee:8e:71:
5d:f9:35:d1:1a:9f:92:c8:6e:55:61:8e:2f:75:a6:ae:c5:67:
6f:fe:52:03:52:e5:d8:98:2c:bb:ac:00:60:6a:62:1d:b9:21:
a1:46:a0:88:5e:b6:6b:50:07:47:05:47:5c:05:a6:ce:23:c0:
91:db:20:e7:65:12:e8:48:47:14:c0:e3:8e:8e:37:33:0c:39:
bb:3f:15:5a:da:94:04:48:6f:86:63:31:e6:a7:89:59:fd:3b:
6c:58:8f:d2:0b:f2:2d:54:5b:a9:43:03:31:a2:f2:b4:72:77:
6e:28:4c:3e:2d:47:8f:ed:c2:c4:ac:df:31:c4:10:fc:77:77:
a1:dc:fe:09:0c:d7:1d:08:66:4f:75:f8:55:20:fd:68:56:06:
4b:b7:b7:33:00:80:bb:91:f9:b7:47:c6:d8:e8:c1:aa:d9:2e:
63:11:d0:31:31:bb:46:c6:cc:b9:7c:9f:22:9b:22:53:f9:6f:
2c:8f:89:e1:44:80:a1:00:99:b4:4f:ee:63:5d:da:7f:fa:7b:
d3:d0:c7:07:71:df:cf:4c:58:7e:ba:ae:99:9b:11:5a:57:84:
07:e0:6d:c1:c8:33:a9:10:b6:f9:d5:1f:9f:02:f5:65:15:2d:
4e:ac:f2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:47 2025 by rpki-client