Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hVVFg2nSNE8JirHd5A0RmJlXKTc.roa
File: hVVFg2nSNE8JirHd5A0RmJlXKTc.roa (raw, json)
Hash identifier: XmpEYl694V5iF4HpEJDchQVl7XMzvdFFaR1Xjbv7HhU=
Subject key identifier: 85:55:45:83:69:D2:34:4F:09:8A:B1:DD:E4:0D:11:98:99:57:29:37
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194D0F15DED623DDF373A2E225154947C65
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hVVFg2nSNE8JirHd5A0RmJlXKTc.roa
Signing time: Tue 04 Feb 2025 12:31:06 +0000
ROA not before: Tue 04 Feb 2025 12:31:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41718
IP address blocks: 194.156.120.0/24 maxlen: 24
194.156.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:f1:5d:ed:62:3d:df:37:3a:2e:22:51:54:94:7c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Feb 4 12:31:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8555458369d2344f098ab1dde40d119899572937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:2a:34:84:0f:25:af:67:77:77:93:93:36:
8a:a2:98:97:b9:8e:ef:3f:b7:42:19:c7:17:2e:bc:
e4:f9:fa:09:77:80:70:e5:c0:8d:17:89:0b:13:35:
b6:3c:10:66:6c:5d:9a:89:16:0b:7d:b5:b0:ea:da:
86:0b:8d:69:04:b3:cd:e5:20:d4:41:27:77:ce:7b:
93:bb:fb:03:a1:a6:79:bd:de:de:0f:df:40:b2:34:
0b:9a:d9:7c:ae:ba:67:ab:99:b2:28:16:c4:fa:c7:
30:6b:24:38:d9:c8:fd:ed:6b:49:6d:a3:bd:3f:8b:
d6:1a:9d:0b:49:e0:c8:c5:e4:ea:f7:39:46:88:22:
fe:d1:92:07:af:78:8a:54:60:45:85:ed:56:24:a7:
6c:14:11:fd:be:38:24:9e:b0:8d:14:18:d0:37:4e:
36:79:ef:30:27:86:66:ac:18:02:f6:57:08:e8:59:
c8:16:5a:e2:a7:9a:62:b1:cc:b1:fe:97:d3:27:51:
f5:48:79:88:42:c0:ce:b7:79:62:6a:4e:b2:ba:6a:
68:23:05:fc:26:04:37:a8:c2:28:da:31:83:1f:7f:
b5:27:c2:1c:cf:d1:54:e8:8d:c5:33:62:25:ee:9f:
ab:fb:1e:03:df:f9:34:ff:26:16:e4:f0:0d:48:2d:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:55:45:83:69:D2:34:4F:09:8A:B1:DD:E4:0D:11:98:99:57:29:37
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hVVFg2nSNE8JirHd5A0RmJlXKTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.120.0/23
Signature Algorithm: sha256WithRSAEncryption
15:ee:a3:94:cb:8b:e4:81:c8:ee:d3:27:2b:7d:3a:ca:f3:2b:
87:a1:bd:77:1c:3a:a3:3a:aa:e1:af:fc:45:a5:75:0b:4f:24:
16:f5:97:19:60:8a:f3:a4:2b:5c:a8:db:77:20:b3:b8:f7:bd:
76:2a:10:02:c8:4d:72:16:db:ba:8a:55:ff:4f:96:7d:d5:a5:
78:01:7b:c2:98:02:4a:74:16:a0:e8:81:a2:c5:21:a3:1f:2a:
94:ce:93:65:4f:54:aa:9f:ec:f6:46:6f:bb:c8:67:e1:21:4c:
e5:fd:18:9e:81:ee:33:b3:8c:f8:bb:54:e1:93:1c:6b:00:33:
04:f6:f5:cb:d2:b4:ed:6f:be:81:35:4a:dd:3f:82:78:3d:c9:
e7:59:19:a8:de:ef:b8:e2:23:30:d5:18:71:4b:59:14:99:cb:
45:72:c2:78:a5:70:d2:a1:11:c0:70:68:03:38:9b:a2:3e:f8:
19:96:f9:d1:70:bc:f9:b8:ef:00:38:c7:fa:66:4f:f1:d8:5c:
fd:2b:ae:2c:ae:99:57:c6:de:cf:f6:9b:94:2a:cb:1c:73:5b:
2d:cc:2f:63:4c:3e:a4:1c:3b:eb:13:b1:2e:96:14:50:20:b2:
30:df:9e:b0:a3:95:4d:56:c0:f7:42:de:70:c6:85:e0:a7:34:
f8:1d:ee:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:23 2025 by rpki-client