Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/dPUv0UiEsSl2wmwWh7WXiVW0oUY.roa
File: dPUv0UiEsSl2wmwWh7WXiVW0oUY.roa (raw, json)
Hash identifier: QsY9itLfjJ5WmB+KPuW0ZbZL+FhYgpcBDGOifX3R4vk=
Subject key identifier: 74:F5:2F:D1:48:84:B1:29:76:C2:6C:16:87:B5:97:89:55:B4:A1:46
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0194266B0BD79B10D3F2BB799AA7C492DB91
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/dPUv0UiEsSl2wmwWh7WXiVW0oUY.roa
Signing time: Thu 02 Jan 2025 09:48:57 +0000
ROA not before: Thu 02 Jan 2025 09:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200461
IP address blocks: 194.110.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:0b:d7:9b:10:d3:f2:bb:79:9a:a7:c4:92:db:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jan 2 09:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74f52fd14884b12976c26c1687b5978955b4a146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6a:2e:af:69:03:63:e8:9a:98:9b:f4:e9:b4:
c2:15:07:65:92:1b:91:4d:5b:37:5b:9f:53:30:42:
05:0c:fd:c0:33:e3:06:fc:07:d2:d1:d3:36:63:29:
b2:f4:91:60:12:0b:3a:7b:37:ce:c3:68:8c:67:66:
58:ec:fd:e1:66:4a:6d:66:7d:2a:d2:4c:f0:07:66:
35:c0:0a:7d:45:76:06:c8:00:b3:69:e9:a6:ee:e3:
53:62:ea:19:4c:98:ec:d5:9f:6b:61:2e:24:02:10:
50:79:0d:e4:89:f8:59:7c:1e:d1:3d:7a:fc:b4:9b:
9d:74:b0:bb:31:87:b9:57:07:2a:9f:1f:a5:ae:47:
a7:34:e2:37:e0:e7:20:86:8b:1d:15:1e:f7:c9:12:
88:14:f1:f9:11:59:45:02:c3:60:4a:94:2d:8d:b8:
ed:5f:89:ae:d4:41:c6:de:1b:19:4a:83:03:d7:57:
c1:b1:14:72:53:bd:83:80:d2:b6:a0:aa:e2:33:5e:
fd:0a:a2:c6:08:48:03:42:09:e5:5f:bb:4a:59:5d:
10:8e:52:4b:ef:28:0c:46:58:46:13:be:20:62:6a:
9c:82:95:90:7a:e9:18:bf:42:07:46:bf:6b:10:8c:
f4:3a:2f:84:31:88:c5:b4:d2:e9:49:1d:44:5a:21:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F5:2F:D1:48:84:B1:29:76:C2:6C:16:87:B5:97:89:55:B4:A1:46
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/dPUv0UiEsSl2wmwWh7WXiVW0oUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.175.0/24
Signature Algorithm: sha256WithRSAEncryption
72:11:9f:1b:6a:ba:2e:ed:42:ee:cf:28:e9:32:39:12:34:58:
f4:41:e1:66:17:6c:d5:00:96:01:32:9d:33:6b:0a:3a:1d:dd:
55:56:9c:9a:18:b1:ee:cb:4f:4a:7a:17:92:48:d9:30:06:6f:
0e:32:f7:f7:3c:eb:89:88:87:0f:f9:eb:48:68:d4:c3:3f:34:
1c:d7:4b:ac:54:d3:5a:d6:46:e7:35:a1:07:17:7f:26:15:81:
6a:63:d1:3a:b9:b6:ab:44:e5:fc:6b:11:19:28:0c:21:a8:83:
9e:1e:71:d2:37:76:ce:9f:b6:ee:65:04:a2:06:22:54:38:d3:
94:65:aa:d5:6e:e2:e5:7d:7f:ad:a3:19:3c:92:7f:fb:35:53:
79:4a:ef:de:7f:a5:b4:d1:ee:58:c1:41:1d:0b:60:7e:df:61:
46:fd:e6:2a:f2:c2:d6:b1:c4:e6:24:ab:f0:e8:6b:3e:58:6f:
5c:6b:ad:17:81:d2:e1:50:10:df:5a:b3:7a:66:6f:8e:fc:7e:
a2:f4:80:31:f8:3e:51:dd:59:37:4b:53:e4:3b:3f:f9:6e:74:
e9:78:0d:4b:3d:79:f0:35:b1:b6:cd:55:52:f6:94:a0:96:03:
40:85:9f:a7:02:6a:eb:97:46:16:30:f9:a4:05:4c:1b:58:5f:
46:a5:d7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:07 2025 by rpki-client