Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/RewjGr43EG1iIMj1c-4pVfpQCtU.roa
File: RewjGr43EG1iIMj1c-4pVfpQCtU.roa (raw, json)
Hash identifier: yXODa8RGa/7nz4mBNAxVv6ZScKn5IPa0tTC093Zhd9Q=
Subject key identifier: 45:EC:23:1A:BE:37:10:6D:62:20:C8:F5:73:EE:29:55:FA:50:0A:D5
Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial: 0194266BB11741BFE4CCB553370978CDBDF1
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/RewjGr43EG1iIMj1c-4pVfpQCtU.roa
Signing time: Thu 02 Jan 2025 09:49:39 +0000
ROA not before: Thu 02 Jan 2025 09:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 194.110.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b1:17:41:bf:e4:cc:b5:53:37:09:78:cd:bd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Validity
Not Before: Jan 2 09:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45ec231abe37106d6220c8f573ee2955fa500ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:a8:6e:3f:b4:d1:25:b3:01:63:fc:bf:d0:
8f:74:7f:17:b8:f2:8a:8c:68:e0:85:5a:85:88:d3:
2e:1a:f6:06:df:96:8f:87:03:ab:7a:f3:2c:ab:ae:
1a:a5:50:38:4a:8d:ee:a7:88:05:36:f8:7e:38:79:
08:03:95:67:1c:a1:91:f8:9c:7b:4a:21:ef:d9:4e:
73:a4:f9:6e:c0:81:65:87:9a:80:8c:e6:fd:57:0c:
a5:d8:30:99:b6:16:e8:62:fb:43:7c:83:f1:3c:98:
68:7c:b7:be:90:bd:d3:33:01:95:a4:48:c2:37:e4:
df:f8:72:eb:c8:72:8a:1b:64:94:a6:4d:b6:4d:26:
e6:09:65:b4:74:c8:d5:ef:9c:ef:99:dd:f9:1e:0e:
ff:24:ec:ae:58:45:46:8d:20:cc:ca:b9:56:84:4f:
f3:57:41:ec:c5:69:9d:a1:6f:b0:1d:4a:a3:9c:30:
df:62:7c:36:63:9f:bb:9b:ce:7b:53:ba:88:4d:f2:
76:0d:b9:19:60:f9:5b:70:0f:ea:82:46:f2:60:a6:
f1:8e:f0:85:ca:66:da:7a:b0:4e:d7:9b:26:a7:64:
97:34:97:89:af:08:56:cc:f4:07:7d:a3:13:35:8e:
cb:be:9f:c2:db:01:59:cf:36:c7:01:33:6b:a5:4d:
e9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EC:23:1A:BE:37:10:6D:62:20:C8:F5:73:EE:29:55:FA:50:0A:D5
X509v3 Authority Key Identifier:
keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/RewjGr43EG1iIMj1c-4pVfpQCtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.206.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ab:9c:02:11:b9:11:96:88:32:1e:f0:fe:fe:6b:f0:63:6a:
f4:30:16:dc:fe:f1:02:12:72:c9:38:5f:13:11:8d:e0:55:c8:
52:66:5c:5d:b1:b8:6d:b7:7d:98:66:ca:5e:e1:c7:e8:c2:8a:
e5:e8:ce:4b:9d:a4:76:b4:f6:90:01:ad:8e:b7:22:ee:c2:12:
ac:37:eb:cb:00:97:fd:49:ba:fe:bc:a8:77:eb:ad:22:3e:d1:
3b:ae:44:f3:93:04:17:d3:df:51:d6:d4:36:b5:07:50:49:2e:
fd:3d:53:a4:cd:62:a5:15:f0:38:db:ba:b7:ea:44:d3:9b:73:
c0:2e:7c:9a:c7:e0:72:b2:ee:d6:3d:55:99:08:34:80:df:3d:
45:74:1c:92:8e:2c:78:51:8f:bf:e0:92:83:2f:90:10:cf:f9:
3a:ef:eb:b6:56:80:d9:ce:bd:09:46:db:3e:40:53:fd:7d:19:
ab:d5:b5:59:92:ea:45:a4:aa:26:2c:0f:d8:34:e5:0b:0c:d3:
ba:31:9e:f9:5e:ed:d4:eb:1e:05:65:d7:e6:1b:85:2e:71:ff:
46:94:73:60:c7:3c:2c:c7:99:db:dc:a5:8e:47:be:b1:3c:3a:
6b:c0:eb:5e:cf:cf:3a:5f:75:b2:76:4f:41:6e:9a:7d:b4:45:
c1:26:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:58:12 2025 by rpki-client