Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/k0BbLfW1pH9JeekCNksDJuhLIU8.roa
File: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (raw, json)
Hash identifier: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=
Subject key identifier: 93:40:5B:2D:F5:B5:A4:7F:49:79:E9:02:36:4B:03:26:E8:4B:21:4F
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 0194258F812BF990AE0ECDB2CB970F86DA42
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/k0BbLfW1pH9JeekCNksDJuhLIU8.roa
Signing time: Thu 02 Jan 2025 05:49:09 +0000
ROA not before: Thu 02 Jan 2025 05:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3598
IP address blocks: 194.69.96.0/19 maxlen: 19
194.69.100.0/22 maxlen: 24
2a01:110::/32 maxlen: 32
2a01:110:8020::/48 maxlen: 48
2a01:110:8068::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:81:2b:f9:90:ae:0e:cd:b2:cb:97:0f:86:da:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Jan 2 05:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93405b2df5b5a47f4979e902364b0326e84b214f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:c5:5c:7d:9a:b6:57:3f:e9:68:01:2e:e4:
ac:fa:d1:42:2f:c1:7f:29:06:0a:88:03:4e:8a:5d:
bb:59:1d:7f:34:4d:a7:aa:fe:59:f7:29:aa:b1:75:
0b:92:bc:90:e6:b6:68:98:9d:0f:14:6b:48:4e:3f:
27:ae:ee:a7:9c:0f:f6:d5:a0:8d:e5:6e:fb:0b:63:
37:0f:c3:ac:be:62:24:45:15:7f:85:ff:7c:9a:d8:
81:59:d3:67:aa:71:b6:a7:74:c5:af:05:86:82:52:
50:f1:ea:63:f3:99:10:2d:67:05:fa:aa:3b:59:44:
34:8a:fc:d8:81:96:2a:5c:4c:c7:9d:67:36:f9:bc:
94:1e:6d:bf:7e:06:e8:1c:bf:a1:27:5d:4e:57:59:
3f:d8:ec:f4:04:21:6e:6d:ea:0d:3d:eb:c9:38:7f:
db:80:92:6d:b3:34:4b:55:6d:73:b6:e3:b4:b8:a1:
d4:84:b2:92:ae:ad:08:b2:43:44:64:51:bf:7f:3b:
8e:f1:28:fe:c7:9d:ac:0d:02:4e:af:82:24:84:ba:
c3:fe:be:37:ba:b4:6a:71:39:28:ed:6a:30:05:2c:
05:69:5c:da:db:cc:3f:af:2e:6e:73:7a:2d:4b:51:
48:64:6c:ce:55:9b:0d:c5:dc:9f:d4:0a:a2:4d:03:
0e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:40:5B:2D:F5:B5:A4:7F:49:79:E9:02:36:4B:03:26:E8:4B:21:4F
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/k0BbLfW1pH9JeekCNksDJuhLIU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.69.96.0/19
IPv6:
2a01:110::/32
Signature Algorithm: sha256WithRSAEncryption
72:44:d7:4d:7d:87:61:30:65:52:21:da:9d:d2:82:d9:60:f9:
89:98:76:32:96:e2:9c:a4:77:58:cf:2e:9e:c0:5e:90:28:b3:
f7:fa:12:2c:e1:7d:9b:29:a0:0d:ec:83:b7:83:7d:d5:a3:ff:
1c:e6:c1:88:30:cf:8a:7b:7b:26:43:40:e1:96:c9:d5:1d:85:
2b:84:6d:8f:ff:88:66:24:49:16:6e:34:5f:a3:d6:b6:98:d0:
bb:43:b6:65:d2:7b:ea:66:2c:e6:73:84:82:14:c7:e9:e1:b1:
1c:63:82:56:8c:b8:9e:70:ad:d9:ce:03:c7:20:83:5f:e5:bc:
c4:eb:37:2b:11:53:98:0f:4f:8f:68:3b:c3:4c:04:62:e3:0e:
c4:a6:1d:ce:11:33:fb:60:c7:4e:ae:dd:8e:ea:94:2f:b9:91:
57:9e:5d:fc:72:bd:73:81:83:a7:58:00:b2:85:7e:a8:36:ef:
67:53:30:87:74:d1:aa:3e:0d:36:1e:7c:67:1f:7f:11:05:a6:
94:b1:f8:8c:f3:92:6c:15:68:63:9d:7c:51:ae:f7:54:c9:7e:
18:92:68:40:14:36:7a:da:11:39:57:e8:8d:09:e2:44:0c:38:
1a:67:eb:73:f0:b7:9a:d7:50:d9:5c:bc:bb:cc:71:6b:1b:1b:
9a:8a:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:47:57 2025 by rpki-client