Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/R3FUUn8Ru-orSOzP2hi1LWxio3k.roa
File: R3FUUn8Ru-orSOzP2hi1LWxio3k.roa (raw, json)
Hash identifier: S6dbhcFF7EciCO5Xo4fS+G2Rem85bnwNoAT+zV6Q6MI=
Subject key identifier: 47:71:54:52:7F:11:BB:EA:2B:48:EC:CF:DA:18:B5:2D:6C:62:A3:79
Certificate issuer: /CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Certificate serial: 0565B916
Authority key identifier: CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/R3FUUn8Ru-orSOzP2hi1LWxio3k.roa
Signing time: Mon 18 Apr 2022 03:29:24 +0000
ROA not before: Mon 18 Apr 2022 03:29:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 142111
IP address blocks: 194.50.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90552598 (0x565b916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefff6ae51ea2a679f745fd8cc3984315e57299b
Validity
Not Before: Apr 18 03:29:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=477154527f11bbea2b48eccfda18b52d6c62a379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:02:0c:a1:ab:23:6c:8d:6f:f2:72:60:0c:5d:
50:28:db:b0:29:21:6e:7f:6b:16:32:b9:d5:df:e0:
fc:44:0a:89:f4:70:d4:41:56:fb:51:f4:c8:d0:8b:
3a:5a:08:5b:d5:8f:33:a7:3b:63:4a:bd:c4:a8:8c:
0d:1e:ea:e1:39:8e:ad:ec:38:64:76:67:62:48:a7:
8a:50:5f:a9:d1:02:d5:cb:e4:df:99:97:d2:24:53:
7c:52:60:8a:ad:e3:b9:63:9f:b8:1e:9a:9e:77:1b:
f5:28:be:b3:ff:5d:30:de:e2:f6:bf:7d:a6:c0:b6:
d0:be:1a:49:90:6a:2c:68:c3:cc:41:5c:da:f7:a7:
e2:86:8c:04:d9:c5:a1:57:a9:09:91:81:20:44:82:
8d:7c:0f:e1:4d:5b:c3:69:53:79:a9:99:d7:ab:76:
a7:28:69:94:b8:7e:10:81:49:e9:5c:48:d8:bf:fb:
4a:a2:5e:43:8e:9e:31:0a:35:ee:41:12:6d:a9:f8:
39:1f:b9:6e:17:93:70:62:d3:1a:6e:1a:a5:25:bb:
98:bd:ff:49:09:8f:01:21:59:fa:68:0c:c5:98:8a:
9f:76:68:40:d3:b8:5f:2a:ce:d2:59:f0:a0:f8:83:
91:cb:b3:1a:d2:1d:ea:4d:bc:50:6b:ba:b8:11:c6:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:71:54:52:7F:11:BB:EA:2B:48:EC:CF:DA:18:B5:2D:6C:62:A3:79
X509v3 Authority Key Identifier:
keyid:CE:FF:F6:AE:51:EA:2A:67:9F:74:5F:D8:CC:39:84:31:5E:57:29:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zv_2rlHqKmefdF_YzDmEMV5XKZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/R3FUUn8Ru-orSOzP2hi1LWxio3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce8619-0b3c-4d15-bd7b-c0e72e2ab802/1/zv_2rlHqKmefdF_YzDmEMV5XKZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
71:12:04:90:ba:b4:3c:65:d7:65:4c:e8:fe:f8:82:56:f7:44:
ed:a1:80:08:1b:cf:56:4f:68:58:78:0c:79:4e:4e:17:03:92:
1f:53:a9:9b:02:52:a9:84:35:d9:78:ec:9f:5b:f4:ad:68:42:
7f:b9:fd:ee:d4:b6:04:01:58:a8:7c:cc:d0:c3:e6:d1:77:64:
54:07:59:d4:1f:67:82:23:d8:2d:a2:ea:2a:4b:48:da:5b:d9:
56:42:0f:e8:45:71:bd:69:9a:22:ad:e6:b0:8b:01:80:85:46:
4c:92:5e:07:5c:0d:c0:ef:8b:d1:da:7e:d6:66:42:26:54:dc:
71:d9:c4:a2:c9:8f:cd:77:70:21:04:db:15:ec:47:3a:39:70:
d1:9c:e7:1e:3c:60:04:92:ab:88:05:99:74:3a:54:7d:c7:29:
2a:64:c7:44:63:9f:55:76:8d:16:0b:96:29:10:77:c9:63:8b:
95:de:61:a0:5b:4a:17:06:86:68:be:d7:3f:a1:f8:1e:9d:05:
2f:9f:a5:a9:48:0d:bb:7e:37:94:b9:87:9e:53:e9:5f:d2:01:
33:42:fb:8a:25:e6:6d:e1:13:5d:a8:60:7d:0b:13:97:ca:23:
02:a7:a1:0b:11:cc:5a:bc:4d:b3:6a:4a:2e:1a:24:b8:fa:3f:
6f:26:4b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:57:36 2025 by rpki-client