Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/007nvtWixZOugOaPC4TALuzRNpU.roa
File: 007nvtWixZOugOaPC4TALuzRNpU.roa (raw, json)
Hash identifier: nb2ffToXl9QEO/9H4On/CDRfMFNOM0eyZbkaz2nxsO8=
Subject key identifier: D3:4E:E7:BE:D5:A2:C5:93:AE:80:E6:8F:0B:84:C0:2E:EC:D1:36:95
Certificate issuer: /CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Certificate serial: 0194258FB9840DA48F350767D73EAB3F7D2C
Authority key identifier: B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/007nvtWixZOugOaPC4TALuzRNpU.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12389
IP address blocks: 194.38.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b9:84:0d:a4:8f:35:07:67:d7:3e:ab:3f:7d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8207697d0b7c24199e6dd1282b49b56cef0244f
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d34ee7bed5a2c593ae80e68f0b84c02eecd13695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:63:32:93:9a:df:1c:21:b6:c4:62:62:bf:c1:
21:89:8c:92:5a:18:68:2e:52:ab:02:0c:cf:3a:97:
10:38:43:f6:56:56:79:00:9b:ec:2c:dc:fc:cb:18:
e1:23:d5:e3:22:b4:4e:bf:65:6e:24:b2:33:82:9d:
ce:63:42:7d:19:f0:c4:74:2e:b1:f5:63:4f:df:68:
72:d4:b0:8a:24:bd:af:88:54:00:5d:dc:c6:5d:aa:
2d:38:7c:11:1e:91:12:9e:54:cb:e3:06:c8:67:88:
72:d3:e4:00:4e:f1:42:5a:07:9e:cd:5a:ac:08:92:
2d:7e:84:a1:9d:a3:9d:8f:d5:0a:85:80:08:15:22:
43:14:f0:35:c6:48:6a:e9:bd:e3:c4:86:65:12:24:
db:74:2a:7a:e9:be:f5:fd:da:91:52:fd:fe:ab:d3:
15:db:fd:46:e4:b1:b3:5f:ba:89:32:99:be:68:fd:
d3:ae:87:61:59:2d:d2:b0:40:dc:8a:f1:40:cc:82:
8d:30:2a:5a:8a:d2:a2:23:da:8e:58:a3:91:4d:4d:
7f:ac:ba:87:e4:b0:43:8b:d5:73:8c:89:77:d2:15:
f2:0f:ff:c4:75:52:b3:68:da:54:72:61:46:52:84:
fb:ec:c5:22:5d:46:cb:16:f1:9b:b6:42:1d:c9:27:
ab:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4E:E7:BE:D5:A2:C5:93:AE:80:E6:8F:0B:84:C0:2E:EC:D1:36:95
X509v3 Authority Key Identifier:
keyid:B8:20:76:97:D0:B7:C2:41:99:E6:DD:12:82:B4:9B:56:CE:F0:24:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/007nvtWixZOugOaPC4TALuzRNpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/b993ef-aaa7-400c-8db7-96d304c8db02/1/uCB2l9C3wkGZ5t0SgrSbVs7wJE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.9.0/24
Signature Algorithm: sha256WithRSAEncryption
45:03:15:71:45:85:71:33:6f:cd:9f:44:88:25:db:5e:b9:4c:
bc:e5:10:50:5d:fc:da:66:ef:a8:41:08:de:99:73:4b:5e:f9:
c0:a1:ac:3d:2b:cf:8b:51:78:e4:e4:84:01:d2:3f:29:0f:3b:
9e:c4:b6:fc:f3:d8:c9:d1:03:1d:e8:f5:a4:a0:71:53:12:0e:
09:a7:5f:ec:86:86:9a:f8:f7:cd:d3:c7:f8:33:be:a6:df:a9:
ab:90:c5:db:ef:b2:da:24:3b:32:52:63:8f:75:61:c7:ad:3e:
6a:64:d9:7c:a5:71:34:d0:bb:47:c7:f0:f0:77:5e:13:19:24:
d2:8f:7d:99:b6:58:af:f2:43:2b:90:15:c9:76:47:57:3c:88:
4c:4d:4c:7a:6b:23:71:be:1b:70:d5:68:6f:df:5b:22:a3:4f:
0d:9f:b6:9d:50:e7:33:ff:73:e4:56:98:bf:5d:e3:64:6e:e9:
dd:e4:c0:58:54:56:9f:69:9a:3b:72:05:77:6f:b4:a8:ce:87:
37:6a:18:83:c1:5b:7b:0c:8f:60:53:2e:95:ed:fa:51:1b:33:
cc:30:4a:73:82:59:03:c7:84:70:66:4f:7f:4d:0c:6a:9e:b5:
7e:3d:51:9d:0c:98:82:13:8e:c5:1d:fa:38:bc:10:68:65:d2:
5b:77:9a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:45 2025 by rpki-client