Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/25mILoXp0OOdl2rnLxiFEgTLBos.roa
File: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (raw, json)
Hash identifier: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=
Subject key identifier: DB:99:88:2E:85:E9:D0:E3:9D:97:6A:E7:2F:18:85:12:04:CB:06:8B
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019423D6F5C81A3B6BDDBFCEC7ACBEF33C10
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/25mILoXp0OOdl2rnLxiFEgTLBos.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 194.49.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f5:c8:1a:3b:6b:dd:bf:ce:c7:ac:be:f3:3c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db99882e85e9d0e39d976ae72f18851204cb068b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:96:3f:1d:4f:fd:64:7f:a6:92:28:65:69:
37:b5:cb:8f:5a:98:8f:50:85:d3:25:3e:e5:5a:ec:
df:b9:8d:b3:c0:22:0d:a3:0e:c6:b8:c0:1c:da:14:
61:dc:53:b2:e4:07:72:88:4e:15:f4:9c:30:07:93:
29:48:52:71:ee:bb:28:a0:9d:ad:3b:fe:96:fa:03:
58:ad:97:c2:0a:1f:6b:9d:52:d3:98:da:c9:96:6f:
0e:2e:c9:13:05:56:b9:ec:30:dc:42:e2:a7:b4:24:
52:6f:ae:b7:4d:cb:9e:a4:22:4c:57:2c:f2:f6:90:
5d:a5:3c:af:bb:51:27:64:de:fe:04:ea:83:c0:93:
c9:66:69:30:0a:c8:72:4f:94:7b:f5:53:86:fe:33:
84:58:55:b2:35:e6:a5:40:81:61:1f:a4:bd:a4:b1:
1f:da:0c:2c:54:1f:b1:2d:08:4f:19:5f:24:3b:67:
b9:62:e6:a3:da:e1:f4:f7:34:c5:d3:be:29:8e:59:
66:3e:39:c5:cc:97:e5:14:80:52:9e:72:8d:ee:1b:
07:f1:4d:f7:5c:b8:ec:38:48:d2:c6:d3:0d:b0:5e:
87:90:7d:43:bb:8f:71:c6:e9:be:1f:7d:a3:d0:2d:
ca:60:ff:92:71:68:31:83:49:5f:64:08:db:18:fb:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:99:88:2E:85:E9:D0:E3:9D:97:6A:E7:2F:18:85:12:04:CB:06:8B
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/25mILoXp0OOdl2rnLxiFEgTLBos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.206.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5a:2b:e7:7d:e4:77:68:98:3b:d0:2d:af:36:6f:7e:7c:a4:
0d:2e:9c:e4:72:7a:dd:08:e9:07:b6:1d:67:73:21:c2:25:53:
82:13:f2:af:98:0e:c4:94:6f:d2:c4:9c:3a:58:d5:cb:cc:ce:
31:e8:33:cc:56:8a:2f:1d:44:21:74:90:90:b6:50:b8:fb:71:
d4:f5:8b:96:37:c5:a7:d4:86:38:b3:c2:d1:0d:99:41:65:2c:
4d:33:2a:67:7c:cd:b3:4c:76:ae:44:d7:08:fc:86:0e:27:75:
71:7f:b0:6f:15:f2:0f:67:07:49:04:ae:94:13:77:12:b3:d5:
f8:15:46:0f:57:ee:f8:c3:8a:f6:f0:c6:96:bd:05:8c:3d:ae:
bf:be:29:62:2a:b9:dd:61:72:92:1e:e9:58:b3:2c:e3:48:71:
c6:d8:91:0c:01:83:a7:68:a4:5d:9b:c6:6e:64:bd:9e:a8:c9:
5f:0c:50:f7:e6:7b:d3:27:9c:0f:0d:5b:f1:2c:c6:42:08:6c:
71:67:74:18:94:b3:8f:95:21:04:10:ee:a2:a1:c6:14:f2:4d:
ce:d9:19:ce:5e:9a:f3:df:c5:e2:e2:eb:30:0b:33:76:8a:21:
e0:b8:2b:71:b6:24:2d:8c:87:1f:f5:ba:50:12:1a:54:71:84:
1e:f2:59:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:33:52 2025 by rpki-client