Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/ccRftpql5fjXlNV0NylDd4KOG5c.roa
File: ccRftpql5fjXlNV0NylDd4KOG5c.roa (raw, json)
Hash identifier: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=
Subject key identifier: 71:C4:5F:B6:9A:A5:E5:F8:D7:94:D5:74:37:29:43:77:82:8E:1B:97
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019426D961C68462EE70312DBF33389E8D66
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/ccRftpql5fjXlNV0NylDd4KOG5c.roa
Signing time: Thu 02 Jan 2025 11:49:27 +0000
ROA not before: Thu 02 Jan 2025 11:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214186
IP address blocks: 194.67.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:61:c6:84:62:ee:70:31:2d:bf:33:38:9e:8d:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71c45fb69aa5e5f8d794d57437294377828e1b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:9d:26:7d:ac:91:e0:4c:74:a9:ed:54:fb:
2a:79:02:75:41:94:12:cf:ce:95:bc:80:c5:10:34:
66:52:49:ee:ca:30:4f:27:cd:3d:b3:3e:d9:32:96:
ad:6a:b1:d5:12:b3:33:1e:1f:e2:51:99:e4:f7:27:
fa:08:1f:8f:b7:2e:9f:7b:38:4d:f2:15:b3:83:7d:
93:d1:0d:1d:48:70:f1:d4:14:60:e7:43:f2:70:4d:
8a:0e:6a:04:ae:ef:8d:0a:a4:54:2b:60:a7:77:16:
63:43:0e:3c:e9:b5:24:93:1c:be:09:2d:81:79:e5:
2e:8e:13:14:f9:24:ed:0e:dc:51:75:7a:98:3f:ea:
01:d3:af:37:db:25:c9:11:c3:bf:8b:d7:1c:81:0e:
31:38:c8:72:ab:d7:e7:9a:89:bf:e2:00:9e:27:cf:
2f:93:09:c4:25:5a:90:69:2d:18:5f:10:61:85:7f:
3d:9f:1e:c4:a3:18:0c:53:16:fc:68:87:a5:80:3e:
6f:24:19:31:eb:db:91:32:d5:e4:72:3f:96:dc:b9:
6c:97:be:15:e2:d0:ef:39:cc:49:46:0e:24:05:fa:
39:00:bd:5f:68:78:33:5c:4f:be:74:11:36:bd:9c:
9a:87:d5:d9:36:10:44:e4:9d:54:a3:6d:3e:f6:29:
ee:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:5F:B6:9A:A5:E5:F8:D7:94:D5:74:37:29:43:77:82:8E:1B:97
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/ccRftpql5fjXlNV0NylDd4KOG5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.95.0/24
Signature Algorithm: sha256WithRSAEncryption
44:81:db:8f:37:fe:b1:93:33:d3:40:1b:62:f9:28:06:8b:77:
39:67:57:54:90:1b:91:69:ea:3d:7e:69:ab:98:95:69:e1:02:
78:4e:76:f8:89:df:52:f0:ec:80:02:ca:f2:9b:2a:77:f0:86:
c0:69:a0:18:4b:91:26:e5:d3:85:d1:e1:fc:28:97:c4:2c:3a:
e3:9c:ca:09:0c:b5:11:c7:51:29:24:75:6f:9c:43:21:46:f0:
92:c6:17:2d:29:6b:b6:6c:9e:84:69:a9:6d:a2:50:59:10:5d:
28:ba:3a:42:2c:90:92:11:a0:b3:ad:05:fa:d4:c1:0d:a5:7d:
f3:1c:61:5a:85:19:aa:90:11:73:58:7c:dd:d2:dd:95:7b:f3:
88:f4:cc:0f:a8:ec:ec:6a:22:ac:0e:8a:d1:28:d4:c2:a2:64:
66:53:03:62:0f:6c:19:fe:72:74:ce:2e:b0:2f:c1:bb:ca:f4:
fc:95:77:b6:5d:63:77:69:36:b0:d1:c4:ea:7b:66:ba:b0:43:
a6:50:94:5d:79:32:37:3f:00:15:7d:00:6f:34:a7:3b:e6:58:
e2:b3:ac:cc:2c:c1:aa:49:6e:f8:b9:31:5e:91:0e:7e:30:bc:
d0:5b:e7:55:6b:a0:3c:20:df:7f:54:00:d3:5a:cc:dd:3d:e7:
40:c7:fe:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:35 2025 by rpki-client