Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/73c0jhSky3BnN0TXunRjeB--q1A.roa
File: 73c0jhSky3BnN0TXunRjeB--q1A.roa (raw, json)
Hash identifier: 1Lx5ICQYUA/HUXjaB+c1tYSpkcTCOv6g20/mLwIRufE=
Subject key identifier: EF:77:34:8E:14:A4:CB:70:67:37:44:D7:BA:74:63:78:1F:BE:AB:50
Certificate issuer: /CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Certificate serial: 0194266AB14A749DD72B52769F6EDEFD6084
Authority key identifier: CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/73c0jhSky3BnN0TXunRjeB--q1A.roa
Signing time: Thu 02 Jan 2025 09:48:33 +0000
ROA not before: Thu 02 Jan 2025 09:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 194.147.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:b1:4a:74:9d:d7:2b:52:76:9f:6e:de:fd:60:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd22b4ade0ed1d4d5328eae5f38a58be953f838
Validity
Not Before: Jan 2 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef77348e14a4cb70673744d7ba7463781fbeab50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:c2:34:a5:6f:3c:02:e8:ba:56:12:ea:53:
f4:8f:57:d5:30:3c:cb:a6:31:e4:ca:18:c9:ef:3d:
c7:cf:d6:65:f3:5f:49:d4:97:46:78:57:03:00:7b:
3b:82:e9:4a:16:6c:6b:bf:74:a0:a4:df:f6:99:1d:
67:b9:06:d2:fd:4b:32:3d:0c:a1:ff:50:83:5c:d8:
ef:39:18:f2:4a:01:d1:94:9a:b5:6c:76:f2:86:91:
85:a7:fc:c0:b3:eb:ce:f6:f5:e2:d5:54:66:99:be:
ea:dd:b7:c9:a3:92:b2:b9:f5:58:08:d3:4e:50:ec:
1f:48:0a:c0:1d:6e:e4:6b:00:1e:d7:fd:d9:13:06:
27:22:cc:24:5b:54:b9:35:90:a8:a7:27:73:12:7c:
95:74:ac:fc:d2:5e:9a:9e:81:a7:18:3b:33:af:bd:
c2:14:98:09:96:5c:77:41:6d:d9:5a:4d:90:01:87:
3f:06:1e:6f:37:32:ce:a1:56:e0:83:ab:d8:94:1c:
0f:8d:36:47:35:1a:c1:47:60:b4:ba:19:ae:f9:4e:
11:9f:69:33:84:4d:51:f8:8d:e6:85:18:7c:db:2e:
cf:5d:0d:49:37:69:b2:4f:9d:fa:39:49:4f:48:0d:
07:f6:02:52:cf:c2:ac:74:9f:f1:33:37:8a:49:d4:
d2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:77:34:8E:14:A4:CB:70:67:37:44:D7:BA:74:63:78:1F:BE:AB:50
X509v3 Authority Key Identifier:
keyid:CB:D2:2B:4A:DE:0E:D1:D4:D5:32:8E:AE:5F:38:A5:8B:E9:53:F8:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9IrSt4O0dTVMo6uXzili-lT-Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/73c0jhSky3BnN0TXunRjeB--q1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/95ba80-0751-4cb9-8cb4-29f334e11a19/1/y9IrSt4O0dTVMo6uXzili-lT-Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.102.0/23
Signature Algorithm: sha256WithRSAEncryption
30:dd:83:d9:23:05:87:87:5c:06:b6:3a:b7:4b:56:fa:57:17:
38:0d:13:df:2e:8b:dd:da:41:9d:0a:43:19:46:c3:ae:05:d8:
af:5c:e6:36:10:83:ec:77:98:80:8e:9f:c5:0b:c2:ca:13:43:
bc:67:97:75:b7:ff:06:90:76:f3:a8:57:e2:b2:3a:3a:ed:a5:
cd:ab:e0:4e:39:a5:71:9c:42:6d:13:72:e0:10:e8:91:c2:d8:
e2:ff:ce:6f:80:1c:5d:f1:cc:23:d9:68:3d:44:7e:34:79:ec:
de:1c:48:30:48:18:27:d5:a9:a3:c3:a5:16:df:bf:68:ba:5b:
44:da:17:66:4b:78:2d:f9:65:8f:ac:06:29:e4:02:53:db:44:
4e:d5:4a:c0:40:eb:56:b1:b1:5a:a9:ff:8e:e4:1d:c4:d2:39:
25:0a:63:23:4b:e3:e3:9f:f8:c4:97:97:94:93:db:f4:5b:4a:
fd:68:3a:8f:98:b8:55:4a:f2:89:31:6d:12:f9:d2:1d:da:6f:
53:56:85:58:db:8a:77:06:97:d5:ba:d0:56:02:c1:03:74:e1:
cf:c7:41:ff:90:99:f1:41:a2:fb:24:2a:eb:61:4a:72:4c:23:
65:2c:79:e4:e1:bf:28:23:e7:4b:b6:49:a8:80:7f:27:4d:11:
69:ca:89:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:34:53 2025 by rpki-client