Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/T9CFmZsnzZBuWIxvDPFfMl-j6kU.roa
File: T9CFmZsnzZBuWIxvDPFfMl-j6kU.roa (raw, json)
Hash identifier: +Kv+aOKN9xvqB+XT8JoyPSObcjeukQNR0v4WkLhj85U=
Subject key identifier: 4F:D0:85:99:9B:27:CD:90:6E:58:8C:6F:0C:F1:5F:32:5F:A3:EA:45
Certificate issuer: /CN=48ad86cff11670ab3c69a8b6e050403733aa30ef
Certificate serial: 01856F6FFB981AB230A7A2EB4B80AF0BC451
Authority key identifier: 48:AD:86:CF:F1:16:70:AB:3C:69:A8:B6:E0:50:40:37:33:AA:30:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SK2Gz_EWcKs8aai24FBANzOqMO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/T9CFmZsnzZBuWIxvDPFfMl-j6kU.roa
Signing time: Sun 01 Jan 2023 22:24:47 +0000
ROA not before: Sun 01 Jan 2023 22:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 194.26.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:fb:98:1a:b2:30:a7:a2:eb:4b:80:af:0b:c4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ad86cff11670ab3c69a8b6e050403733aa30ef
Validity
Not Before: Jan 1 22:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fd085999b27cd906e588c6f0cf15f325fa3ea45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:1a:07:ab:fe:fd:39:1e:6f:57:49:4c:aa:
91:08:ec:05:81:8f:ab:5a:24:96:8e:70:6c:81:7b:
79:9a:c1:44:98:6d:1f:bc:0c:1a:c0:63:b5:a7:c5:
a2:85:99:fa:d5:92:91:75:9b:f3:30:79:5c:f2:90:
37:f8:77:02:5c:79:8c:d5:23:75:df:4c:e6:8f:07:
0d:a8:1f:77:07:19:0a:cf:2d:ab:b9:31:42:58:d8:
b3:f8:2e:c2:61:57:af:b2:6e:90:6a:ae:8d:5f:f1:
6b:99:a0:4a:6a:29:6c:c9:9e:1d:22:7e:83:75:af:
2a:d3:5a:c8:73:07:ea:5b:aa:5e:2b:21:c1:8b:c2:
7c:92:6e:10:d5:e1:bd:71:c2:f1:26:10:8b:6f:78:
5e:80:e4:09:60:27:30:cc:f9:02:ce:1c:ed:1b:75:
12:8a:f3:ed:3a:10:ed:67:6b:a0:6b:e2:11:60:7d:
b8:cd:eb:7d:ae:db:b6:bc:54:bb:22:1f:38:d2:88:
c5:e3:38:85:19:8f:c1:d9:40:30:c7:f8:11:e1:b0:
d1:d2:0e:73:19:58:4c:e8:9d:b9:08:fe:0a:bf:c9:
b9:4f:78:2e:24:8e:c3:a5:1c:68:10:c3:4c:3d:4f:
85:30:f2:74:6d:03:00:d0:4e:5d:67:ac:47:57:c5:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D0:85:99:9B:27:CD:90:6E:58:8C:6F:0C:F1:5F:32:5F:A3:EA:45
X509v3 Authority Key Identifier:
keyid:48:AD:86:CF:F1:16:70:AB:3C:69:A8:B6:E0:50:40:37:33:AA:30:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SK2Gz_EWcKs8aai24FBANzOqMO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/T9CFmZsnzZBuWIxvDPFfMl-j6kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eeff86-5c22-4ed3-9a28-5ce0912cabdd/1/SK2Gz_EWcKs8aai24FBANzOqMO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.224.0/24
Signature Algorithm: sha256WithRSAEncryption
90:da:cb:48:d6:35:aa:2b:d8:02:e7:43:d6:40:d4:96:c6:64:
72:3e:eb:cc:8e:49:9a:c2:32:4b:81:76:7f:e1:9e:49:06:4b:
a2:15:77:36:68:2c:35:05:6a:7e:23:4b:56:91:f9:3c:bb:b5:
c3:79:f4:3c:e4:46:5e:38:43:2e:64:4f:7a:6e:7e:71:77:0c:
5d:e5:e8:d5:a4:00:eb:7a:08:13:0c:06:25:59:3a:3c:6a:40:
d4:a1:d2:c9:bd:eb:9a:05:1a:5e:3b:6b:c7:3c:68:04:3b:80:
1d:f3:a0:a0:ed:e1:c9:78:40:46:d8:ce:9b:c1:26:2f:5a:14:
e5:dc:b4:44:49:3a:28:b8:e7:3e:df:fd:00:e5:59:42:5a:ea:
7f:37:60:91:e2:77:36:36:8e:50:29:c4:f6:7f:33:2f:7a:be:
fd:e1:cc:86:eb:e7:65:93:71:cc:cc:ba:24:f1:b8:79:36:a4:
db:f4:fe:ce:d4:f1:f4:5f:00:90:01:ec:cc:34:35:19:25:20:
96:49:03:cf:da:60:4a:c6:48:92:b0:a7:9f:49:b0:f0:37:ef:
95:ff:00:a5:60:eb:a3:01:5f:87:eb:e0:45:d2:c8:46:c5:b2:
37:95:e3:99:9c:81:cb:17:5c:c6:b4:3e:4a:3c:39:30:f8:d7:
58:e5:69:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:34:49 2025 by rpki-client