Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa
File: 1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa (raw, json)
Hash identifier: ZowUiRFYv0ZOu5pI167992U5kyXST8eznpl9k++Lgik=
Subject key identifier: FB:7A:E8:34:CF:D8:E0:BB:B2:A3:95:0E:90:33:92:36:40:96:D1:30
Certificate issuer: /CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Certificate serial: 0194282846A559409A13AF0B1A7D1212F145
Authority key identifier: 12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa
Signing time: Thu 02 Jan 2025 17:55:15 +0000
ROA not before: Thu 02 Jan 2025 17:55:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207553
IP address blocks: 194.9.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:46:a5:59:40:9a:13:af:0b:1a:7d:12:12:f1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1246f23a048763aa3ad0aede5a489ab8fcd26384
Validity
Not Before: Jan 2 17:55:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb7ae834cfd8e0bbb2a3950e903392364096d130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:7b:d5:04:0f:e4:0c:bf:f0:af:06:d6:35:
49:db:86:2e:13:d0:01:cd:e4:10:9f:0c:c8:6f:11:
f7:bf:3b:ca:d9:82:90:15:58:96:d4:92:ac:69:d3:
17:42:ea:5c:5b:07:a0:a2:28:c4:55:55:f0:af:e7:
25:a7:49:0e:fd:8e:43:53:c7:01:64:19:6d:68:9f:
1a:e9:62:1c:4a:c3:12:f5:09:48:62:a1:66:69:30:
3f:cb:70:6d:a0:45:2c:75:79:58:15:55:a5:67:03:
eb:dc:e3:83:d1:da:3e:cf:b0:97:08:b2:82:0c:c8:
9e:26:d7:9b:a8:ba:c1:8f:0d:39:90:54:32:d4:8a:
1c:a5:f8:82:4a:c6:3a:90:4f:42:c4:45:c0:cd:03:
4d:bc:77:ba:52:c1:41:d5:86:1c:24:33:d0:72:90:
ef:87:48:ed:93:31:c4:a8:a7:a2:68:ea:65:fb:99:
15:5c:12:d8:27:df:6a:3c:0c:55:fb:90:42:39:5d:
da:10:dd:66:e1:36:79:ce:f7:e0:5e:ae:2b:33:67:
06:d5:8a:cb:f6:b9:d5:e2:3e:64:9c:88:c7:6c:30:
26:63:08:16:71:21:75:6a:9a:3b:13:7b:f0:a7:fd:
a1:2d:d2:a4:a3:26:76:f6:15:ab:55:c2:a8:60:a8:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7A:E8:34:CF:D8:E0:BB:B2:A3:95:0E:90:33:92:36:40:96:D1:30
X509v3 Authority Key Identifier:
keyid:12:46:F2:3A:04:87:63:AA:3A:D0:AE:DE:5A:48:9A:B8:FC:D2:63:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EkbyOgSHY6o60K7eWkiauPzSY4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/1-3roNM_Y4Luyo5UOkDOSNkCW0TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/877e6c-325a-47ea-aa56-1096bfd6bf6d/1/EkbyOgSHY6o60K7eWkiauPzSY4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.191.0/24
Signature Algorithm: sha256WithRSAEncryption
26:2f:67:45:1c:f6:d1:33:2f:d6:f2:cd:07:3b:f2:32:dd:10:
b0:4f:87:ed:ca:68:d5:12:eb:4a:ae:83:19:61:cb:72:65:5e:
73:33:e8:03:67:13:54:bf:38:10:c5:f4:bc:ff:06:3c:bb:53:
b5:7f:79:e9:ce:98:d2:c0:82:9d:40:69:9c:a2:16:ac:c6:36:
7f:9a:76:71:e4:59:e9:b8:3d:b1:2c:31:78:22:fc:e8:40:95:
cc:9b:37:04:75:5f:23:47:c5:d8:b0:7a:47:8b:90:ea:20:ed:
33:f7:1f:ef:f2:02:57:6e:f9:12:0a:43:25:34:30:4d:5a:8f:
ee:86:71:22:2d:ea:d4:cd:8f:94:e4:4b:d8:88:39:69:0d:ff:
e1:c8:a2:6a:00:b1:64:20:5b:2f:64:c1:78:f4:11:f2:8d:0a:
49:87:d0:68:b8:45:51:fe:d5:e4:04:b4:a7:33:f3:f5:1e:3b:
d6:fd:08:d5:e0:8b:ad:5e:9f:20:bc:24:9e:a2:64:24:bf:99:
f2:0c:75:07:6e:e7:18:8c:55:01:a2:82:cc:51:9c:dd:45:1c:
65:68:70:3d:37:35:a3:db:0c:c9:6c:94:d6:c0:46:6e:99:10:
4d:26:52:a6:17:c3:a0:7e:67:a4:e2:3e:5e:9c:2b:3d:77:9b:
c9:c3:86:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:13 2025 by rpki-client