Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/loQfbpMkrF-8FHm8l3OiW-eTM6E.roa
File: loQfbpMkrF-8FHm8l3OiW-eTM6E.roa (raw, json)
Hash identifier: u9sgxZASXDE+M+FEbB4vnXmXUh6Lo2WySjfXfmuOY70=
Subject key identifier: 96:84:1F:6E:93:24:AC:5F:BC:14:79:BC:97:73:A2:5B:E7:93:33:A1
Certificate issuer: /CN=659a6b975eafd2ce51468723814355f56c55bafb
Certificate serial: 019427B5EB6AD2377B6B82CBD4B4766D00F6
Authority key identifier: 65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/loQfbpMkrF-8FHm8l3OiW-eTM6E.roa
Signing time: Thu 02 Jan 2025 15:50:21 +0000
ROA not before: Thu 02 Jan 2025 15:50:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15642
IP address blocks: 194.125.232.0/22 maxlen: 24
194.125.232.0/24 maxlen: 24
194.242.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:eb:6a:d2:37:7b:6b:82:cb:d4:b4:76:6d:00:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659a6b975eafd2ce51468723814355f56c55bafb
Validity
Not Before: Jan 2 15:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96841f6e9324ac5fbc1479bc9773a25be79333a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fc:93:f3:85:e2:32:fc:00:67:8d:2e:3a:bf:
a0:04:1a:0c:36:1e:e7:e3:b7:a3:92:7f:2f:c7:5d:
e6:20:09:a9:9b:fc:a1:01:09:9c:21:91:c4:3d:8c:
0c:0b:03:f0:b6:69:ef:02:6b:9c:7c:40:c0:94:62:
e6:69:a7:26:c7:72:9d:30:a4:d8:7e:cc:f6:a4:4c:
52:75:97:ff:33:0a:e1:36:8f:2b:f9:28:28:c8:26:
7a:1d:a0:b2:5c:84:16:61:9b:0c:d2:a6:7a:c2:0c:
e6:6f:55:a6:bb:ea:6f:5c:2c:78:50:64:90:6e:fe:
50:bc:75:8f:b1:0a:a8:91:a7:7a:69:1e:4d:fc:92:
9b:da:ae:d4:88:42:64:83:96:f0:2a:4c:76:15:9a:
76:f0:7a:53:5a:d7:2d:04:4c:c2:f7:ad:05:9a:2a:
4e:9c:f1:d9:c3:0f:e6:f9:49:2f:d0:99:52:7a:22:
23:57:d1:2a:6a:d0:6c:9a:22:38:96:35:10:2d:8f:
8f:a6:c5:5f:aa:fa:dc:c5:4c:f4:dc:4b:7d:cd:24:
51:cb:02:e8:7f:62:22:94:a5:90:0b:10:82:5c:e5:
c2:6f:60:b1:39:64:27:0c:2e:b5:b4:3a:78:3c:c0:
c9:44:44:ab:0f:ca:3c:72:1c:2f:10:f9:f6:55:ec:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:84:1F:6E:93:24:AC:5F:BC:14:79:BC:97:73:A2:5B:E7:93:33:A1
X509v3 Authority Key Identifier:
keyid:65:9A:6B:97:5E:AF:D2:CE:51:46:87:23:81:43:55:F5:6C:55:BA:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZprl16v0s5RRocjgUNV9WxVuvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/loQfbpMkrF-8FHm8l3OiW-eTM6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/170422-39ad-499c-bbfd-eff3cdcbd00a/1/ZZprl16v0s5RRocjgUNV9WxVuvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.232.0/22
194.242.32.0/24
Signature Algorithm: sha256WithRSAEncryption
52:fb:2f:cb:e5:6c:60:25:94:d5:bb:e9:d7:e2:15:04:d1:7a:
7e:41:33:7d:91:64:a7:bd:5d:ab:d4:98:a1:55:9b:18:7f:c1:
9b:14:9d:53:a6:ba:c3:60:4b:c9:44:70:eb:46:8d:71:9f:28:
40:72:7a:4d:d1:6a:7a:06:59:6b:6d:d5:04:4a:5e:bc:de:ee:
54:f9:88:69:39:1d:a8:ce:18:7e:85:c1:cd:7c:62:e4:ed:c7:
90:14:20:53:2b:61:cf:4e:4a:90:fe:98:f9:6e:bd:6e:3b:df:
e2:2e:4a:b3:a0:4f:87:6f:72:22:38:df:b2:6b:c9:78:5f:07:
c1:6c:69:dc:58:cb:d4:2b:61:5d:20:18:8e:99:ae:80:92:e5:
57:f7:bc:50:ba:e1:2c:ec:a4:fc:ce:b6:f1:6e:f0:e7:9b:fe:
4c:1c:00:d0:77:98:8a:2d:ee:7c:21:f1:a6:30:1a:a8:75:3a:
8e:96:2c:99:fb:3a:ad:2d:da:01:2a:33:82:83:ca:8c:97:98:
1c:28:0a:dd:81:67:21:91:ec:80:e5:8c:a2:b7:a3:b3:3f:14:
22:b0:85:44:ad:e0:67:28:09:51:d9:ee:2d:f7:9c:a0:b5:e0:
36:10:3e:54:c0:4d:4e:73:b2:d1:af:53:73:07:ae:b6:49:91:
9e:58:65:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:32:57 2025 by rpki-client