Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa
File: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (raw, json)
Hash identifier: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=
Subject key identifier: F5:47:C6:ED:97:EA:B2:7C:57:74:D8:CE:54:10:78:12:E7:C6:BA:25
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 0194266ADE73B4BE18F1D48E55137611933E
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa
Signing time: Thu 02 Jan 2025 09:48:45 +0000
ROA not before: Thu 02 Jan 2025 09:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2877
IP address blocks: 194.50.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:de:73:b4:be:18:f1:d4:8e:55:13:76:11:93:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Jan 2 09:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f547c6ed97eab27c5774d8ce54107812e7c6ba25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:a8:33:eb:83:e1:67:55:33:12:3d:48:5f:
25:3e:93:cd:34:2a:5d:ba:b8:01:36:d5:f9:37:a4:
21:e5:86:be:cb:26:9b:47:53:6d:38:37:25:98:9b:
48:ae:02:89:20:9b:d6:3f:6b:de:67:d0:79:34:fd:
bb:b9:70:0e:8f:c7:98:05:62:bc:fb:9f:66:50:37:
70:80:7c:38:a7:d7:c7:63:2b:92:1d:43:b1:99:f5:
c9:a5:df:4c:78:b0:04:7d:f0:05:84:bc:e5:f0:a1:
4b:82:ba:e4:72:59:22:19:5b:8d:68:a2:3c:0e:03:
ff:96:75:ba:a5:0b:ca:0e:f2:6c:1d:b1:27:aa:eb:
c4:31:a4:96:53:53:fa:45:3a:7b:8d:0d:ca:bc:5a:
3d:86:a2:74:58:e4:aa:36:da:07:f0:35:e1:d7:b6:
2d:be:5b:a2:b6:85:fe:d2:e7:58:89:5f:d9:b1:a8:
48:b4:8f:16:f3:76:eb:94:ad:5e:17:f9:98:0f:79:
58:40:4c:ad:18:4a:07:49:ab:3b:d1:01:e5:d1:db:
34:00:a5:0d:b4:8e:ce:02:5a:2b:eb:20:9f:d4:2f:
b9:2e:ec:11:7e:04:d1:2b:1e:14:6c:f5:cf:31:40:
5d:f6:15:24:8f:27:27:1e:94:2f:8a:8d:10:57:59:
2a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:47:C6:ED:97:EA:B2:7C:57:74:D8:CE:54:10:78:12:E7:C6:BA:25
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.105.0/24
Signature Algorithm: sha256WithRSAEncryption
56:8a:52:81:d5:2c:6d:c3:cd:e3:75:da:7e:be:9f:ce:7b:46:
47:2c:3e:11:ce:e7:95:30:7b:27:d6:a3:7f:26:47:10:ce:a4:
43:e1:26:66:af:ef:38:e8:44:ab:21:b7:d2:0e:98:82:98:1f:
fe:37:41:91:3c:f9:1d:e0:bf:0c:e3:70:cf:74:05:74:a2:a5:
c4:59:32:37:e3:7b:10:a9:13:a3:47:7c:2b:33:f3:bb:7c:0b:
16:50:92:3d:3e:35:b1:36:cf:02:0c:cf:af:64:83:91:95:9b:
9f:a0:c1:eb:46:6f:63:93:52:63:c3:6b:2d:5e:15:9c:de:05:
54:58:18:62:ba:cc:39:e4:ff:ad:fe:61:fd:1c:47:dd:f2:06:
58:f2:25:eb:e5:fb:b8:6a:f2:9f:6e:03:8f:e2:76:b1:e7:24:
24:e3:62:03:bc:6a:4a:66:5e:f6:5a:de:ac:59:01:8d:5f:de:
42:fa:d2:71:5a:0b:03:50:19:47:3e:77:e2:66:be:64:6e:e9:
b0:59:0f:d9:d3:7b:5a:9d:da:63:64:cd:1f:8e:6a:49:18:24:
35:3d:3a:f2:99:39:e2:33:38:fe:09:36:bb:ef:39:34:17:df:
a8:e5:4c:2e:d0:65:69:13:b8:8c:2a:9a:71:58:9d:12:86:65:
16:72:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:33 2025 by rpki-client