Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa
File: A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa (raw, json)
Hash identifier: lE06Mjh97LJaUQ/w1auWux3C8TovlUNXB3RO85AG9OU=
Subject key identifier: 03:4F:FD:07:D2:16:03:83:81:0E:7D:D5:BF:76:22:AB:29:94:7B:C7
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143BF15B8EAA8EB1722BBAB8D846207
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203508
IP address blocks: 194.181.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bf:15:b8:ea:a8:eb:17:22:bb:ab:8d:84:62:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=034ffd07d2160383810e7dd5bf7622ab29947bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:62:e2:56:00:05:6e:4f:e7:fa:eb:be:6d:
de:4a:e8:dd:1a:2d:11:d2:f8:08:9b:54:3e:14:72:
1c:e7:bc:8f:0c:2a:fa:fa:f1:ab:39:c0:bd:c4:a9:
2c:2d:55:76:11:68:1c:f0:1e:b5:83:c7:1c:6e:99:
ab:c3:1a:8e:49:12:39:40:f2:7d:0f:cb:c3:2c:71:
f7:60:19:51:78:a9:71:a8:15:a6:cb:36:e3:94:46:
1f:c8:ac:b4:97:02:91:a9:02:73:df:78:db:36:ed:
d0:03:fe:c8:2a:df:68:fd:1c:0d:d7:b4:6e:86:6e:
26:d8:0f:bf:7c:8e:ea:1f:d2:79:e6:bc:20:25:49:
62:d8:75:87:df:dd:c0:95:82:07:8c:9e:1d:d6:d4:
22:f6:8c:e4:e0:a0:9d:dd:8f:40:83:5f:27:6b:21:
1e:ee:7c:d2:44:c5:63:93:b5:af:0f:30:a5:f7:51:
a8:cb:0d:44:8a:bf:f2:cf:40:1f:1c:b4:0a:58:10:
52:d8:b4:4c:0f:ff:be:a1:3f:75:2f:47:82:3a:a6:
6d:6b:8a:3b:4e:ab:79:57:f1:d4:dd:92:a5:c0:34:
fa:55:e5:18:73:78:67:c3:98:6d:56:5e:bd:4d:ca:
9f:f2:d1:7a:77:c3:16:10:c8:a8:54:83:3a:ec:ae:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4F:FD:07:D2:16:03:83:81:0E:7D:D5:BF:76:22:AB:29:94:7B:C7
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/A0_9B9IWA4OBDn3Vv3YiqymUe8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.181.45.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:23:2e:5a:2b:f5:7d:76:67:1f:cf:aa:93:cc:10:a4:c9:3c:
31:43:14:a2:a6:c6:18:28:93:e8:88:9a:d0:29:8a:00:c3:cb:
2a:9a:b2:28:6d:3e:92:3a:9d:1d:25:a6:16:2d:c8:84:70:f5:
c4:c5:91:45:d2:d5:d9:c3:45:60:0c:a9:a1:d6:bb:58:ca:6e:
01:7e:46:5c:73:31:dd:e5:6d:61:02:e0:4c:2d:31:3e:9f:20:
a2:30:f1:bc:48:60:ba:a8:5d:0d:f2:a4:c8:0f:f4:ee:8d:b0:
7d:f6:b3:d4:49:d8:49:b6:72:78:b7:b4:81:47:a7:6b:ae:ba:
04:4c:ea:05:3c:a1:79:65:6c:93:32:9d:c2:4c:f9:f9:a9:92:
38:f0:b4:34:7a:d9:b4:a4:2e:fc:ac:c6:04:7d:28:6e:97:47:
1b:63:36:30:01:13:71:a6:c4:09:dc:01:98:21:a9:78:6e:49:
f5:f9:95:e8:45:56:41:31:cd:4d:fe:fe:26:f7:40:67:65:ac:
2c:5c:64:d8:4d:3e:12:64:0f:7b:2f:f9:8a:f1:fc:a1:d5:54:
f2:90:47:47:62:77:3a:c9:fc:f3:79:29:39:78:30:6a:8b:64:
18:ef:db:54:57:71:51:d2:80:c5:10:9b:d5:e1:ad:d5:2e:d1:
a9:d8:23:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:30 2025 by rpki-client