Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/D-Xj-E8a8KpGmRlH8BwGif1kmI0.roa
File: D-Xj-E8a8KpGmRlH8BwGif1kmI0.roa (raw, json)
Hash identifier: 7cRbUgZAzkqORhvBRcVH2i2M6t3Q6qZCnPwfq5AZPQw=
Subject key identifier: 0F:E5:E3:F8:4F:1A:F0:AA:46:99:19:47:F0:1C:06:89:FD:64:98:8D
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143BE57B8949EC2B82E28E9C9DDBE3B
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/D-Xj-E8a8KpGmRlH8BwGif1kmI0.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202854
IP address blocks: 194.181.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:be:57:b8:94:9e:c2:b8:2e:28:e9:c9:dd:be:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0fe5e3f84f1af0aa46991947f01c0689fd64988d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:8d:6b:9a:05:e3:57:bb:67:8e:16:7e:ca:
46:83:d0:2b:6e:dd:19:3c:c7:1e:4a:45:cb:7d:3a:
c6:ec:d2:89:73:9b:e9:97:fd:31:55:43:48:cd:b4:
1f:b7:5f:83:23:14:de:f0:c8:3a:42:b6:c5:39:fa:
df:a7:83:9f:ca:6f:55:12:f5:9b:41:e7:98:7f:a8:
e7:08:02:58:8a:36:49:d3:ee:7f:93:e7:14:bb:1b:
61:44:a0:ad:f8:b2:45:f7:7d:48:df:78:03:a5:6f:
06:fe:ba:27:9d:0b:a9:fd:c7:97:7b:9a:81:7a:69:
bd:74:06:f2:a5:e2:48:d0:8a:54:f1:34:4b:fc:6f:
8b:8b:78:29:19:c2:16:c1:28:a7:c6:b5:75:92:66:
3a:74:6c:43:e0:ab:43:24:c0:f3:74:c8:23:da:c4:
83:d1:d8:d6:94:e2:2d:14:d2:44:51:c6:80:96:2d:
17:91:61:c4:65:d5:c9:a2:9a:de:fa:d5:a6:19:e3:
48:58:b0:83:b9:1e:ec:60:e3:16:f7:04:d6:16:a0:
29:6a:0f:8a:df:50:5a:70:b0:28:4b:2f:96:a6:e4:
c8:58:da:49:52:37:a1:a5:64:a9:66:bb:77:dd:86:
a2:c2:70:a6:1b:1c:0c:53:10:e1:10:01:9f:0d:27:
4e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E5:E3:F8:4F:1A:F0:AA:46:99:19:47:F0:1C:06:89:FD:64:98:8D
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/D-Xj-E8a8KpGmRlH8BwGif1kmI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.181.67.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3c:ce:7a:c5:93:ff:3a:64:1e:08:78:df:f8:d1:2a:73:c7:
4c:1b:20:4e:ed:e5:b1:ff:44:0f:95:37:98:76:bc:c3:95:9f:
09:ab:6a:de:ac:a5:aa:11:f7:5e:10:9e:6a:c0:96:39:bb:0f:
68:12:00:3d:4c:9c:2c:28:79:3a:85:f4:d4:89:44:77:19:04:
f0:db:77:f3:82:87:b1:60:23:92:2c:f7:86:ec:c7:74:ab:79:
58:9e:4a:ae:76:f7:28:fe:9e:f3:3c:a9:36:58:07:d9:62:1d:
3e:21:26:1c:e1:45:ff:84:2c:20:b0:e8:cc:d1:66:5a:56:c4:
a5:60:60:c6:8b:de:eb:c2:d1:35:70:be:77:ff:7a:ec:fb:2c:
8b:f7:07:ff:2e:be:17:5c:15:2b:24:ef:f6:0e:be:62:fb:30:
56:33:ca:c4:42:f5:11:cd:3f:4c:5b:b7:8e:99:a0:06:2d:38:
3c:bb:9b:6e:7b:76:60:ab:de:1f:e0:20:58:e9:81:9a:10:c3:
44:32:6e:e2:af:23:78:0a:c1:da:c7:80:4c:fa:ab:b6:39:09:
83:c5:a8:7d:35:39:2c:bb:76:b6:5c:a8:2e:c2:94:f8:f6:a9:
9e:cb:ab:92:d9:8b:b1:14:c1:7e:f9:57:2f:1e:40:e9:39:07:
a0:a2:fe:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:54:43 2025 by rpki-client