Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Pevz6EWQXEb5yVp9lKenzNIdBdc.roa
File: Pevz6EWQXEb5yVp9lKenzNIdBdc.roa (raw, json)
Hash identifier: qGmkuDrxspXM+mBcJKKqEwtYtBwpIYoUjNRrKJA7ruA=
Subject key identifier: 3D:EB:F3:E8:45:90:5C:46:F9:C9:5A:7D:94:A7:A7:CC:D2:1D:05:D7
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143C07C7C9FE274F204BE73BC8C180B
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Pevz6EWQXEb5yVp9lKenzNIdBdc.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207105
IP address blocks: 194.181.47.0/24 maxlen: 24
2001:a10:185::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c0:7c:7c:9f:e2:74:f2:04:be:73:bc:8c:18:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3debf3e845905c46f9c95a7d94a7a7ccd21d05d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:01:6c:20:cc:69:f3:f8:f6:ca:d9:78:16:
31:ae:2f:fc:cc:c3:12:ee:1a:69:3d:f4:5b:90:05:
4c:00:74:22:5c:80:fc:14:1f:f5:14:f4:25:ef:e5:
96:17:6b:47:4c:0d:99:c9:32:7d:df:f5:cc:43:cd:
a3:ea:02:03:7c:ec:83:fa:c2:05:c2:47:8d:d5:5d:
e5:93:59:4f:e6:b8:c0:66:2e:c4:59:02:16:62:08:
87:54:ed:8a:43:45:57:6d:57:7b:65:a5:80:28:10:
f7:d4:7a:59:65:12:3e:61:67:5b:1c:9d:54:f7:51:
e3:5b:c0:c6:39:14:b8:5e:cd:3b:f0:c7:c5:a1:a6:
d1:ca:9d:f8:72:3c:8a:ee:0f:75:15:8b:c6:42:17:
fb:e7:1f:28:3c:36:51:ed:3f:b2:e4:ea:93:98:ed:
d0:81:93:ea:47:23:a0:00:58:90:f7:e5:c1:f8:c3:
7c:b3:eb:94:01:d8:e2:9f:81:94:31:dc:3b:7d:04:
f9:d7:69:77:d5:6c:cf:7e:c2:23:03:c5:fd:6a:92:
8a:cc:15:30:b9:3c:e3:04:2c:c6:67:65:43:a0:65:
c7:a4:0b:ea:f0:b2:3d:ce:13:fb:42:24:39:32:4d:
20:0c:7c:d8:29:00:be:ed:44:b5:f4:c9:51:a5:5d:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EB:F3:E8:45:90:5C:46:F9:C9:5A:7D:94:A7:A7:CC:D2:1D:05:D7
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/Pevz6EWQXEb5yVp9lKenzNIdBdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.181.47.0/24
IPv6:
2001:a10:185::/48
Signature Algorithm: sha256WithRSAEncryption
69:c5:82:80:1e:05:9b:a3:b4:9c:00:48:2a:0b:77:07:c2:63:
7c:6c:9f:99:4c:88:1c:e7:62:99:c8:fe:c1:fb:b4:c5:28:d9:
fa:8d:cc:e6:2e:9c:38:5b:ec:59:48:57:80:55:e3:76:24:09:
78:fb:20:07:39:9d:b0:29:54:12:05:de:35:ce:ae:2a:a2:70:
5a:a2:bb:a9:b6:0d:f0:67:fd:35:18:84:d2:51:80:bd:8a:da:
a3:ef:b1:e5:67:41:9f:82:0f:e1:04:5a:cd:c2:07:61:0e:c5:
f8:46:ee:b4:dd:5a:24:10:d3:25:04:76:5b:a4:ef:7a:a6:d8:
a2:ed:fe:03:fb:7f:51:27:ca:d7:9a:93:3a:4b:98:94:85:0a:
4c:1c:04:0a:32:8e:58:fa:c7:9c:93:0d:c4:ba:ea:0a:15:c5:
e9:ec:82:ff:77:fc:5b:30:d6:05:0f:10:b9:a5:ed:22:70:2b:
22:5b:52:d8:73:64:de:78:3c:3b:11:0b:b2:1b:db:83:8f:48:
b2:27:22:4f:5c:61:70:27:d2:ce:51:2b:47:bf:e2:43:7b:4e:
09:cf:47:02:80:8a:fb:2e:8c:27:d6:d1:d4:1c:44:05:80:9d:
c4:bb:99:b6:06:32:ef:dc:1a:81:2e:03:36:6d:18:aa:83:a9:
92:01:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:05:00 2025 by rpki-client