Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ipTg348ZUOHwTFCERWv85x5upVw.roa
File: ipTg348ZUOHwTFCERWv85x5upVw.roa (raw, json)
Hash identifier: 16jKgCClYBo+eCIMwkt7ZjD/Ascu9zEJCZArBRFo1ac=
Subject key identifier: 8A:94:E0:DF:8F:19:50:E1:F0:4C:50:84:45:6B:FC:E7:1E:6E:A5:5C
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01942143BC8A6E1B374A42D161B61D2A677D
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ipTg348ZUOHwTFCERWv85x5upVw.roa
Signing time: Wed 01 Jan 2025 09:47:54 +0000
ROA not before: Wed 01 Jan 2025 09:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201448
IP address blocks: 194.181.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bc:8a:6e:1b:37:4a:42:d1:61:b6:1d:2a:67:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 09:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a94e0df8f1950e1f04c5084456bfce71e6ea55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:2f:69:95:98:cc:92:a9:0f:f2:fe:c9:c7:
4e:02:45:f6:9f:a5:0a:3f:c9:8e:35:93:57:c1:1f:
e8:09:7b:28:6f:c0:6f:3a:21:8f:b1:3d:95:02:89:
f6:30:ad:3b:f7:ed:0c:5e:d9:ba:c7:1a:33:9e:c5:
fb:7e:9f:61:ba:f6:a5:7e:3c:9e:cb:d9:b9:c2:19:
d7:23:3e:f6:9b:d9:48:04:90:a4:3d:e4:c1:9c:54:
2a:d1:70:43:b1:96:70:c8:90:33:b2:3c:0e:39:11:
42:9d:e3:e5:b5:cb:fb:fd:b4:24:72:e6:43:0d:8b:
75:71:36:60:be:46:ab:f3:60:72:b2:30:3c:42:6d:
86:1d:6e:ec:86:b5:47:1e:ee:b1:e8:fb:1d:cf:bd:
48:49:ae:7d:c5:ee:1f:ab:44:1f:af:99:e2:b5:d8:
87:9c:09:39:cc:c5:4c:9d:75:88:5f:c3:c9:4f:ed:
f5:16:b5:2e:e4:62:87:45:0d:40:4a:50:00:5d:1e:
c2:4e:ae:6d:26:13:d2:17:0f:ff:85:9f:33:23:3e:
2d:2e:27:f0:fd:c5:12:0c:19:be:2a:63:3c:e5:e5:
0f:be:0a:ba:ee:35:12:b3:87:64:d8:c0:58:40:27:
72:f6:24:91:89:55:a4:6c:04:56:b8:83:31:4f:a6:
fd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:94:E0:DF:8F:19:50:E1:F0:4C:50:84:45:6B:FC:E7:1E:6E:A5:5C
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/ipTg348ZUOHwTFCERWv85x5upVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.181.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f4:9b:2f:de:33:e4:44:0a:8c:02:fb:fd:a9:0b:5d:c9:62:
ac:6a:66:4e:33:37:5d:c3:0b:7c:7a:a3:86:82:a8:5f:cd:d8:
e6:51:0b:0d:ad:33:60:ad:90:0a:2b:1c:36:95:8f:ec:15:2a:
88:41:1f:fa:4e:4c:99:eb:16:e2:8a:26:79:d2:2e:40:68:b0:
84:8d:c0:a6:cf:90:c2:99:f8:09:60:b5:cd:23:43:18:e1:a5:
60:95:88:2b:5e:70:6c:58:fb:66:a2:63:71:61:12:8f:63:46:
08:fa:15:13:0f:e9:52:7b:b3:18:25:fb:86:ee:17:6d:89:66:
5e:4d:53:5b:f4:89:31:6d:34:af:a3:dd:7c:58:e7:8f:27:8f:
a0:e7:a1:b5:c1:2b:65:99:4f:96:a2:78:a3:6b:72:88:1e:bb:
2d:fe:c8:c1:e2:df:b2:19:77:83:f3:55:8c:8d:b9:3d:27:f5:
dc:57:a3:25:01:06:55:e2:f6:e6:47:e4:bf:2e:6c:dd:65:07:
91:77:93:31:a3:bb:a2:91:c9:22:14:b1:07:b9:e2:0e:e5:59:
af:3e:ab:7e:c6:ac:8e:1b:1a:f7:b3:58:94:e3:8b:08:25:54:
3f:9a:bf:ba:7d:30:b8:4b:a5:3c:e0:7c:19:68:15:42:07:ee:
b2:a3:20:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:25 2025 by rpki-client