Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/97TEoE2zAQxZI3sREml1jxvx638.roa
File: 97TEoE2zAQxZI3sREml1jxvx638.roa (raw, json)
Hash identifier: 88Edm2WqicmrATpjZjEgq8BI+OITrMBwRffegS2fN0U=
Subject key identifier: F7:B4:C4:A0:4D:B3:01:0C:59:23:7B:11:12:69:75:8F:1B:F1:EB:7F
Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Certificate serial: 019424B288E9E1C037EB225CFB226AF39810
Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/97TEoE2zAQxZI3sREml1jxvx638.roa
Signing time: Thu 02 Jan 2025 01:47:47 +0000
ROA not before: Thu 02 Jan 2025 01:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21083
IP address blocks: 194.8.57.0/24 maxlen: 24
2001:67c:14d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:88:e9:e1:c0:37:eb:22:5c:fb:22:6a:f3:98:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f
Validity
Not Before: Jan 2 01:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7b4c4a04db3010c59237b111269758f1bf1eb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:1d:f7:b2:b1:af:3b:9e:96:eb:99:eb:7a:
b4:9f:dd:eb:05:13:af:72:97:0c:ce:10:3c:81:73:
ae:0e:15:55:46:59:dc:03:a9:63:b8:80:a1:db:75:
9f:f8:a7:7e:1d:7b:fe:2f:6f:4d:b2:69:36:f1:7b:
ae:ed:f7:aa:c5:15:36:b1:55:42:e3:31:37:cc:4e:
a4:8e:31:8d:21:05:78:25:60:22:ed:47:85:f0:81:
f1:a3:ec:58:55:1c:91:62:2b:bf:5b:2c:21:37:c5:
cf:a0:71:ff:03:2f:84:35:e2:4d:ec:de:d1:b0:e5:
92:2f:e4:b1:f9:25:d1:62:18:cb:a4:6a:d7:d0:d3:
81:1f:77:85:a1:c8:1a:b9:ce:ec:50:c8:5b:20:7d:
fb:48:17:39:96:bf:32:05:a3:dc:dd:0d:4c:89:11:
38:80:44:46:a2:b5:81:a9:c8:1e:18:94:85:b5:6e:
a6:ac:db:74:19:ec:d1:a9:4c:ef:c1:3a:02:02:61:
74:50:4a:c5:31:8b:dc:77:ae:f4:8d:48:55:16:7f:
ef:b9:72:14:42:42:20:52:10:ee:f2:88:f2:c7:95:
ac:b8:00:fb:f8:7a:70:34:65:f4:74:a3:7f:d0:58:
db:38:03:b4:0f:49:34:21:a6:4b:ab:2d:11:5c:3e:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B4:C4:A0:4D:B3:01:0C:59:23:7B:11:12:69:75:8F:1B:F1:EB:7F
X509v3 Authority Key Identifier:
keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/97TEoE2zAQxZI3sREml1jxvx638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.57.0/24
IPv6:
2001:67c:14d::/48
Signature Algorithm: sha256WithRSAEncryption
8e:3c:55:d4:42:73:1e:d6:b0:f6:a3:be:db:7a:10:3a:21:a2:
c9:8f:a7:19:26:5a:f4:08:c5:de:7d:f3:6f:d1:38:54:95:ab:
e8:86:66:f1:5e:8d:36:72:2f:bb:a2:31:6e:22:74:0a:27:9a:
46:4e:5e:a8:76:5d:aa:3d:da:91:f4:e3:7d:ce:f5:81:38:5c:
58:65:e9:13:2b:a8:5c:4d:8b:b7:37:45:48:c0:64:10:e1:4a:
6a:65:4b:ab:1b:02:36:f1:ff:9d:cd:47:c1:5b:50:7a:9b:0a:
bf:a4:41:74:81:b8:a0:b4:d0:49:ce:68:d3:13:cc:4e:d7:f9:
ee:88:cf:a0:d9:e0:f7:0c:d0:f5:48:58:c3:d3:a1:16:77:18:
0c:0d:f3:33:40:f8:c9:ec:e4:87:54:8e:9f:eb:24:6f:34:71:
72:ba:e6:41:58:4a:7e:d8:89:12:0d:ad:92:44:80:f6:dc:00:
f7:c7:1c:78:97:a3:38:72:c6:61:f9:ca:c5:df:65:fc:d0:f9:
aa:a3:97:50:a8:35:0b:2e:f6:7c:4d:d7:5d:25:53:58:0a:2e:
03:46:7d:57:ec:ef:31:71:1d:f7:c8:11:89:94:00:12:02:73:
ec:26:f7:46:97:bc:c4:d2:c9:f4:1b:1c:a6:5f:18:01:98:c1:
bc:75:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:26:27 2025 by rpki-client