Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/xGuOIxMFC1Wn9_vw4MtsHeq3I1E.roa
File: xGuOIxMFC1Wn9_vw4MtsHeq3I1E.roa (raw, json)
Hash identifier: kcCBBOjP/JTwKy7Io6Y4tXVkBszU8YzDmmO1xZCayZU=
Subject key identifier: C4:6B:8E:23:13:05:0B:55:A7:F7:FB:F0:E0:CB:6C:1D:EA:B7:23:51
Certificate issuer: /CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Certificate serial: 0194221FD0F71274A0DC834EE4165DA84A1F
Authority key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/xGuOIxMFC1Wn9_vw4MtsHeq3I1E.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207655
IP address blocks: 194.36.0.0/24 maxlen: 24
2a12:3840::/29 maxlen: 29
2a12:3840::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d0:f7:12:74:a0:dc:83:4e:e4:16:5d:a8:4a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c46b8e2313050b55a7f7fbf0e0cb6c1deab72351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:0b:90:22:3b:27:8c:bc:00:27:8f:ae:42:
0a:9d:8b:c7:59:59:69:1c:81:85:70:14:fe:26:03:
d0:4a:b1:41:fc:5e:ae:f5:35:b3:9e:f2:3c:c7:fe:
2b:1f:2b:15:73:9e:52:12:04:84:fa:d6:09:f1:8d:
aa:34:49:d6:98:25:58:b1:58:2b:6c:e2:aa:60:6b:
59:00:07:60:7a:6c:aa:d2:58:f7:ae:22:54:ad:81:
5c:5f:c7:c7:b5:9e:b3:a7:08:42:54:b4:38:c3:fd:
4b:86:3e:6f:7e:d8:f9:2c:24:8d:87:55:70:12:2b:
aa:34:e5:66:1a:87:71:f4:46:5e:08:47:8d:69:56:
d4:40:1e:76:2a:a4:23:07:f4:08:36:38:b2:ae:4d:
5d:45:82:6b:88:aa:31:75:f4:ed:88:c7:07:4d:1a:
f2:f7:58:84:f6:6c:27:e5:b0:b7:dc:41:9c:6d:94:
5a:6a:14:35:d4:c2:74:ef:27:b1:1f:2d:66:eb:a9:
6b:f9:ca:73:ee:80:65:b9:5b:44:6a:62:90:63:ee:
b1:70:25:fa:36:5c:1d:fd:40:d3:8a:62:25:79:e5:
aa:3e:7b:ef:dc:96:e4:05:e6:ec:6a:df:a3:3d:3c:
29:12:90:54:e3:95:38:95:f5:aa:00:d1:f5:40:95:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:8E:23:13:05:0B:55:A7:F7:FB:F0:E0:CB:6C:1D:EA:B7:23:51
X509v3 Authority Key Identifier:
keyid:1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/xGuOIxMFC1Wn9_vw4MtsHeq3I1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.0.0/24
IPv6:
2a12:3840::/29
Signature Algorithm: sha256WithRSAEncryption
5a:6e:59:b5:18:a0:91:24:d7:35:dc:1b:f6:53:7b:ed:46:2e:
fe:29:32:7f:54:db:fa:d3:08:0f:5e:79:4f:e8:f0:3e:61:c0:
2d:6e:93:a8:4a:bb:1a:bd:db:1e:ec:94:9f:6a:79:55:12:59:
7c:bb:bf:97:77:cc:fd:ea:de:7e:a2:50:30:ac:ce:e7:7b:b1:
3b:14:4f:e9:ef:f4:f4:21:ff:cb:af:a8:d5:15:5c:72:27:5f:
c0:15:6f:14:76:c6:2c:88:99:03:49:87:53:34:50:42:51:3f:
61:26:b0:9a:a1:1c:e1:9d:e5:9a:45:5e:d5:2f:44:a3:a0:38:
34:49:35:52:0d:d0:cd:61:f3:04:a3:7f:b1:3e:cd:b6:90:8c:
c2:d0:97:f8:b8:44:d0:a7:3b:1d:98:56:42:33:95:16:1d:e7:
04:88:d7:f9:41:3e:ab:06:7a:a6:34:dd:c0:a6:66:d7:c9:5a:
44:15:76:f4:20:4d:fd:4e:82:c8:b3:7f:d3:07:30:6a:8b:1c:
56:29:6a:63:90:1e:a3:a0:c0:a0:4e:f6:73:91:27:8c:ed:ed:
03:6b:f9:3b:b7:8a:c4:5b:70:41:c1:07:f9:4a:38:19:a1:ab:
eb:82:73:9d:70:b1:d8:6f:82:7e:2a:34:48:55:24:a9:f8:7b:
b0:7f:33:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:08 2025 by rpki-client