Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4H2gHj1CXkWBU_DMVpHCA9Um4GY.roa
File: 4H2gHj1CXkWBU_DMVpHCA9Um4GY.roa (raw, json)
Hash identifier: x1Rq7qldN5MD23w00lO+g/VF0IGAYCg3Il7yXc0B+cA=
Subject key identifier: E0:7D:A0:1E:3D:42:5E:45:81:53:F0:CC:56:91:C2:03:D5:26:E0:66
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 0194282312BF143A197E2F7554414A94B212
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4H2gHj1CXkWBU_DMVpHCA9Um4GY.roa
Signing time: Thu 02 Jan 2025 17:49:34 +0000
ROA not before: Thu 02 Jan 2025 17:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198526
IP address blocks: 194.50.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:12:bf:14:3a:19:7e:2f:75:54:41:4a:94:b2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Jan 2 17:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e07da01e3d425e458153f0cc5691c203d526e066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3b:f4:80:13:b1:62:5a:27:37:d4:dc:ae:9c:
d7:7b:9e:9a:68:f9:7b:9d:5b:81:fb:b9:d5:cb:12:
90:b9:09:4b:09:93:20:9a:ee:fd:1d:26:9b:cb:58:
37:31:4d:e8:ef:5f:82:06:43:a2:0b:52:ad:15:b4:
19:e5:cb:bb:1c:44:90:ec:42:bf:23:a6:84:36:9f:
af:4b:09:59:c1:e7:9c:aa:bb:7a:15:16:76:50:78:
71:ea:36:89:e4:8b:c5:c5:7f:72:d4:07:e3:07:ca:
d8:6d:bf:a6:13:c2:37:cb:75:cd:2d:0f:8e:52:93:
37:04:11:62:9b:e1:5e:a7:a4:c9:d5:08:95:e9:28:
df:c8:ed:f3:0e:e1:f1:8c:86:ae:a5:62:76:a9:e9:
6d:78:51:9a:51:ec:ad:4b:d6:24:b3:fb:c2:3a:62:
20:f0:92:1b:d0:8f:a6:3c:fe:2f:8b:26:f2:92:94:
dc:fa:06:49:1a:2a:5e:0e:df:0c:b4:c6:8c:1b:00:
2a:f5:81:da:68:4b:4c:07:bf:be:22:10:f4:7e:9d:
07:95:ff:00:4d:fe:a9:17:7d:dd:a3:c5:15:89:48:
c8:c4:ac:27:0c:4b:53:83:fe:86:02:d8:d1:f4:32:
15:b1:db:e2:44:f2:17:21:1d:49:5c:5d:6f:b6:f9:
0c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7D:A0:1E:3D:42:5E:45:81:53:F0:CC:56:91:C2:03:D5:26:E0:66
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4H2gHj1CXkWBU_DMVpHCA9Um4GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.152.0/24
Signature Algorithm: sha256WithRSAEncryption
27:97:65:92:8d:1c:fa:48:86:d9:8f:d5:c2:45:ac:20:53:38:
bc:86:72:09:d7:05:33:ff:9d:27:f9:ed:b7:d2:5a:86:92:93:
3a:e9:3a:3c:34:8c:25:ec:6a:6f:e5:73:9a:52:41:a6:54:fd:
4c:94:38:ee:f4:60:62:cb:17:d0:7d:87:5d:34:24:3d:13:ee:
43:80:8f:79:d6:c6:2a:ae:dd:7e:d6:0d:4e:5b:90:c5:ea:69:
8a:e9:bf:17:cd:5b:b2:1c:36:93:62:e5:8a:47:ce:ea:17:45:
87:b9:30:7f:c5:10:61:83:0b:ea:54:1e:30:8f:6d:11:a4:a2:
c7:af:2e:e5:f4:87:11:9b:a1:f4:ca:4b:7c:06:1b:6d:9c:6d:
c8:41:3f:8f:2b:15:8b:e0:9c:2c:6a:1d:b3:11:48:60:d9:13:
b1:c9:2e:d5:6d:f3:fe:b3:39:1f:80:93:ac:93:eb:ca:3e:88:
b8:a6:d7:76:16:07:bc:1c:b0:af:78:61:ab:a3:d5:76:c2:65:
ab:77:21:b2:53:5a:56:1b:ae:8f:3b:48:b6:86:0b:1d:22:e5:
58:be:9f:b7:2e:8d:a8:da:10:4d:68:59:b5:05:38:51:6b:b0:
3d:77:ca:a8:5b:50:98:20:b1:47:4c:a7:d1:52:a6:02:6c:8d:
cb:eb:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:48:26 2025 by rpki-client