Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa
File: Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa (raw, json)
Hash identifier: QtzoauH/RzUtDgfvRpOYRMXpvVGDj4TzJKcxAck6c7I=
Subject key identifier: 39:AD:40:3F:3F:19:DD:5A:94:4A:49:FB:A6:61:10:09:DD:25:29:52
Certificate issuer: /CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Certificate serial: 019420D606CC82F1917336040222142AA900
Authority key identifier: EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa
Signing time: Wed 01 Jan 2025 07:48:04 +0000
ROA not before: Wed 01 Jan 2025 07:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15902
IP address blocks: 194.42.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:06:cc:82:f1:91:73:36:04:02:22:14:2a:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecc45fcadc4c933ac8ff4e0b434a5bfb567b65a1
Validity
Not Before: Jan 1 07:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39ad403f3f19dd5a944a49fba6611009dd252952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3c:46:d9:0b:29:b9:f0:29:be:2a:62:7b:97:
06:b4:05:05:60:73:87:5a:17:12:46:81:e5:a0:75:
12:dc:fe:d4:d4:01:ec:73:f1:fb:0e:17:b6:d7:8f:
a1:12:10:4d:1f:cb:62:9f:f6:12:54:4b:56:21:37:
a6:0f:22:2e:1a:0a:f8:71:33:88:9c:a4:24:d2:ae:
07:91:f9:af:49:6e:81:f2:99:e1:78:46:5a:c8:a3:
db:17:42:da:dc:eb:ff:17:d8:ae:f4:00:92:a3:5d:
c8:dd:74:80:c1:e3:3d:e1:66:94:ed:42:8b:5a:5c:
3a:fb:d5:52:24:50:41:99:6a:e9:40:92:10:47:74:
2e:15:4a:6b:21:74:a9:c0:af:6e:43:1d:53:16:10:
8f:e2:51:24:ba:a2:1b:4d:5f:1a:5f:3c:89:8b:d7:
bf:14:4e:8d:26:77:97:66:68:eb:a8:1e:ac:34:8b:
1e:95:be:b3:96:5c:aa:bd:06:5f:13:b2:37:cc:55:
9b:94:45:ea:71:d2:60:82:ef:b7:e0:6f:79:a2:76:
f3:9a:3a:50:48:d7:f1:4e:5a:1c:67:28:d3:5e:96:
a6:35:9b:32:01:1a:5f:32:f3:a4:d2:e6:4c:31:41:
d3:47:5a:ca:29:4a:df:4f:8d:25:ad:f4:ee:69:85:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AD:40:3F:3F:19:DD:5A:94:4A:49:FB:A6:61:10:09:DD:25:29:52
X509v3 Authority Key Identifier:
keyid:EC:C4:5F:CA:DC:4C:93:3A:C8:FF:4E:0B:43:4A:5B:FB:56:7B:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/Oa1APz8Z3VqUSkn7pmEQCd0lKVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8a4285-157e-4c76-bed4-e076f8ccb8b9/1/7MRfytxMkzrI_04LQ0pb-1Z7ZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.42.40.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:34:05:78:64:8c:98:6b:3f:e7:c4:82:f1:7a:50:de:3a:84:
ad:dc:31:9a:30:bc:7c:4f:2b:43:ff:8d:28:a5:f9:65:e6:ff:
e4:d4:09:b4:92:f1:83:3f:2d:a7:75:c1:15:3a:d6:a2:9a:ce:
68:18:8f:ea:73:9f:51:b3:d5:86:ab:2a:4d:9d:ed:21:fb:c0:
19:b1:01:e6:01:94:46:ac:c8:20:04:0c:e1:09:d0:78:60:33:
48:28:34:6f:d4:f6:c7:0b:3c:ee:74:8f:3c:2d:03:8f:42:81:
97:3c:1e:75:2b:d5:98:a3:05:b5:2e:49:f9:cb:f3:33:bd:7a:
cd:d9:b7:ff:c5:ce:66:7a:f9:f9:07:21:b2:55:7a:bf:c5:3f:
52:f2:cb:80:73:7e:2b:73:52:8e:83:d0:54:55:98:73:58:f7:
fd:65:54:48:be:d6:62:0c:71:01:85:9a:ca:01:3b:a0:bf:f1:
3a:0f:16:76:9d:97:d4:4b:dc:01:30:c4:22:ff:1b:14:bd:5b:
6b:e2:ec:04:ba:7f:d4:2c:11:d9:89:4f:81:73:d4:ca:69:35:
5d:d3:5f:23:56:0f:04:b8:3e:d0:6b:7b:b5:e2:10:46:93:4c:
94:fc:14:c0:8a:fa:a9:38:c2:fe:47:96:bd:72:59:eb:19:e7:
83:a3:96:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:00 2025 by rpki-client