Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/ElT6w3O3CNJmhOCXN95qpUVHLs8.roa
File: ElT6w3O3CNJmhOCXN95qpUVHLs8.roa (raw, json)
Hash identifier: MvICQ70IP64pU7Ma7VgtmiuA07h8J/UrBVPTnS51AYA=
Subject key identifier: 12:54:FA:C3:73:B7:08:D2:66:84:E0:97:37:DE:6A:A5:45:47:2E:CF
Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial: 01941FFA209EDA985A33468A281B74C432F9
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/ElT6w3O3CNJmhOCXN95qpUVHLs8.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207638
IP address blocks: 194.116.104.0/24 maxlen: 24
194.116.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:20:9e:da:98:5a:33:46:8a:28:1b:74:c4:32:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1254fac373b708d26684e09737de6aa545472ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b3:80:0d:93:aa:96:f4:12:1b:0c:cc:ec:a2:
dd:88:7e:53:94:57:87:18:4c:7d:dc:57:55:70:a7:
72:c2:11:be:75:e3:89:7e:4f:cf:be:38:2f:1a:a3:
83:5b:a0:9e:c4:94:1b:ef:12:d7:69:5e:61:3c:c4:
ca:99:f9:4b:66:5c:5d:9c:19:d3:57:1f:34:02:d0:
a5:d2:9b:07:34:f9:b4:ed:b0:a7:e4:98:c8:12:d2:
b7:d4:9f:a5:b4:60:b3:56:1e:25:2e:08:db:57:49:
d2:62:88:3f:38:df:55:c3:1c:f4:bf:3c:39:3f:80:
5a:0a:90:f0:16:bc:fb:26:85:73:46:ae:78:e5:64:
e9:f3:3c:b9:5b:ae:7f:71:a8:36:d5:7a:6c:cb:45:
1c:0d:94:e7:c7:66:b2:d5:ca:a6:d2:98:94:ae:a3:
f3:4c:d0:76:cb:75:3e:76:ba:e8:7d:f7:b4:86:c2:
5d:31:57:de:44:11:ad:24:cc:d0:6d:db:b1:d7:1f:
22:79:35:01:81:cc:de:a1:bb:15:26:cd:b4:6e:bb:
44:1b:7a:3b:a0:b3:60:7e:e5:c3:56:1b:1c:0a:30:
2e:ad:f8:7d:75:a6:9f:8c:99:bb:3b:f3:6b:a2:4a:
d5:4c:a1:d0:09:81:89:e6:e7:ea:82:a9:82:09:0a:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:FA:C3:73:B7:08:D2:66:84:E0:97:37:DE:6A:A5:45:47:2E:CF
X509v3 Authority Key Identifier:
keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/ElT6w3O3CNJmhOCXN95qpUVHLs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.104.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:a7:f0:59:0e:fa:d8:6b:2c:54:c0:c3:b2:aa:84:9a:2d:00:
63:67:02:0c:23:e9:1a:1f:a5:93:2f:4d:c7:be:67:9f:a7:ac:
b4:f0:70:3d:ce:7c:68:06:3d:43:d1:0f:8e:5a:b4:d1:34:78:
a5:8b:5a:f5:34:20:58:93:a4:89:56:54:dc:2b:da:9b:69:a8:
6c:88:59:fc:72:23:03:f1:8f:1a:20:37:cb:b0:a8:82:94:3a:
d3:d1:98:5d:ca:88:e6:a7:1c:85:c8:c8:4f:66:9f:1c:52:82:
63:bf:b7:16:00:98:ab:81:14:17:c1:07:ba:02:2b:31:44:7f:
79:c0:fb:94:f2:e4:46:83:33:a8:ab:54:a7:bb:81:25:16:e3:
94:d6:00:5c:70:e1:e1:1f:ce:77:f1:1c:25:04:89:14:cc:f5:
d2:51:1e:32:05:13:b6:93:d9:0b:ca:59:26:67:9a:76:7c:83:
ff:6c:82:fd:ac:89:42:fe:25:9a:5f:8b:2a:5f:7f:48:85:f1:
f4:fd:46:94:49:16:bf:ef:2f:57:66:be:7f:c9:ce:06:ff:19:
04:aa:80:20:b1:81:9a:33:4c:9c:ae:62:f0:3d:92:82:1b:14:
9c:fb:67:10:59:a2:13:1f:0b:43:f3:b1:7d:82:92:c2:f2:d4:
be:14:9d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:45 2025 by rpki-client