Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/iwkNh3UdWwUz0vScU_NmxlT_kd8.roa
File: iwkNh3UdWwUz0vScU_NmxlT_kd8.roa (raw, json)
Hash identifier: qTLgYZEDj5/iSNL5ILw19yNSQMcWNUWUNm12d5bZdjQ=
Subject key identifier: 8B:09:0D:87:75:1D:5B:05:33:D2:F4:9C:53:F3:66:C6:54:FF:91:DF
Certificate issuer: /CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Certificate serial: 01941F8C83B00932A587FFED4496D3C22693
Authority key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/iwkNh3UdWwUz0vScU_NmxlT_kd8.roa
Signing time: Wed 01 Jan 2025 01:48:09 +0000
ROA not before: Wed 01 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39835
IP address blocks: 194.13.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:83:b0:09:32:a5:87:ff:ed:44:96:d3:c2:26:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b090d87751d5b0533d2f49c53f366c654ff91df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:06:e3:f8:ae:6e:d6:89:68:e9:2b:f1:58:dc:
e4:09:79:52:88:09:8a:f1:ba:16:7f:4c:df:5b:10:
09:ed:f0:05:d0:d0:2c:63:bd:75:c8:3a:3e:dd:da:
c9:43:a5:33:52:2e:5b:1f:22:df:73:ab:8a:fe:c3:
51:35:5b:f5:5a:09:91:1d:9d:f6:88:cd:1d:31:09:
e0:e3:45:5e:23:4c:f0:f4:b3:63:6c:4d:f8:54:1b:
9c:36:f1:39:fc:44:67:da:50:6b:b2:ef:75:d2:c8:
dd:f4:ea:07:c3:39:be:49:a8:f5:16:59:28:12:06:
c9:83:ce:2f:a2:c4:d3:7d:35:24:a4:05:1c:74:42:
ae:bd:39:e6:07:66:28:c2:f9:0d:99:4f:18:e8:8a:
25:a7:6e:fc:2b:6e:0f:2a:f2:db:f3:84:26:7d:ff:
9a:b2:b6:88:87:94:8e:69:b5:d9:27:13:89:17:7d:
c1:9f:e1:d0:69:b6:4b:88:64:79:95:8e:cf:96:88:
04:f6:47:03:63:a7:7f:31:d2:a5:ae:3f:0b:97:73:
67:01:29:59:5a:0e:72:53:a1:a1:88:fd:42:c7:54:
41:6d:98:b6:0a:ae:cd:62:ca:8c:7b:e9:42:00:65:
da:a5:88:6e:c0:ce:2f:3f:45:78:ca:cb:7d:e2:81:
18:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:09:0D:87:75:1D:5B:05:33:D2:F4:9C:53:F3:66:C6:54:FF:91:DF
X509v3 Authority Key Identifier:
keyid:8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/iwkNh3UdWwUz0vScU_NmxlT_kd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.135.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ff:f1:56:72:d5:09:9b:81:69:a4:c9:bc:66:ac:70:33:97:
cb:77:6b:75:2b:a6:cf:43:08:d7:36:11:58:85:e8:d2:1c:fc:
78:27:6b:65:43:4a:4b:1c:cf:8e:86:ed:cc:5c:ee:b5:4e:ed:
a2:0c:66:4c:b2:37:66:6e:ab:aa:b7:db:0c:d8:0b:5b:b0:61:
c9:83:5b:17:9b:58:aa:43:c8:e6:b9:b0:1f:d2:9a:fc:29:0f:
b7:b9:47:45:e6:2e:a3:a6:a7:eb:cf:39:bd:81:25:b3:90:d9:
e0:db:32:aa:59:66:0b:0a:8c:c2:e7:c8:33:1f:34:dd:83:d1:
f5:cc:42:bb:33:50:4e:73:80:f8:47:8d:7a:20:62:17:06:c1:
31:61:9a:63:5f:43:77:79:39:d9:6e:22:56:71:4d:e6:8d:70:
13:4b:4c:ae:fe:c7:d4:16:a8:ea:22:74:c5:a6:f7:57:b1:58:
7d:ae:71:ff:8a:56:65:ec:46:a1:43:13:a9:2b:63:96:ed:77:
01:13:c7:28:f4:0c:48:7b:a3:ac:2a:10:6e:31:ea:52:27:bb:
c7:d2:b8:9a:fe:ce:a4:bd:3d:be:b9:93:2f:90:f6:15:86:d3:
4d:f5:62:ec:76:70:93:6a:3d:77:e5:ee:48:d4:3a:74:9d:8c:
b3:89:ec:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:20 2025 by rpki-client