Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa
File: yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa (raw, json)
Hash identifier: B4pB1U7bD/UVzN0Npz90KrUX1VNbCaaMzhCxilCVAfk=
Subject key identifier: C8:4D:B7:39:C9:9F:E9:42:FE:05:95:B8:22:2F:1C:6F:D7:30:25:6F
Certificate issuer: /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial: 019426D9A7169AB07A8F1CAD4022F99448B0
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa
Signing time: Thu 02 Jan 2025 11:49:45 +0000
ROA not before: Thu 02 Jan 2025 11:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15975
IP address blocks: 194.6.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a7:16:9a:b0:7a:8f:1c:ad:40:22:f9:94:48:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Validity
Not Before: Jan 2 11:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c84db739c99fe942fe0595b8222f1c6fd730256f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:c6:54:52:29:5d:6a:cf:ef:02:39:9a:33:
62:86:03:61:bf:f6:de:8a:06:a2:9c:5f:5f:48:57:
24:c2:cf:81:89:f0:28:c2:fc:22:49:cf:b5:22:8c:
4b:ec:ec:ba:d2:56:b6:28:bd:96:1a:04:af:d0:cf:
47:4f:12:9c:e8:97:45:5c:aa:a4:8b:15:99:63:86:
ba:d7:a9:8a:ec:b7:42:ea:8c:c4:ac:67:83:8b:0e:
45:eb:0a:72:d4:14:70:f7:fd:06:b1:52:49:e1:3b:
fe:3d:ef:15:4e:2b:ce:5b:91:01:e5:bf:28:15:ba:
2b:bb:d2:e2:bd:fb:ad:f7:41:30:c1:56:77:81:e4:
5c:5f:78:d4:d3:0f:bd:7a:af:a3:b9:94:41:33:ac:
ce:bd:36:60:0a:fe:bb:17:12:ea:5b:a7:19:77:a8:
be:b2:8c:28:3a:bf:8e:4f:b4:bb:1e:d4:75:59:43:
6c:16:68:82:2b:43:97:bc:f3:22:77:4d:0a:97:dd:
e0:ee:9a:aa:85:bb:82:05:5d:f1:ae:90:16:9a:5c:
d3:7c:4d:4d:b4:14:9f:9a:b4:26:f1:fa:2a:b1:40:
cb:85:35:1b:95:fb:b7:97:46:ef:cb:8a:9c:16:b2:
e7:a1:36:3e:3f:22:2c:ca:fb:83:06:0b:51:19:3a:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4D:B7:39:C9:9F:E9:42:FE:05:95:B8:22:2F:1C:6F:D7:30:25:6F
X509v3 Authority Key Identifier:
keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/yE23Ocmf6UL-BZW4Ii8cb9cwJW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.225.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3c:23:e6:c6:c3:28:0b:3e:29:8f:17:fe:67:5d:cf:b9:fd:
98:b8:24:1c:5a:80:dc:10:b4:9a:f4:c2:35:44:38:7e:1b:37:
02:a6:37:3b:0e:ff:b6:f7:33:04:83:97:34:c4:a3:04:35:13:
20:8d:d9:27:65:3f:38:47:ab:e2:1e:d0:c8:b9:32:c8:19:5f:
f7:b9:bf:c5:d3:2b:a4:c9:53:98:4b:ca:d8:25:94:7d:66:5e:
67:c4:c7:74:f9:4b:7f:2d:92:cb:34:ce:a0:82:63:ee:d5:b8:
45:77:96:12:3f:52:27:3b:ea:0d:85:7e:99:77:da:d9:66:d8:
a0:6d:57:51:99:5c:85:fb:2c:2d:50:cb:dd:9f:af:72:a9:3c:
46:b3:8f:a9:0a:8d:ff:fd:91:a4:34:ae:63:1f:ef:2c:96:da:
9b:9e:b5:76:7a:b9:84:3c:a6:70:ed:b0:86:07:f6:03:90:90:
6d:91:8e:a7:fc:23:ad:1c:9e:f2:80:bd:fe:f3:86:9e:5f:a8:
86:8d:6c:6f:68:ea:0b:fa:ec:f6:94:ee:4f:c1:d7:77:16:49:
11:98:aa:c0:7f:54:8b:6a:59:8d:98:a2:76:b9:49:a1:2b:ef:
c1:d6:d2:01:7b:3c:73:2c:af:ef:ed:7d:6d:e0:d7:3c:64:37:
92:f3:3e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:01:40 2025 by rpki-client