Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/79CA17Xn5GUSh_OtX3g6kBkGEK0.roa
File: 79CA17Xn5GUSh_OtX3g6kBkGEK0.roa (raw, json)
Hash identifier: E0hRb7MlGtqWbRGEjrJTx2utqhVHTzEFD8Hy89KBmzw=
Subject key identifier: EF:D0:80:D7:B5:E7:E4:65:12:87:F3:AD:5F:78:3A:90:19:06:10:AD
Certificate issuer: /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial: 019428251F6198CB97AE9CB63753D1D437BB
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/79CA17Xn5GUSh_OtX3g6kBkGEK0.roa
Signing time: Thu 02 Jan 2025 17:51:49 +0000
ROA not before: Thu 02 Jan 2025 17:51:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200319
IP address blocks: 194.48.224.0/22 maxlen: 24
2a0c:f440::/29 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:1f:61:98:cb:97:ae:9c:b6:37:53:d1:d4:37:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Validity
Not Before: Jan 2 17:51:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efd080d7b5e7e4651287f3ad5f783a90190610ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:b7:14:6d:42:02:f8:d8:d4:e7:d8:bb:60:
27:c8:b6:33:de:d1:32:65:89:13:b7:26:cf:6b:bc:
c2:c3:a2:ed:d9:fc:5f:9c:c4:69:8a:f6:f8:88:d5:
fa:09:b2:56:6e:43:f3:81:b1:89:46:0e:07:24:12:
5c:9f:14:b9:56:50:3e:87:b9:b6:9f:74:e9:c1:fd:
37:55:63:49:75:3c:cb:fc:d0:02:f5:16:08:c1:b4:
8d:87:9d:c5:4c:30:56:f1:23:5d:bf:cc:9f:26:59:
de:e6:12:0c:e7:22:9a:41:a2:a8:17:95:5e:b6:7f:
d8:7e:36:eb:7b:3a:04:2c:57:08:09:f2:f1:25:3d:
c3:ab:ed:1e:14:61:1d:9c:1f:fb:a6:08:b2:0a:4f:
bd:d1:7b:9c:0d:cd:db:d8:c6:35:28:29:e2:d3:bb:
2b:1c:f6:20:24:14:3c:88:ef:fd:e2:a8:dd:cb:11:
2f:d5:84:1e:36:99:cd:20:0e:dd:60:af:30:44:d3:
3e:8f:95:f5:d4:df:cb:09:ee:3c:29:6d:97:d3:14:
92:34:f2:c8:6a:8c:a3:47:55:1a:c4:e7:49:75:5d:
bc:fd:07:60:f4:69:fd:f8:c6:19:50:3b:3a:6e:45:
00:30:0c:12:58:c0:ed:bc:32:e0:17:81:ff:e1:6c:
55:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D0:80:D7:B5:E7:E4:65:12:87:F3:AD:5F:78:3A:90:19:06:10:AD
X509v3 Authority Key Identifier:
keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/79CA17Xn5GUSh_OtX3g6kBkGEK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.224.0/22
IPv6:
2a0c:f440::/29
Signature Algorithm: sha256WithRSAEncryption
b2:ed:83:4d:0a:45:37:77:6f:92:57:5a:73:f0:ee:9a:8a:f3:
8b:d4:64:8d:ea:21:0b:16:30:a0:bd:15:0a:ec:9f:ef:f0:35:
f4:4f:c0:0c:04:c3:d9:9c:ff:17:15:4e:79:49:1d:8d:08:21:
99:00:b6:17:79:1f:51:30:b9:95:ec:71:b7:7a:44:68:99:82:
cb:f9:e1:84:d6:28:c9:3d:34:cc:3a:a6:69:54:c4:cf:37:28:
7b:11:c6:7e:3e:21:38:1e:dd:0d:a3:79:0c:ee:bb:17:c7:06:
5c:f0:a6:b9:59:13:17:88:86:e3:ba:6c:0a:a0:34:2e:fd:bb:
65:3f:a9:63:d3:94:bb:b7:55:7e:80:3c:c1:ce:a3:ef:c9:15:
b2:de:18:77:06:6a:27:87:ac:57:cb:c8:91:98:75:51:b1:51:
3a:25:31:16:dc:af:f1:19:48:4a:eb:a4:d0:d2:2a:e1:59:49:
77:d3:9f:86:dc:d9:32:53:55:82:17:be:15:c3:6b:e3:b8:26:
41:9b:da:e8:2c:4f:e5:2c:65:62:56:b4:46:37:3a:a6:5b:fe:
38:0a:c3:3a:96:34:19:3e:bd:82:6f:96:23:29:06:28:69:ea:
16:f5:17:2d:35:22:6b:9c:81:ad:46:9c:e6:61:60:9d:6d:9e:
b3:fe:3d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:14 2025 by rpki-client