Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/1-MA9vW4j2t27zgeEVQ3zZzY2NFg.roa
File: 1-MA9vW4j2t27zgeEVQ3zZzY2NFg.roa (raw, json)
Hash identifier: d97rb2KbhOn5/Fd4zgaAuJ49iKIAwVFWPkCU3+/ERdY=
Subject key identifier: F8:C0:3D:BD:6E:23:DA:DD:BB:CE:07:84:55:0D:F3:67:36:36:34:58
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 01941FFA41678F5225239077A9607F46F2B0
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/1-MA9vW4j2t27zgeEVQ3zZzY2NFg.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 194.165.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:67:8f:52:25:23:90:77:a9:60:7f:46:f2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8c03dbd6e23daddbbce0784550df36736363458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:b5:a0:a2:c4:a4:02:f7:72:fd:85:4d:86:
be:2a:57:f3:cb:40:89:c6:6f:47:28:5f:f3:0f:1e:
18:bb:d9:9e:28:82:7c:f6:93:72:b3:c5:1d:ea:65:
c1:55:98:a6:2c:c3:e2:72:3f:53:45:45:56:bf:0b:
13:a9:04:60:cc:ed:ae:a2:b5:f9:3b:6e:f9:52:eb:
f8:c5:13:19:74:95:45:8b:4f:19:ee:ee:0f:f8:b2:
10:ba:c8:6f:99:5e:c4:5e:e5:ff:d4:95:39:25:2b:
fe:27:aa:d8:e0:df:a6:14:23:cf:41:b1:d6:09:48:
0b:ee:4b:1c:00:c0:95:d6:33:96:35:5d:6b:3f:54:
0d:06:15:8e:34:4a:a0:c5:6e:77:25:ff:c0:67:b2:
62:06:c6:72:9a:08:0d:ab:52:eb:74:0c:7b:50:12:
e1:6e:7e:4f:6e:d9:7d:a7:d6:67:77:b0:88:4a:3d:
8a:12:69:81:4b:54:47:8d:bd:30:06:49:a3:07:78:
b6:f3:78:7c:f9:83:d8:a1:52:e6:93:10:3e:80:73:
c9:15:37:b3:9c:70:15:b2:4c:82:32:a0:22:72:49:
53:96:6a:3e:e4:7a:63:16:18:2c:ca:2f:56:dc:a5:
3a:69:af:84:58:7e:59:dd:f2:60:de:9d:d2:3e:05:
25:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C0:3D:BD:6E:23:DA:DD:BB:CE:07:84:55:0D:F3:67:36:36:34:58
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/1-MA9vW4j2t27zgeEVQ3zZzY2NFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1d:22:54:a6:b6:d9:2f:d4:03:ed:88:16:96:8f:01:9f:78:
f0:55:1b:fa:42:17:ac:59:45:39:69:3d:90:5f:20:64:45:84:
f6:9b:73:4d:68:24:64:68:8f:b3:19:16:23:66:71:c2:fa:ca:
cc:68:3e:f6:e4:44:ec:3f:a7:e2:32:35:11:9d:55:82:79:70:
9f:3e:52:2e:b9:97:df:9c:3a:99:54:0f:1c:32:7f:6d:ad:a0:
59:98:49:ad:c1:82:33:9b:6e:6b:1e:dd:32:99:93:89:9f:20:
88:ec:4c:2d:45:2e:2b:b3:30:ea:37:23:ae:ed:7c:40:79:b7:
63:83:ab:14:4e:f9:7c:95:46:4f:0b:05:38:e7:64:6c:43:c2:
76:7c:2c:41:81:68:81:d3:86:a8:f2:94:3d:a7:68:3f:4d:44:
1c:5b:6f:cf:8d:27:54:df:24:bf:3a:87:96:c7:77:ce:bb:49:
00:c3:87:df:41:b9:2d:7c:85:c4:d7:7d:19:d5:9d:08:e1:fe:
14:c9:09:d7:e3:5e:1a:0e:46:d1:03:34:99:7f:d3:07:39:36:
bd:f0:5b:f5:18:43:40:63:4d:0b:f7:e7:fd:e8:77:31:a2:7b:
7a:e3:b8:29:d1:28:f2:f4:f0:8f:63:6c:94:75:00:e4:fb:1d:
6a:1a:95:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:36:05 2025 by rpki-client