Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/kV6R2Ovdk9Hj-oCFXECnloFy2r4.roa
File: kV6R2Ovdk9Hj-oCFXECnloFy2r4.roa (raw, json)
Hash identifier: PiaTCFnxlB3VR92lDDt5EbEtyX7/8S00PG5z/8wHps0=
Subject key identifier: 91:5E:91:D8:EB:DD:93:D1:E3:FA:80:85:5C:40:A7:96:81:72:DA:BE
Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Certificate serial: 0194266C17302E2A56D8E4B17CC7CAC229BE
Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/kV6R2Ovdk9Hj-oCFXECnloFy2r4.roa
Signing time: Thu 02 Jan 2025 09:50:05 +0000
ROA not before: Thu 02 Jan 2025 09:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3313
IP address blocks: 194.20.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:17:30:2e:2a:56:d8:e4:b1:7c:c7:ca:c2:29:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=915e91d8ebdd93d1e3fa80855c40a7968172dabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:4a:ce:81:6e:74:60:7c:7c:17:f6:2e:c2:
bd:13:42:f1:8d:14:41:fe:ae:cd:eb:4e:0c:e6:8d:
5d:d8:88:52:24:e2:2b:24:e7:4c:30:22:6c:de:bb:
38:6d:5d:cf:12:3e:f4:66:4b:09:f3:e3:f7:a7:52:
35:de:cc:34:51:2a:1c:6c:aa:0f:7f:cf:e9:d7:f9:
bf:75:02:ba:e3:ab:ae:37:36:6a:6a:82:30:0d:86:
1c:65:d1:48:db:f3:dc:c7:bf:8c:d7:34:f3:2b:43:
7d:87:15:f4:e2:73:ee:4d:a6:91:08:ee:6a:75:23:
30:0a:76:16:93:bd:87:8c:c8:cc:c3:6e:8d:95:f2:
df:bb:1f:8f:2f:a0:d2:61:6c:dc:91:87:a4:90:72:
06:76:24:06:72:72:e5:e3:a5:91:02:3c:de:53:68:
33:28:b9:64:71:02:5d:0b:90:60:df:9d:e8:73:e6:
83:4a:cb:97:c8:be:a6:79:a1:9e:29:80:9e:b9:8d:
f2:2d:0f:7e:db:de:10:90:5e:fc:f6:dd:06:67:34:
23:f5:a6:12:2b:1f:bc:10:05:6c:44:57:a7:ce:a8:
7d:a2:82:e6:5c:d4:a8:15:53:c7:ab:d3:f5:d9:23:
a5:49:5b:11:92:2b:ac:2b:94:66:03:97:c0:f3:7b:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5E:91:D8:EB:DD:93:D1:E3:FA:80:85:5C:40:A7:96:81:72:DA:BE
X509v3 Authority Key Identifier:
keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/kV6R2Ovdk9Hj-oCFXECnloFy2r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.8.0/21
Signature Algorithm: sha256WithRSAEncryption
09:cd:0b:7c:8c:dd:bc:b9:57:6e:ae:8c:6b:11:87:ae:1c:7b:
64:05:64:f4:64:8d:52:38:69:25:35:d5:36:e0:18:5b:a4:66:
e7:c1:60:35:92:b9:59:41:3e:8e:01:a1:3f:e9:cd:95:36:97:
c1:0f:aa:ac:55:8c:af:9a:54:4a:73:85:3a:c6:92:f3:e0:c0:
3c:b3:34:6f:5d:53:d5:28:66:e4:74:35:3a:9f:22:05:62:5f:
31:e5:63:99:46:8f:81:47:26:a2:de:4a:0b:1f:ef:3e:57:5a:
e7:4d:30:e6:6c:f1:90:86:e6:3c:8b:94:c6:93:94:d8:51:58:
61:eb:2e:c1:20:57:a2:e0:19:2c:2a:4a:a7:21:62:4f:af:be:
e1:5d:c6:f2:90:0f:d4:4e:c0:96:36:e2:4d:2a:f7:3c:3e:cd:
44:23:13:df:a2:43:be:d1:33:08:54:b3:26:9b:5a:bf:e5:6f:
59:5a:e1:a0:09:ae:fe:e2:6e:3d:bb:a0:6b:87:9d:97:f4:fb:
45:57:af:2f:6e:32:e6:9d:87:1e:79:2a:33:30:20:01:59:93:
7c:77:a3:b1:53:c5:82:fa:f0:d0:e9:a8:ee:ba:ea:01:20:c6:
5c:e7:3c:0e:96:d0:ad:13:64:00:b5:95:c9:81:ed:04:55:ca:
8f:e6:d5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:24 2025 by rpki-client