Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/kh936l2vxgccX_jvVlzYGLxpdnk.roa
File: kh936l2vxgccX_jvVlzYGLxpdnk.roa (raw, json)
Hash identifier: 1aSc0Ne3PFeWf8CzHXerC/R90wO3YKjdcfKwJxtbP2I=
Subject key identifier: 92:1F:77:EA:5D:AF:C6:07:1C:5F:F8:EF:56:5C:D8:18:BC:69:76:79
Certificate issuer: /CN=40339d304499d069aecd8bd0e8fba02e522f576a
Certificate serial: 0194266C05DBAA798ED258FC70E56A0BCB48
Authority key identifier: 40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/kh936l2vxgccX_jvVlzYGLxpdnk.roa
Signing time: Thu 02 Jan 2025 09:50:01 +0000
ROA not before: Thu 02 Jan 2025 09:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197898
IP address blocks: 194.48.232.0/22 maxlen: 24
2a0c:c740::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:05:db:aa:79:8e:d2:58:fc:70:e5:6a:0b:cb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40339d304499d069aecd8bd0e8fba02e522f576a
Validity
Not Before: Jan 2 09:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=921f77ea5dafc6071c5ff8ef565cd818bc697679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:8f:30:79:40:b2:d7:25:f4:d6:7c:10:1c:
2d:30:79:d9:13:4e:5e:9c:cc:78:72:5c:8b:18:21:
78:17:15:16:ec:dd:7b:ce:d3:bd:28:b5:55:b1:76:
47:bb:0a:e8:87:b1:6a:04:33:75:cd:a8:7b:e1:49:
74:51:7e:60:4a:6b:67:40:d9:52:2b:e8:e4:74:68:
09:4b:94:0d:fe:af:96:37:3b:63:05:e8:87:a2:10:
81:93:94:0f:15:75:6b:74:04:d3:c4:f8:db:bc:e0:
5e:c9:00:ab:60:eb:1e:7b:5a:da:bd:a3:09:b0:e1:
2d:65:e7:24:42:f1:6e:3d:7a:73:73:89:e1:c8:06:
c5:ef:6e:7f:c2:9f:d4:24:74:18:ef:27:7f:d3:2a:
03:34:f0:fb:59:82:55:9a:c7:87:83:ca:be:ab:df:
28:ec:a1:34:b0:24:df:89:f6:85:8d:75:ff:a3:c7:
0f:42:2e:f4:57:c2:92:b6:1b:60:eb:6d:d2:4c:07:
1a:75:56:31:75:c7:43:f9:c4:0e:5a:7a:44:52:b9:
22:93:4b:dc:56:bc:cd:84:fe:fe:de:c9:e5:b5:88:
47:17:f3:57:b7:b4:3b:7e:25:ea:af:9a:8e:8f:df:
d9:cc:63:00:9d:8d:77:3a:61:6c:dc:93:c3:ef:25:
db:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:1F:77:EA:5D:AF:C6:07:1C:5F:F8:EF:56:5C:D8:18:BC:69:76:79
X509v3 Authority Key Identifier:
keyid:40:33:9D:30:44:99:D0:69:AE:CD:8B:D0:E8:FB:A0:2E:52:2F:57:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDOdMESZ0GmuzYvQ6PugLlIvV2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/kh936l2vxgccX_jvVlzYGLxpdnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5fe88a-16e1-481f-98e8-031e58905923/1/QDOdMESZ0GmuzYvQ6PugLlIvV2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.232.0/22
IPv6:
2a0c:c740::/32
Signature Algorithm: sha256WithRSAEncryption
a7:68:5f:74:09:18:3c:eb:27:ea:56:7c:4c:a5:06:79:15:36:
cd:41:a6:0d:5e:a6:46:25:51:89:85:36:c0:f1:8d:5c:db:09:
89:ab:3c:66:b2:be:5e:4d:c5:c7:6c:01:a7:03:f9:9a:e0:4a:
db:17:10:2e:4c:ed:db:ac:90:dd:5c:56:8b:05:d0:d2:71:4f:
5e:ed:e2:90:75:77:ad:38:eb:3d:84:49:96:93:a2:0e:53:09:
8b:a6:bc:6b:b7:58:7d:97:64:5c:ef:32:16:ff:28:4a:a1:61:
c0:8e:5b:1d:76:eb:26:a7:b0:c2:8f:9f:6c:45:15:b2:20:91:
a4:f7:fb:b9:3a:3d:39:11:95:c6:5e:f5:e0:98:b9:b4:f6:9e:
ed:5a:20:70:dc:28:a9:3c:5a:e7:fd:36:1e:e9:e6:b1:73:c7:
be:3c:cc:23:74:92:82:fd:ad:b9:65:a8:e5:a8:67:e4:33:92:
4d:90:de:6b:34:34:51:64:ec:87:65:83:26:8b:2d:ab:07:88:
81:68:e0:23:93:7f:e3:7f:0d:61:a0:ad:4c:38:a5:e8:44:e1:
ed:93:74:b9:cb:e4:e7:ef:6a:8d:86:0e:f3:50:29:50:d6:98:
b7:0f:58:c7:a3:31:2c:9b:43:5e:74:02:8b:21:ba:aa:ae:aa:
27:41:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:08 2025 by rpki-client