Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/9hd9KKMOXfRw8_1mO3rVMZa_cro.roa
File: 9hd9KKMOXfRw8_1mO3rVMZa_cro.roa (raw, json)
Hash identifier: cyRJ1RzV3b3CFd/FS87c1e5MAYJo30+w8wpnj/hVLs8=
Subject key identifier: F6:17:7D:28:A3:0E:5D:F4:70:F3:FD:66:3B:7A:D5:31:96:BF:72:BA
Certificate issuer: /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial: 01942369821B98B3A627CCC97D0F7A5EC213
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/9hd9KKMOXfRw8_1mO3rVMZa_cro.roa
Signing time: Wed 01 Jan 2025 19:48:24 +0000
ROA not before: Wed 01 Jan 2025 19:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25122
IP address blocks: 194.126.33.0/24 maxlen: 24
194.126.34.0/24 maxlen: 24
194.126.38.0/24 maxlen: 24
194.126.44.0/24 maxlen: 24
194.126.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:82:1b:98:b3:a6:27:cc:c9:7d:0f:7a:5e:c2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Validity
Not Before: Jan 1 19:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6177d28a30e5df470f3fd663b7ad53196bf72ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:95:60:22:4c:b9:0d:a8:68:9f:da:33:2d:cb:
39:8f:36:3f:81:ce:d6:ae:da:90:8f:69:da:87:30:
d8:ff:a8:7b:fa:c1:b0:66:4f:75:84:2d:fe:cf:ba:
7d:e8:69:06:74:d6:91:b7:fb:80:ac:11:84:1a:14:
29:90:46:db:ce:fd:68:c0:d3:15:93:a8:68:e3:0f:
e6:33:b2:ce:8a:e8:e6:2c:d9:00:7a:6d:78:d9:30:
89:70:4c:c5:61:db:1e:ad:df:8a:50:af:84:5a:cc:
a1:0e:c2:37:19:fd:ce:27:f9:8c:1d:09:24:0b:57:
8d:ef:62:c5:c9:49:19:7e:f2:cb:e4:14:6e:01:db:
21:e3:4c:70:76:3f:d2:64:0a:68:b4:3c:32:9a:29:
09:f0:e0:b3:52:7b:d7:6a:34:c3:5d:2e:dc:62:23:
f2:46:62:99:5e:53:84:a1:53:f5:c6:7a:3d:62:4e:
33:d4:f0:87:42:d4:80:99:c2:b8:73:6b:33:58:90:
94:43:43:e3:42:aa:79:12:32:5e:4f:55:10:d5:31:
e7:d3:bf:0b:b1:cb:ac:df:81:2c:96:19:02:f3:c7:
e3:6f:c2:95:31:e6:0c:da:cb:15:9a:cd:ab:28:da:
21:5f:1b:78:54:f4:ee:bd:cd:6d:ca:a2:6e:91:00:
1a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:17:7D:28:A3:0E:5D:F4:70:F3:FD:66:3B:7A:D5:31:96:BF:72:BA
X509v3 Authority Key Identifier:
keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/9hd9KKMOXfRw8_1mO3rVMZa_cro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.33.0-194.126.34.255
194.126.38.0/24
194.126.44.0/24
194.126.54.0/24
Signature Algorithm: sha256WithRSAEncryption
77:86:f7:6d:d3:bf:08:db:3f:22:b4:22:4e:7e:b3:6e:19:f4:
aa:40:84:05:c4:89:a7:01:36:17:3f:42:e9:85:9f:65:b6:a0:
d2:f2:4a:45:4a:8b:96:4b:49:0f:83:e3:49:7c:c3:e5:61:2a:
1b:12:61:f6:c7:dc:ed:6c:60:a2:0f:d0:9e:48:23:76:e7:32:
02:62:de:60:b1:35:49:7d:40:8c:47:dd:ca:0b:d1:1b:e9:eb:
52:03:f6:28:ea:48:d0:0f:24:1a:cd:a9:4e:e9:e2:8f:a4:8f:
e5:88:ee:2e:bd:14:f0:5c:60:32:de:5e:ff:1a:66:62:4c:e8:
78:c4:8e:fc:ab:3e:f1:7a:6d:ab:1a:0b:f6:73:30:a8:25:64:
5d:f5:35:38:5c:f0:5f:3a:87:b8:80:c9:59:7b:e8:7c:4a:e4:
67:41:2c:6b:aa:a8:14:25:9b:33:20:83:10:1e:43:c9:2b:f7:
cf:36:7b:5a:d0:8f:6b:5b:d9:54:d9:59:f1:42:62:72:4c:bd:
54:47:ab:bb:4e:f1:9a:21:7c:1c:fe:9b:4a:ea:6c:82:11:e7:
bf:8f:09:74:c4:c0:d1:1c:dc:d3:4a:38:06:fb:f9:bc:62:90:
fb:e7:e1:03:02:15:b9:b9:54:2c:31:ab:a3:06:83:2a:fb:17:
e7:39:fb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:17:46 2025 by rpki-client