Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TaAWX6RunIkoavVYyto4LyLZbsg.roa
File: TaAWX6RunIkoavVYyto4LyLZbsg.roa (raw, json)
Hash identifier: LLRLNHFstGywhUJHWDeOxplmy9vdy8UuI67N0/rWKkI=
Subject key identifier: 4D:A0:16:5F:A4:6E:9C:89:28:6A:F5:58:CA:DA:38:2F:22:D9:6E:C8
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 0194274858E3B16B1AD972009297FB3BE9E5
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TaAWX6RunIkoavVYyto4LyLZbsg.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48555
IP address blocks: 194.225.240.0/21 maxlen: 24
194.225.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:58:e3:b1:6b:1a:d9:72:00:92:97:fb:3b:e9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4da0165fa46e9c89286af558cada382f22d96ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:43:4d:59:73:17:64:9c:f6:b3:01:38:cd:5c:
91:3b:4d:8b:d2:77:ce:f7:df:6c:5b:e9:fb:71:59:
18:5c:8f:1d:78:97:f2:7c:4e:74:14:7f:27:aa:92:
84:88:7f:15:2e:71:d0:7e:eb:a5:ee:ba:5b:bc:9b:
72:d1:1e:07:5c:aa:af:b0:4e:70:85:18:36:e4:e2:
64:10:36:02:58:99:ef:68:6c:fb:97:97:d7:82:8e:
59:8e:d7:80:8b:74:a3:db:f0:ad:1a:bd:d5:0e:0c:
2f:cc:46:a1:98:ac:9d:bb:3f:b4:ad:15:75:69:eb:
e4:a0:e6:98:af:0b:88:3f:1d:12:b6:b3:b1:02:98:
b8:da:84:91:8d:77:8c:4e:e0:9a:a7:32:a4:94:ec:
60:07:63:29:2e:80:bc:13:b1:ab:aa:5f:44:ad:a2:
8a:a0:cb:cb:a8:3d:50:0d:70:0b:40:78:d9:48:fd:
96:56:50:f4:9c:94:5f:38:80:d1:47:f6:e8:1a:20:
57:d6:72:98:ad:b5:ec:00:ea:3c:19:8b:fc:fe:cf:
3f:44:7a:53:f0:01:13:f0:be:82:68:ba:37:20:08:
b3:91:88:ec:c6:89:ab:43:c9:a0:97:f5:91:fb:11:
67:95:3f:4a:26:46:fa:23:d0:58:4e:17:30:c3:55:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:16:5F:A4:6E:9C:89:28:6A:F5:58:CA:DA:38:2F:22:D9:6E:C8
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/TaAWX6RunIkoavVYyto4LyLZbsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.225.240.0-194.225.251.255
Signature Algorithm: sha256WithRSAEncryption
8d:c6:65:b6:f3:c9:10:1a:95:67:5f:1e:61:0d:07:53:bd:50:
9e:c4:bd:eb:0f:a9:ec:d5:ed:24:55:93:dc:ef:06:9e:71:4c:
1a:d6:9d:e2:45:33:97:ea:4d:76:a1:1f:4c:3f:ca:1c:bc:2e:
2e:9c:5d:a5:87:01:f2:6e:df:d1:41:56:c5:37:d5:93:8a:03:
e2:75:e2:9c:bf:bb:34:c1:9b:03:c7:6d:53:fb:58:bf:ce:e2:
6e:cc:d5:22:92:66:c9:44:72:d9:e5:6b:e4:ee:ef:2f:86:bf:
52:79:45:85:ef:58:21:45:46:1a:05:74:b3:60:4f:50:57:c7:
90:66:77:c8:dc:87:3f:24:46:c6:b1:04:bf:fe:d4:ef:92:e1:
59:e6:7c:29:13:6a:02:11:6e:e6:e2:56:62:fc:7f:0f:35:7d:
21:ba:41:cb:75:52:73:0e:d8:8e:a5:5d:e5:40:23:9f:d2:d7:
d6:93:d2:f4:1f:8b:62:ed:6e:bd:a8:e7:84:ad:d6:04:ec:78:
df:80:df:28:54:72:17:99:13:dd:64:b1:24:38:ca:7d:b9:18:
d3:e9:64:82:8f:92:0f:68:0a:e3:36:51:bf:3d:fa:23:20:35:
9c:ef:13:ae:08:12:f4:f0:88:b8:9b:65:c7:80:4d:ab:55:36:
10:51:4c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:12 2025 by rpki-client