Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/74UxeEZGGUp4hcEj6IOpMbtbMQY.roa
File: 74UxeEZGGUp4hcEj6IOpMbtbMQY.roa (raw, json)
Hash identifier: ptmjV2tZkQpAgK/kc2iedynulu5N2vpF6ojZ4cIXBag=
Subject key identifier: EF:85:31:78:46:46:19:4A:78:85:C1:23:E8:83:A9:31:BB:5B:31:06
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 019421B1E7676D5478CFE4085293CA44F8DA
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/74UxeEZGGUp4hcEj6IOpMbtbMQY.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57107
IP address blocks: 194.190.128.0/24 maxlen: 29
194.190.129.0/24 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e7:67:6d:54:78:cf:e4:08:52:93:ca:44:f8:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef8531784646194a7885c123e883a931bb5b3106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:55:66:74:cc:95:15:40:5b:68:73:01:d7:e4:
6b:0e:2c:02:93:65:41:17:c1:47:c3:8d:5c:ad:4c:
e0:c2:22:9f:97:f6:92:1b:0d:4f:8f:69:d3:25:08:
cc:b3:83:f5:cd:65:95:18:03:30:d2:a9:26:d8:0a:
87:c3:0b:2c:f1:e0:3b:d5:8c:7c:f0:5c:f0:82:d1:
cd:45:f9:95:0f:b0:1e:e3:49:7a:b6:55:4a:b6:19:
b9:d9:d5:5e:3b:c4:8d:21:b9:e2:e8:04:3d:80:0e:
7c:26:be:53:ad:a1:28:6f:4c:ac:62:d8:35:66:a8:
10:44:44:4a:3a:b7:b4:66:9a:94:e4:96:9a:a7:38:
87:7e:3f:95:e2:48:fe:dd:85:0c:56:84:73:f2:9e:
56:b8:6b:8b:e6:a3:6e:7e:23:ef:89:3e:2b:d5:e6:
47:eb:8a:f1:84:fe:79:6d:8c:c1:41:5a:cd:40:49:
63:ea:b2:85:3a:f7:a9:90:35:5d:a8:3c:98:83:98:
2f:5f:77:91:98:f0:38:4f:eb:96:e4:1c:76:74:8d:
ff:d2:e6:df:2d:b9:ae:63:01:63:27:13:96:bd:d2:
cc:25:23:81:05:b9:7e:e9:de:ab:cb:05:d0:26:fe:
22:27:63:33:12:fe:da:27:69:53:c2:b4:22:b9:1e:
c1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:85:31:78:46:46:19:4A:78:85:C1:23:E8:83:A9:31:BB:5B:31:06
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/74UxeEZGGUp4hcEj6IOpMbtbMQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.190.128.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:6f:78:af:a3:49:62:11:3a:cc:3f:02:f8:68:07:e5:2f:2a:
76:cc:63:ff:70:87:b8:80:a6:d9:03:22:22:d8:3e:f2:31:70:
e1:36:8a:cf:e0:f5:c6:d8:1c:70:91:41:1a:bb:73:23:cf:33:
7c:62:a4:fa:8e:08:d9:8c:01:7b:7b:ad:ab:a5:df:ab:b1:48:
a2:41:6f:c5:fd:03:55:45:e5:1a:ce:b2:e3:ad:de:94:cc:ee:
1b:8d:80:3c:12:84:94:76:61:89:41:17:34:64:47:0b:b4:9e:
1e:6f:ef:ed:f1:ee:ff:64:68:3b:65:ec:19:70:7f:4f:96:23:
c8:4f:e0:b7:94:77:1d:0a:4e:29:17:92:de:5e:a8:bc:c8:a1:
3e:7c:21:22:6c:dd:6a:a5:ff:20:6c:43:d4:c2:89:f5:f8:27:
cc:4b:e7:49:55:de:79:55:7f:d6:74:e6:66:d4:17:d7:59:0b:
e7:c9:99:e9:2e:ac:74:77:f0:d4:a6:b6:84:55:ad:86:8d:69:
d3:99:27:df:1e:5a:0d:4b:95:09:b9:b4:57:28:25:ba:84:18:
2c:29:1a:89:27:b3:61:0c:18:37:b6:38:39:22:be:93:7f:10:
2a:7e:fc:1d:5f:ef:f4:a6:37:90:07:e0:5b:55:f2:2d:c7:ec:
ea:7b:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:45 2025 by rpki-client