Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/1-AU6Gnoq31NHxflgGui7pQnafXQ.roa
File: 1-AU6Gnoq31NHxflgGui7pQnafXQ.roa (raw, json)
Hash identifier: EGLLwW1ofOs0SYvfXY13qswF8cFAf0RF4OYVmpVNmog=
Subject key identifier: F8:05:3A:1A:7A:2A:DF:53:47:C5:F9:60:1A:E8:BB:A5:09:DA:7D:74
Certificate issuer: /CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Certificate serial: 01942445A37AB106366B1DD18DB03B47FE6D
Authority key identifier: A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/1-AU6Gnoq31NHxflgGui7pQnafXQ.roa
Signing time: Wed 01 Jan 2025 23:48:51 +0000
ROA not before: Wed 01 Jan 2025 23:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215329
IP address blocks: 194.56.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:a3:7a:b1:06:36:6b:1d:d1:8d:b0:3b:47:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b3eb443c06a3dcc088e2caa05ce09cf8d4e7a6
Validity
Not Before: Jan 1 23:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8053a1a7a2adf5347c5f9601ae8bba509da7d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ef:ba:91:eb:dd:72:51:d2:51:31:ea:7c:e2:
59:74:0e:69:91:0b:94:10:61:a1:c0:39:4e:3d:a1:
ff:f9:89:7e:3f:8a:23:8a:2e:73:8e:e6:11:96:2e:
da:1d:56:0b:96:ba:ae:67:19:f2:c6:10:1a:10:f2:
b1:a9:6a:a7:a4:34:69:96:97:1f:8f:d2:67:34:52:
f1:be:cd:76:c5:5c:ac:de:d2:b7:8c:38:af:94:1f:
78:3b:c0:90:7e:e0:24:42:ec:ef:4e:9c:db:a8:2f:
fb:a7:93:90:22:0e:20:b5:f8:64:fc:9d:85:7c:39:
65:a1:57:4a:59:97:db:3d:05:25:28:c5:69:19:a8:
d9:b6:7e:9e:dd:e2:69:af:fe:f7:4e:67:e5:9c:27:
31:9c:0c:e7:ff:39:c5:6b:0f:54:74:29:64:cd:58:
bf:ce:86:57:0b:10:5f:9b:72:02:b5:5c:99:1c:b3:
a3:7e:ac:7e:b7:76:84:a5:c6:05:8a:f5:b6:8d:1b:
4b:b9:69:b6:b1:16:12:2d:57:42:33:0f:65:2e:94:
e4:4e:ba:95:22:e0:3e:2c:95:94:51:a0:fa:fe:89:
64:dc:60:3e:dd:97:6b:eb:ae:5a:fc:9c:40:bf:11:
a3:be:f5:37:72:ca:cd:73:39:85:9b:47:3b:e6:0a:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:05:3A:1A:7A:2A:DF:53:47:C5:F9:60:1A:E8:BB:A5:09:DA:7D:74
X509v3 Authority Key Identifier:
keyid:A8:B3:EB:44:3C:06:A3:DC:C0:88:E2:CA:A0:5C:E0:9C:F8:D4:E7:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLPrRDwGo9zAiOLKoFzgnPjU56Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/1-AU6Gnoq31NHxflgGui7pQnafXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6bda82-a2e1-45c9-a181-313de4892b8d/1/qLPrRDwGo9zAiOLKoFzgnPjU56Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:18:2d:9b:1e:43:67:fd:45:73:b6:b5:b0:21:fb:91:76:0c:
7a:31:39:0b:7a:0c:30:3f:85:52:be:58:aa:39:f2:95:f3:58:
a1:42:a5:73:34:6a:af:48:10:b8:b1:2a:2f:c9:1d:e3:1a:10:
f7:fd:68:e4:d6:92:9c:40:0e:e2:8a:b5:75:eb:59:8a:81:53:
f8:b0:cd:f4:eb:f3:1d:54:21:07:8a:c5:2e:fb:2f:37:ed:ff:
5c:23:af:d6:2f:ba:1e:5f:98:b3:c0:1e:5a:86:25:32:ca:f3:
42:13:d4:f2:83:74:67:b8:dd:68:f7:a7:13:ae:a7:d2:d9:cd:
02:c3:22:ca:57:f3:9a:05:b6:82:19:aa:6c:cd:db:cf:bc:0f:
e5:de:e1:cf:b5:cf:d0:61:06:ea:ed:aa:58:35:85:09:12:dc:
5a:07:08:f9:75:05:cf:67:d0:34:ba:50:46:b2:49:7d:9f:70:
82:98:5f:79:b9:1c:1b:21:12:11:eb:e2:3d:10:95:c7:9a:0c:
b3:b5:36:fb:b7:6a:bc:56:48:b4:bc:c7:8b:f2:61:3a:85:30:
5f:a1:bf:66:c9:25:6e:56:f6:35:07:9e:e7:2c:55:96:04:5b:
0c:34:e6:e1:4c:8a:14:77:3f:50:56:1f:04:4f:13:bb:f3:35:
a4:b9:b2:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:15:39 2025 by rpki-client