Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/Vd7ep1V7ja8rYIgwKvFOtZq4gy0.roa
File: Vd7ep1V7ja8rYIgwKvFOtZq4gy0.roa (raw, json)
Hash identifier: qbkrw3ma+AsEEUvI47lqqCL8eAGk/ZsP3EmHAoTEO0o=
Subject key identifier: 55:DE:DE:A7:55:7B:8D:AF:2B:60:88:30:2A:F1:4E:B5:9A:B8:83:2D
Certificate issuer: /CN=e6e8adc72014e57a74e3044eb166e760968f2395
Certificate serial: 019425FD84FEC3374E185B3DEB0F0CF8BAEC
Authority key identifier: E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/Vd7ep1V7ja8rYIgwKvFOtZq4gy0.roa
Signing time: Thu 02 Jan 2025 07:49:19 +0000
ROA not before: Thu 02 Jan 2025 07:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29686
IP address blocks: 194.213.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:84:fe:c3:37:4e:18:5b:3d:eb:0f:0c:f8:ba:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e8adc72014e57a74e3044eb166e760968f2395
Validity
Not Before: Jan 2 07:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55dedea7557b8daf2b6088302af14eb59ab8832d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d4:e2:23:0e:9d:a5:fa:6b:1b:7e:48:61:42:
1c:56:a6:24:39:14:fc:14:ac:89:95:15:fc:23:9e:
48:cc:19:9b:83:2c:b9:ea:db:53:51:37:07:09:2e:
09:29:af:87:1f:bb:5c:ac:46:24:4f:3f:6d:7c:cd:
dd:92:e7:2f:7b:be:41:7e:e2:e0:bf:bf:98:18:5f:
33:9d:04:26:66:19:8a:a5:37:dd:73:0b:bb:cd:1b:
63:c0:9b:5c:87:63:37:72:18:58:fb:24:ee:44:4a:
c9:92:02:ee:f6:6c:f0:0d:71:9f:4c:b5:8d:7c:9e:
57:8d:c4:b7:fe:94:6b:b1:fa:ed:20:4b:7b:b4:e3:
b2:85:3b:bd:db:fd:d1:44:bc:63:a6:b7:b5:45:66:
4e:24:f2:d2:69:b1:4f:f1:0d:63:13:f0:34:40:d5:
a0:70:35:90:5f:88:13:5f:5b:1e:8b:e2:9d:30:64:
85:fa:af:68:b7:7f:a8:04:28:32:de:16:49:26:92:
c6:fd:82:17:67:19:7d:04:20:86:31:93:59:a1:6d:
6c:41:d1:01:67:3a:ac:5b:11:b0:67:4b:fe:f4:4f:
17:18:8e:12:71:20:b9:99:6f:e3:20:93:e2:ef:5f:
55:be:87:0c:6f:a6:6c:64:aa:c4:f6:be:fb:91:33:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DE:DE:A7:55:7B:8D:AF:2B:60:88:30:2A:F1:4E:B5:9A:B8:83:2D
X509v3 Authority Key Identifier:
keyid:E6:E8:AD:C7:20:14:E5:7A:74:E3:04:4E:B1:66:E7:60:96:8F:23:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uitxyAU5Xp04wROsWbnYJaPI5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/Vd7ep1V7ja8rYIgwKvFOtZq4gy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7a365-d487-4a28-9d7e-cecd8a182bdf/1/5uitxyAU5Xp04wROsWbnYJaPI5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.5.0/24
Signature Algorithm: sha256WithRSAEncryption
30:6a:7d:34:df:e8:44:7e:e3:3a:91:bf:98:9c:86:d2:a6:18:
99:dc:4f:0a:21:e4:49:85:3b:9e:6f:60:04:5c:72:5e:a7:e4:
03:c3:f0:aa:c9:c7:d1:7a:e0:22:36:5c:80:1b:cc:89:a0:87:
88:57:5e:5d:89:dd:56:a3:b5:7c:11:65:c9:b3:c0:ba:f4:3f:
3d:cb:b8:0b:68:06:f7:27:39:74:c8:18:60:30:ef:41:a0:29:
16:a2:6a:0c:e5:e1:96:b0:d6:62:c8:0e:10:74:92:f8:43:53:
f6:0b:31:49:2a:91:5f:a7:e0:0a:35:6e:95:78:f8:ce:7c:9a:
e7:ba:f0:21:d3:97:1e:be:6a:df:66:56:fc:06:d0:bc:ee:0f:
15:f8:5b:93:17:df:bb:92:5c:3e:f8:26:04:09:2d:46:44:dc:
52:45:ff:ce:d8:dd:02:25:11:81:10:d7:3f:76:a3:3a:bd:be:
68:69:c4:b1:8c:a5:88:f3:c7:4d:94:b5:47:d0:df:c7:2e:1f:
3c:ff:3d:a4:f6:3b:97:67:39:49:05:46:2b:c3:cf:e9:69:94:
3e:7d:9f:18:30:13:fb:76:0b:f5:fb:ac:0a:1c:42:63:ab:df:
9b:b5:3f:9c:d1:4d:b4:0a:d4:75:84:f4:b5:d8:81:e4:44:00:
95:0d:57:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:36 2025 by rpki-client