Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/10WRObO3tmaDpYMoBfmVIGzlnrU.roa
File: 10WRObO3tmaDpYMoBfmVIGzlnrU.roa (raw, json)
Hash identifier: n66l+JhsIf8xYrrxl7QWiJVsW0qqjRpUm2OsP46Hyms=
Subject key identifier: D7:45:91:39:B3:B7:B6:66:83:A5:83:28:05:F9:95:20:6C:E5:9E:B5
Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial: 0194228D60A5BD523D496F9D58AF14DD73DB
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/10WRObO3tmaDpYMoBfmVIGzlnrU.roa
Signing time: Wed 01 Jan 2025 15:47:58 +0000
ROA not before: Wed 01 Jan 2025 15:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198854
IP address blocks: 194.33.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:60:a5:bd:52:3d:49:6f:9d:58:af:14:dd:73:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Validity
Not Before: Jan 1 15:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7459139b3b7b66683a5832805f995206ce59eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:57:fc:53:85:c1:72:f1:34:cd:df:ad:c2:33:
5e:95:f4:89:9c:a2:c7:5a:8e:29:94:25:25:5d:bc:
bb:da:1b:58:e7:c7:b3:4c:89:60:30:fc:08:b5:41:
e0:0c:c3:51:32:43:4d:b3:d9:56:c5:b4:7e:90:64:
b0:51:e2:fa:39:4d:07:be:4b:de:35:ff:f0:3f:46:
76:17:e1:f4:13:b7:ea:f4:28:6e:a3:1e:fe:52:9f:
4c:46:2a:44:55:5e:1c:41:8b:99:cb:71:67:06:27:
ec:4c:45:ad:a3:93:33:32:1f:8b:82:1d:ae:d8:b9:
8a:3a:f0:58:3a:2c:f8:bc:55:ee:c7:e6:4b:a3:dc:
0f:15:9d:13:ff:d1:9f:43:17:99:3d:84:dc:f9:c6:
55:8b:64:0e:cd:aa:86:32:b5:73:1d:35:9a:2e:b3:
03:2b:2a:9b:1a:15:83:72:3a:15:48:4a:5d:89:8d:
ed:0a:48:af:f9:89:78:46:50:c7:67:d6:c3:90:93:
43:c6:b8:dd:9d:3d:5c:19:c5:67:be:a8:72:b2:10:
84:68:7b:47:78:1f:d4:06:90:2a:5b:58:71:83:94:
12:b0:4e:4f:37:eb:fd:6f:24:cb:44:c0:67:99:70:
21:fb:1d:3f:6c:8f:30:23:e4:eb:e5:f5:04:d3:51:
1a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:45:91:39:B3:B7:B6:66:83:A5:83:28:05:F9:95:20:6C:E5:9E:B5
X509v3 Authority Key Identifier:
keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/10WRObO3tmaDpYMoBfmVIGzlnrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.83.0/24
Signature Algorithm: sha256WithRSAEncryption
62:19:64:2d:d9:89:69:63:a9:df:40:be:f1:63:db:43:fa:e8:
87:8f:ef:53:88:08:04:aa:71:7d:3b:94:f6:6c:54:ac:f9:62:
e6:29:93:98:7f:d9:d1:2a:94:11:de:ae:2e:42:32:bd:43:d7:
df:e1:e0:c9:8d:b9:b1:44:15:53:3b:57:5b:5a:54:d3:a1:cc:
86:05:d3:2e:ed:ae:9f:d4:c0:9b:05:c4:cd:4a:d4:e0:9b:e9:
0a:5c:73:96:dc:7b:98:54:83:e8:a3:56:4e:35:53:cf:79:4d:
93:42:40:14:aa:ac:a4:e6:97:09:cd:09:ad:92:a8:65:7c:4d:
34:5c:0a:33:54:ff:64:d7:33:0f:8e:6c:e6:62:bd:8d:ba:89:
88:84:85:d2:7f:23:fd:6a:ed:39:83:88:65:22:34:f5:6b:e7:
94:d1:5e:cb:29:a6:c4:f3:27:6d:7f:de:e0:0f:d0:5c:55:96:
08:95:ac:20:6c:a0:b0:57:41:8c:aa:1b:3b:92:08:f6:db:3f:
a4:8c:5d:07:dd:f7:0f:86:32:d4:71:55:12:74:6b:c3:ce:78:
99:e2:d9:fa:c6:e6:7c:67:f0:50:4c:cd:60:b2:2c:95:90:7d:
c6:32:61:37:76:c6:92:91:68:87:83:49:50:4b:5e:cc:70:8a:
ba:98:61:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:58:11 2025 by rpki-client