Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/e9a8ONYDtpKM0KoJ-RMqjCOdosE.roa
File: e9a8ONYDtpKM0KoJ-RMqjCOdosE.roa (raw, json)
Hash identifier: tuQ0e/czULwl9GWCOBeKLYiHJIJXkYnYmwwjDNg8QOE=
Subject key identifier: 7B:D6:BC:38:D6:03:B6:92:8C:D0:AA:09:F9:13:2A:8C:23:9D:A2:C1
Certificate issuer: /CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Certificate serial: 019421B1C38D7C4746F6CE8C24C851E4A795
Authority key identifier: 00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/e9a8ONYDtpKM0KoJ-RMqjCOdosE.roa
Signing time: Wed 01 Jan 2025 11:48:05 +0000
ROA not before: Wed 01 Jan 2025 11:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207874
IP address blocks: 194.31.12.0/24 maxlen: 24
194.31.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:c3:8d:7c:47:46:f6:ce:8c:24:c8:51:e4:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0039f741686da11e79ae7c5e486aa290808cb1b7
Validity
Not Before: Jan 1 11:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bd6bc38d603b6928cd0aa09f9132a8c239da2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:dc:73:e1:f4:c9:75:05:3b:16:bc:53:fa:
0f:aa:06:a0:a1:ac:b6:5a:ce:93:18:07:25:d1:95:
e4:f6:af:37:bc:5e:89:6d:49:94:e5:0c:89:d1:df:
08:0e:0d:5c:e2:87:68:84:bd:fe:5b:55:7c:43:d8:
bf:7c:bd:c1:41:e0:d8:4a:ae:df:ad:d5:ae:5f:81:
20:4a:1e:61:36:c8:ff:28:7d:a8:6e:14:3a:b6:91:
73:25:79:53:13:fa:cd:f5:3b:8f:a5:df:67:2f:3d:
ce:0c:69:7e:71:1a:35:b9:4b:ff:5f:da:16:f0:b6:
16:b0:9e:ee:55:50:0d:6e:66:e2:26:6b:5e:31:56:
8b:3f:6c:59:49:02:aa:c4:fa:ba:3f:90:38:fd:e6:
20:38:36:00:87:a5:8a:8b:75:44:30:a8:87:cf:cd:
ff:88:e5:f6:aa:32:e1:29:27:c9:03:5b:72:40:e5:
83:be:e6:55:d7:73:a9:6d:ec:54:89:d0:72:b5:1e:
3e:64:23:67:b8:bb:1c:11:bd:47:c3:b1:d5:e4:17:
1c:92:c5:30:fb:fb:90:00:9f:de:da:8e:70:11:ec:
60:28:b1:02:af:bf:5f:4b:30:13:83:d7:16:98:fe:
7d:65:ad:47:cb:06:da:e1:ea:35:c4:e2:bc:76:ef:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:D6:BC:38:D6:03:B6:92:8C:D0:AA:09:F9:13:2A:8C:23:9D:A2:C1
X509v3 Authority Key Identifier:
keyid:00:39:F7:41:68:6D:A1:1E:79:AE:7C:5E:48:6A:A2:90:80:8C:B1:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADn3QWhtoR55rnxeSGqikICMsbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/e9a8ONYDtpKM0KoJ-RMqjCOdosE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3c616f-0138-4ffb-af17-55f41fdf0e63/1/ADn3QWhtoR55rnxeSGqikICMsbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.12.0/23
Signature Algorithm: sha256WithRSAEncryption
35:56:0d:a2:63:f8:34:4e:c3:76:78:5f:6e:1a:e6:0e:f6:8a:
ac:95:7e:a0:1f:49:f5:28:90:22:e3:0c:98:90:e8:4d:39:53:
b0:11:3f:15:32:a2:46:77:b4:21:e3:a6:ff:76:3d:83:0c:da:
13:d4:83:b5:85:63:14:67:2f:f5:33:40:6b:9f:c0:e3:77:dc:
96:ed:f6:06:27:35:de:2d:b4:0f:8b:f8:11:c3:58:14:5a:33:
6d:54:6d:ed:86:b9:23:bd:af:bd:35:d9:99:0e:ec:d7:e4:98:
50:39:ae:9d:89:27:f0:85:61:69:cc:73:3c:2f:1a:89:25:41:
33:86:e7:be:21:0f:87:e1:3e:84:56:cb:9b:8f:53:eb:a8:b1:
8f:51:8d:5b:99:e7:78:0e:2b:2b:88:2e:c4:48:15:5a:d1:7d:
3c:de:5c:99:89:dc:3a:8c:2e:d3:07:40:b1:81:07:14:24:5e:
7d:5f:ca:d6:4c:e8:42:98:86:a1:1a:15:4f:24:a6:b4:27:d0:
9a:38:88:24:25:81:a3:3b:71:2e:c7:99:95:a4:71:1b:3d:52:
7b:c8:60:72:de:bd:44:ab:88:38:f0:1c:0d:b9:a3:01:8c:4e:
bc:a6:ec:ee:78:fd:5b:b6:7e:e4:c4:4b:4c:f6:72:0c:97:34:
25:3e:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:34:36 2025 by rpki-client