Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/p7ugqnkl0eeyrlpJX13_lCmtLp0.roa
File: p7ugqnkl0eeyrlpJX13_lCmtLp0.roa (raw, json)
Hash identifier: f1GZebrpy+RrPUG5oAnHmyhNSF3EcTIUbcYbxWqO8rs=
Subject key identifier: A7:BB:A0:AA:79:25:D1:E7:B2:AE:5A:49:5F:5D:FF:94:29:AD:2E:9D
Certificate issuer: /CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Certificate serial: 0194258F9941A6A821B17E723C24180563EE
Authority key identifier: DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/p7ugqnkl0eeyrlpJX13_lCmtLp0.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197185
IP address blocks: 194.213.102.0/23 maxlen: 23
194.213.102.0/24 maxlen: 24
194.213.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:99:41:a6:a8:21:b1:7e:72:3c:24:18:05:63:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db4d52ab09b16d72f4c3e48cc4b49025d083676d
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7bba0aa7925d1e7b2ae5a495f5dff9429ad2e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:80:dd:e5:5b:42:d2:c0:5a:fb:c2:69:f4:
3a:50:1b:47:4c:5e:52:9b:26:6c:94:d2:1b:a8:57:
41:84:80:fb:32:2a:f4:d3:8d:ba:ea:82:a7:39:cc:
94:d5:14:7a:9f:24:4b:f0:de:d2:08:df:42:5a:99:
0f:29:c2:f3:c9:f3:f3:cd:bc:7e:9f:41:22:98:b0:
c3:d7:c8:3b:82:1c:07:53:ef:38:25:fc:7e:1b:4b:
38:47:10:47:ab:68:1a:be:29:4d:e7:27:42:a2:5c:
7c:91:16:66:53:d0:42:ff:df:9e:e2:59:00:f8:00:
12:14:1d:42:de:0c:30:4e:13:10:57:2a:db:e8:d1:
5a:ad:90:8b:9a:0f:f5:4c:17:b3:ce:64:4d:6b:6e:
4a:2d:18:8e:f6:5b:8f:a7:7a:63:71:69:2b:80:85:
a2:20:cb:40:79:67:0d:c3:ad:7b:7c:18:87:72:c9:
b0:7d:2d:75:9e:4e:ee:70:e6:58:cf:d3:aa:14:57:
10:40:d9:3e:49:b2:5a:d3:9a:e7:58:70:6f:b8:06:
16:93:87:80:e9:87:cf:66:8f:29:8d:39:be:79:8b:
46:56:60:23:fd:46:a7:81:47:cf:67:19:83:6c:48:
10:d4:ac:b8:22:e1:de:7b:c0:96:d0:35:9a:2b:20:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BB:A0:AA:79:25:D1:E7:B2:AE:5A:49:5F:5D:FF:94:29:AD:2E:9D
X509v3 Authority Key Identifier:
keyid:DB:4D:52:AB:09:B1:6D:72:F4:C3:E4:8C:C4:B4:90:25:D0:83:67:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/201SqwmxbXL0w-SMxLSQJdCDZ20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/p7ugqnkl0eeyrlpJX13_lCmtLp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/ba2bad-ed35-45c3-b84e-22bdef99bcea/1/201SqwmxbXL0w-SMxLSQJdCDZ20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.102.0/23
Signature Algorithm: sha256WithRSAEncryption
af:a7:bd:6e:d4:61:1f:9f:b9:35:87:8b:0a:54:07:64:50:f0:
80:19:87:ff:63:20:4e:21:6e:ca:15:92:29:74:ca:10:6a:c2:
16:d3:58:66:b0:73:7c:fc:2e:0b:d8:7d:2e:56:6d:d5:29:f9:
23:4d:ec:88:31:2b:b3:9d:b4:13:94:4a:38:1f:c9:7d:67:7d:
08:5e:23:a0:e5:ac:1f:ec:a1:10:bb:2a:a3:63:20:66:9b:bc:
4e:f7:3b:37:95:4c:d7:7c:93:6c:82:f2:5a:b4:84:d1:b5:ab:
64:48:03:1d:f5:70:fd:b5:35:a6:50:0f:63:93:7e:9b:28:2f:
b6:96:e5:4d:42:57:02:46:17:99:43:b5:02:48:a8:f3:d1:a5:
7c:f5:37:66:49:23:64:fd:82:a6:73:9d:69:40:c3:e8:3f:c3:
28:88:26:a7:91:1b:a8:e8:cb:83:06:f9:63:be:70:ca:6f:88:
82:d0:8b:bf:be:b5:fd:b3:30:d2:09:2e:00:dc:75:3a:dc:62:
54:29:67:ae:02:4f:01:9c:ba:ad:f5:cf:d1:cb:b1:8f:66:ee:
5d:5a:da:ef:43:27:47:74:5c:38:f7:a9:4f:ec:8e:e9:24:a4:
43:3a:f6:6b:8e:49:87:62:2f:48:5c:c4:ec:db:48:42:ff:41:
df:c1:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 19:03:07 2025 by rpki-client