Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/S1K-LNOfEdqMwJPR6JwjXy3twNM.roa
File: S1K-LNOfEdqMwJPR6JwjXy3twNM.roa (raw, json)
Hash identifier: 6+dgtQWWnCxkd6rViHnDLK3NWbLzGQNeNx6DA6f+PL0=
Subject key identifier: 4B:52:BE:2C:D3:9F:11:DA:8C:C0:93:D1:E8:9C:23:5F:2D:ED:C0:D3
Certificate issuer: /CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Certificate serial: 019422FAFF79682E6D3A4451D53974C34051
Authority key identifier: F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/S1K-LNOfEdqMwJPR6JwjXy3twNM.roa
Signing time: Wed 01 Jan 2025 17:47:42 +0000
ROA not before: Wed 01 Jan 2025 17:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200530
IP address blocks: 194.5.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:ff:79:68:2e:6d:3a:44:51:d5:39:74:c3:40:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f939b03f1294ebd35a3b15d695d7e91f8cb41fa0
Validity
Not Before: Jan 1 17:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b52be2cd39f11da8cc093d1e89c235f2dedc0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6f:b8:c3:69:28:0a:8a:41:69:89:45:74:ac:
f8:65:cc:b0:54:6b:2b:14:0f:85:f1:23:33:5f:00:
8c:03:ba:24:c8:12:54:51:2e:f7:8b:ed:60:18:ce:
88:37:e2:76:63:5c:de:32:1b:ac:23:42:3e:2c:8c:
9f:e1:21:76:b1:e8:90:7d:2e:a9:c9:e3:95:4a:ae:
18:cc:92:dc:52:36:77:a2:b3:49:48:38:de:f3:e7:
4a:cd:2c:cb:c4:ec:dc:39:90:5d:53:7f:33:7e:67:
ab:36:d7:f8:ed:9b:97:d1:f5:76:61:3c:9f:b9:23:
36:0c:c5:82:af:70:72:0d:49:3f:a8:8d:cf:90:a8:
12:66:06:c1:42:0c:ac:ab:11:20:c3:38:c8:f9:7d:
6e:09:aa:9c:5f:0a:c2:63:ea:27:c9:fc:d7:6e:e4:
16:7e:69:0c:7a:23:0d:bf:ac:b4:44:c9:f5:bc:00:
97:dd:cf:d3:96:23:55:d0:ce:36:65:de:1b:27:2c:
12:08:8b:7a:55:c7:7f:85:e4:ee:66:8c:70:9b:f7:
e9:15:54:5b:6e:04:c0:29:de:ef:15:cd:f1:73:5a:
cb:34:61:ce:f4:50:38:e1:c2:30:3e:3a:4e:c5:f8:
cf:9a:db:44:a5:1d:b3:fb:17:08:74:e0:71:c6:29:
3b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:52:BE:2C:D3:9F:11:DA:8C:C0:93:D1:E8:9C:23:5F:2D:ED:C0:D3
X509v3 Authority Key Identifier:
keyid:F9:39:B0:3F:12:94:EB:D3:5A:3B:15:D6:95:D7:E9:1F:8C:B4:1F:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TmwPxKU69NaOxXWldfpH4y0H6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/S1K-LNOfEdqMwJPR6JwjXy3twNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/0c9de8-cef2-4d8d-a920-76594a19177c/1/1-TmwPxKU69NaOxXWldfpH4y0H6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:3f:b7:14:0e:85:da:1a:8f:0b:67:df:32:51:ce:d2:5d:51:
ac:b8:5b:a4:d1:e1:37:fd:b0:02:90:eb:79:68:88:df:4e:c7:
97:59:35:71:21:40:e5:64:63:1e:b1:aa:e1:2a:a1:82:5c:6b:
25:23:a5:0f:38:1e:e2:42:cc:12:b3:32:c0:d4:4b:6c:ab:d3:
01:5f:62:ac:7e:dd:94:ea:32:41:38:e1:c1:a4:da:ee:17:e3:
c5:4b:76:99:27:1c:85:0d:f8:13:cb:0a:55:5d:09:d6:2a:ad:
0d:6c:cb:4f:fa:0c:c2:d0:54:87:fc:b1:f6:2e:b0:cc:30:1c:
53:ab:a4:5a:e1:d1:2c:5f:ad:74:b6:c9:f3:4f:e9:11:3a:94:
6d:64:96:40:00:42:80:a7:f4:0c:54:e8:83:c1:a3:a2:00:6a:
7b:85:d9:41:d6:26:43:63:a2:03:38:b2:72:38:26:30:a6:dc:
9c:c7:34:46:6c:b3:a5:00:a5:a6:8f:df:53:2b:28:d2:f9:1b:
6f:d1:0f:0d:d5:ec:a2:86:e7:ef:63:4f:cf:4d:9e:a5:18:8d:
e7:58:c6:b6:a6:ca:ec:9b:7e:11:2c:72:3d:3b:f8:ef:a9:75:
ce:1f:2e:15:62:c1:ba:96:44:59:97:3b:d9:68:9b:3f:0c:92:
11:30:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:44:39 2025 by rpki-client