Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/_c_c0M25UwpZ7eHBk4pzeagMlVQ.roa
File: _c_c0M25UwpZ7eHBk4pzeagMlVQ.roa (raw, json)
Hash identifier: 8jqy4hlWYt18GsvMo6F88//T4bDxnnNcBAAfWfrvPK8=
Subject key identifier: FD:CF:DC:D0:CD:B9:53:0A:59:ED:E1:C1:93:8A:73:79:A8:0C:95:54
Certificate issuer: /CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Certificate serial: 01942143D2A14C03F17AB0A3BD44140548B7
Authority key identifier: A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/_c_c0M25UwpZ7eHBk4pzeagMlVQ.roa
Signing time: Wed 01 Jan 2025 09:48:00 +0000
ROA not before: Wed 01 Jan 2025 09:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202373
IP address blocks: 194.34.156.0/22 maxlen: 22
194.34.158.0/24 maxlen: 24
194.34.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d2:a1:4c:03:f1:7a:b0:a3:bd:44:14:05:48:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a59caa2a73680698b2c9e1a6c9641a74f3ce76e8
Validity
Not Before: Jan 1 09:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdcfdcd0cdb9530a59ede1c1938a7379a80c9554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:73:c2:bf:e2:41:6b:8d:b1:c0:2a:03:9b:
42:9d:b9:19:eb:0c:ca:5b:61:14:cd:2b:3d:87:ef:
2f:37:29:60:2a:04:45:5f:cb:6f:7d:32:31:56:c2:
c3:63:6a:e4:44:bd:7d:1a:cf:7b:fb:a8:32:96:28:
6c:98:e7:6f:2b:fa:b6:38:cb:86:21:fa:e3:13:3c:
c3:d1:33:5d:eb:9d:95:d9:9a:51:fb:48:5e:55:e9:
b1:2a:6d:6c:86:36:df:38:b8:50:98:79:2a:34:b8:
f3:49:d7:ae:03:c2:8f:41:89:43:5d:fc:81:cf:db:
0d:4b:c7:9e:9e:eb:a0:1d:fa:55:a3:52:a2:b6:da:
fc:5b:4a:54:64:3c:a8:2f:d2:d1:50:38:77:8c:f2:
6d:81:e8:94:40:a0:7b:1e:74:5b:93:88:aa:31:7d:
24:ff:40:ca:3a:5e:59:e1:d1:50:73:03:7d:69:07:
ef:ce:f7:02:04:77:da:7e:23:41:83:f6:c5:36:51:
55:9a:7f:63:c2:30:af:00:9b:78:fc:64:2c:41:b8:
e1:48:e2:1b:e8:c0:c0:76:b7:99:6d:c6:6d:d7:d9:
69:11:44:fa:2d:44:b7:61:75:06:12:14:89:49:42:
c0:76:fd:c2:62:ee:bf:89:fd:3e:e1:e6:d1:f2:42:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:DC:D0:CD:B9:53:0A:59:ED:E1:C1:93:8A:73:79:A8:0C:95:54
X509v3 Authority Key Identifier:
keyid:A5:9C:AA:2A:73:68:06:98:B2:C9:E1:A6:C9:64:1A:74:F3:CE:76:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZyqKnNoBpiyyeGmyWQadPPOdug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/_c_c0M25UwpZ7eHBk4pzeagMlVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/dd672f-5336-4f35-b3ef-ae91ab342be1/1/pZyqKnNoBpiyyeGmyWQadPPOdug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.156.0/22
Signature Algorithm: sha256WithRSAEncryption
41:b3:b2:7f:8e:bd:90:f6:86:be:0f:ec:bb:32:63:a5:65:60:
b6:47:6c:2f:77:7f:b6:d8:35:57:6b:26:b2:9b:5a:e0:c2:51:
bd:d1:ac:7e:11:cc:82:0a:a1:38:62:0d:51:3b:a1:7b:51:ee:
15:14:4c:f6:79:62:0a:28:33:2b:de:16:c6:cf:2e:10:fe:bc:
ac:56:1c:2e:26:55:60:f2:b5:3e:51:83:8d:9c:74:55:6b:2f:
c0:d9:c3:af:44:1b:69:12:63:75:0e:04:30:94:7b:eb:08:32:
4b:11:8b:36:ec:b0:7f:3b:52:89:c1:46:62:37:27:2b:52:74:
4c:87:e8:ee:15:3d:d4:6a:da:e1:a0:9b:d1:20:f1:44:5a:3e:
49:c3:c1:d7:e7:d7:0f:d7:54:97:4a:ba:4e:ff:37:b7:3e:2a:
01:9b:c5:7e:d3:10:2d:fb:3a:65:c0:05:a5:8f:8d:44:17:96:
e0:51:9e:69:e9:35:ea:4b:0c:4f:3f:23:38:e3:35:f0:fe:7c:
89:34:f4:b9:96:19:19:9d:4a:94:24:8a:c6:57:53:79:48:18:
ae:5b:5c:37:cf:d0:19:c8:e1:35:69:17:a1:fe:96:09:62:99:
43:7d:55:c5:a6:99:6a:76:37:71:d1:7a:c2:90:38:9b:73:2e:
2c:3a:6e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 15:25:13 2025 by rpki-client