Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/Iwa2WjVDIZS6E4vl286hIpDRTL8.roa
File: Iwa2WjVDIZS6E4vl286hIpDRTL8.roa (raw, json)
Hash identifier: Ml9mAf4D4cdmyuWDVRKJcbVlY2mEksJYokJMfWOm/SM=
Subject key identifier: 23:06:B6:5A:35:43:21:94:BA:13:8B:E5:DB:CE:A1:22:90:D1:4C:BF
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 0194206871D4259C1AEF5BFDD4A766B8C0C6
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/Iwa2WjVDIZS6E4vl286hIpDRTL8.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399976
IP address blocks: 194.54.146.0/24 maxlen: 24
2a12:c6c0::/29 maxlen: 64
2a12:c6c0::/32 maxlen: 48
2a12:c6c1::/32 maxlen: 48
2a12:c6c2::/32 maxlen: 48
2a12:c6c3::/32 maxlen: 48
2a12:c6c4::/32 maxlen: 48
2a12:c6c5::/32 maxlen: 48
2a12:c6c6::/32 maxlen: 48
2a12:c6c7::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:71:d4:25:9c:1a:ef:5b:fd:d4:a7:66:b8:c0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2306b65a35432194ba138be5dbcea12290d14cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:be:a8:04:0b:33:8d:17:f9:09:28:97:8f:
32:81:09:ee:d2:2e:21:33:e1:68:28:92:03:28:59:
47:36:02:24:34:8f:eb:48:d9:6f:ea:22:0c:4d:e9:
80:f6:c4:dd:97:21:6e:fa:bd:d9:0d:05:85:00:38:
13:ba:52:1f:47:c5:2a:0c:ae:88:ef:f6:c8:97:79:
a4:dd:12:4d:e1:4e:6f:e5:6f:cb:17:e0:1a:63:bb:
52:96:2c:a2:d4:e7:e4:4d:4b:b9:4a:43:58:4a:e0:
97:a4:e8:3f:3b:23:d2:ee:98:e9:44:46:fd:89:41:
6f:0a:12:c8:6e:e3:f2:2a:a8:f2:30:53:62:07:97:
7c:d2:02:f4:1b:fe:91:43:e6:7f:b6:52:ad:7d:46:
71:df:c1:73:95:73:40:e5:17:06:94:ac:ab:d6:f4:
ad:5c:54:e5:cc:98:be:e7:2d:ff:5c:12:55:3e:91:
4a:8e:3a:f5:e4:18:4d:b7:a1:d8:fd:47:85:93:c9:
d3:90:8e:a7:5f:9b:18:cb:f5:e9:35:87:20:08:4f:
16:ed:f3:d6:3b:9e:46:66:8c:0d:5f:f0:da:7e:39:
ae:aa:e7:72:34:22:79:3a:63:93:e2:c5:f8:cf:a3:
39:1d:fc:1b:9c:d0:b5:52:da:ca:0e:29:42:5b:7d:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:06:B6:5A:35:43:21:94:BA:13:8B:E5:DB:CE:A1:22:90:D1:4C:BF
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/Iwa2WjVDIZS6E4vl286hIpDRTL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.54.146.0/24
IPv6:
2a12:c6c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:47:dd:cd:c6:fc:8c:cb:31:65:aa:ef:33:e2:4d:50:7c:65:
b5:ee:4e:18:5f:29:4f:60:43:1f:4d:f3:9e:20:95:71:45:db:
a6:d2:0b:72:1b:6a:76:73:f4:49:91:ce:98:bf:cf:f2:90:3f:
71:f2:1a:37:8b:c7:66:2b:cc:2d:b8:a2:fb:89:83:a5:e8:5c:
97:09:74:f4:c2:c8:90:3d:6a:b5:bc:10:9d:b7:b3:05:d7:8a:
ab:4d:de:c2:f9:cc:0a:22:26:62:bf:29:48:d2:7d:92:6a:2b:
f7:58:a9:32:35:b4:88:63:d1:18:cc:65:c7:4e:74:08:1e:8d:
25:b8:9f:18:81:d8:f2:47:60:74:22:d4:d5:42:9b:d1:4a:63:
53:b4:59:00:29:03:20:d3:31:93:07:97:cd:1d:f3:53:40:f7:
a7:45:ec:21:b6:45:d7:9e:b6:51:7a:cc:72:d2:64:3d:c2:93:
87:bc:79:72:3f:69:1c:75:56:16:e3:91:bb:74:77:63:b0:70:
95:ab:5d:3e:9a:ab:0a:24:57:d6:d7:5a:78:2b:1a:0e:a5:ab:
75:32:86:49:4c:7a:70:16:52:23:a5:56:60:55:8f:41:8f:59:
c4:db:2c:5a:89:83:99:66:c3:3b:dd:9a:b6:ca:f7:bd:b9:b8:
ec:e3:d2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:53:59 2025 by rpki-client