Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/hwA0UWKL_slMireOaLXKWCZKMxk.roa
File: hwA0UWKL_slMireOaLXKWCZKMxk.roa (raw, json)
Hash identifier: Cs+6QJ4Ir+A+/zhLEyGmKYQ1SWGWIXNvlkhllKogGis=
Subject key identifier: 87:00:34:51:62:8B:FE:C9:4C:8A:B7:8E:68:B5:CA:58:26:4A:33:19
Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial: 019421B25130522A7B952B613B1F0A184506
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/hwA0UWKL_slMireOaLXKWCZKMxk.roa
Signing time: Wed 01 Jan 2025 11:48:41 +0000
ROA not before: Wed 01 Jan 2025 11:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207799
IP address blocks: 194.49.71.0/24 maxlen: 24
194.49.76.0/24 maxlen: 24
194.49.84.0/24 maxlen: 24
194.49.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:51:30:52:2a:7b:95:2b:61:3b:1f:0a:18:45:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87003451628bfec94c8ab78e68b5ca58264a3319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:5a:ba:90:48:cb:70:d4:1a:5b:e2:a8:c9:
88:e3:43:dd:3d:3e:6f:ca:43:5a:ed:9f:71:95:fe:
4d:8e:df:50:6d:5e:2a:f6:11:17:c3:16:61:41:73:
5e:4e:9c:88:83:e2:de:90:7f:d6:6a:fd:33:2e:2a:
61:cf:17:83:e6:68:21:7b:7f:13:43:0b:ee:d0:88:
f9:a3:d6:ac:16:0a:a5:c1:7f:21:21:b4:33:c6:26:
e0:ef:2e:38:8e:5a:eb:b3:9f:a5:d4:bf:9e:0d:83:
77:ed:a2:76:c7:96:a7:35:eb:c5:d1:26:44:58:58:
7a:6a:4a:28:53:2a:3d:bb:90:02:11:1b:65:c5:a8:
b6:84:01:c0:26:2e:51:b1:77:78:e1:83:1e:fd:01:
fe:ef:c8:0f:65:5d:a8:c9:0e:8d:f1:ee:4e:ae:e1:
c1:5c:bd:43:64:c5:2e:4f:c2:20:59:1b:eb:ba:2f:
d1:62:f1:c9:ed:68:3f:01:fd:f9:9d:30:45:1a:99:
4c:65:8d:91:80:74:0f:81:e4:f1:4a:2e:45:50:1d:
4b:10:92:89:e8:0e:00:98:e5:28:96:ec:8b:9c:5e:
91:74:52:98:8a:bc:55:a3:95:9a:89:41:51:6c:1f:
3a:2a:e8:f4:2e:9a:39:c5:22:24:cd:3d:92:66:6a:
28:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:00:34:51:62:8B:FE:C9:4C:8A:B7:8E:68:B5:CA:58:26:4A:33:19
X509v3 Authority Key Identifier:
keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/hwA0UWKL_slMireOaLXKWCZKMxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.71.0/24
194.49.76.0/24
194.49.84.0/24
194.49.93.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a8:d4:e2:b5:ee:2f:1d:9f:2f:dc:e0:f2:d4:06:a3:ff:8b:
cc:25:87:44:13:d4:bc:60:55:96:14:66:ac:26:9e:e6:5b:9a:
d7:85:64:56:b3:6b:9d:6b:72:8e:c3:cc:fc:ef:53:1a:8a:3f:
8c:1e:87:1a:93:e5:3e:2c:f1:c7:2a:be:33:bb:bf:02:e5:00:
01:28:d0:67:c7:bc:68:64:76:dc:d6:63:ad:3b:1a:49:a3:66:
56:51:42:89:5f:80:8f:65:e3:a5:41:71:57:a3:a8:39:57:fc:
36:73:31:f3:01:68:48:ac:8a:58:39:c9:4b:20:e4:31:54:f9:
fe:47:01:79:bd:98:63:ff:e4:14:4c:9b:36:c0:07:63:aa:af:
01:39:ef:04:fe:8c:e0:17:78:bf:92:7d:75:ce:24:80:13:b1:
ec:f9:0e:c0:01:bb:a2:56:c7:8b:c2:52:da:cc:66:cc:43:ff:
8b:a8:15:a1:c9:78:96:cf:f8:fe:4b:4a:71:dc:ac:dc:0c:4c:
e0:6f:9c:de:55:1d:a0:a4:f6:9f:54:d7:07:c4:9d:09:26:21:
43:59:ed:c6:c6:32:5e:68:c7:b8:20:2f:55:d3:82:5e:71:45:
09:09:58:25:5d:68:1e:7f:e6:e1:50:0a:d7:da:b3:44:d7:fb:
0b:41:4c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:08 2025 by rpki-client