Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa
File: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (raw, json)
Hash identifier: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=
Subject key identifier: D6:B3:50:0B:D3:E6:7F:92:B5:79:16:2E:D6:19:21:AF:9C:D9:93:64
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 01942823A0EC1C9D72C0E68F7072495082BF
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa
Signing time: Thu 02 Jan 2025 17:50:10 +0000
ROA not before: Thu 02 Jan 2025 17:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60709
IP address blocks: 194.102.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:a0:ec:1c:9d:72:c0:e6:8f:70:72:49:50:82:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Jan 2 17:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6b3500bd3e67f92b579162ed61921af9cd99364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:67:f1:28:59:08:17:73:96:49:e1:3c:01:
a5:bb:e1:34:23:ae:4b:11:20:88:5b:85:c2:e7:e4:
b2:1a:54:55:30:53:13:dc:86:96:c7:c5:dd:7e:79:
ba:22:f1:bd:af:42:fe:7c:c7:fb:56:9c:be:2b:de:
1f:20:e2:f1:92:1f:79:95:ef:91:2c:ab:38:89:dd:
76:76:10:29:73:2d:57:ab:b8:62:69:1b:08:b9:ae:
bd:c5:1e:f4:43:07:87:f7:95:7f:22:ba:97:00:8a:
6d:7b:f5:3a:2d:e7:06:b4:e5:41:83:91:43:80:8f:
b8:e1:41:68:d9:2d:d1:ba:36:e1:ec:69:ad:6d:55:
b8:e4:ed:85:7a:63:61:17:9a:11:62:53:ff:96:38:
92:21:ce:b1:e3:72:7b:02:9a:8d:4e:c6:72:02:b7:
87:ce:12:d3:ed:36:86:0c:a4:40:1a:9c:02:49:bb:
de:9a:00:f4:84:17:0d:0a:9e:24:0d:ce:ac:e4:bd:
f1:86:60:55:80:3b:ed:f5:f3:d8:17:dc:1e:6e:dc:
34:f1:d3:7d:8c:2f:49:90:de:1e:a0:e3:b9:19:2f:
fe:1b:1a:ba:dc:3d:24:95:90:69:66:83:6c:6e:19:
9b:37:65:1b:ca:54:62:2b:e9:d7:c9:2d:db:ca:03:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B3:50:0B:D3:E6:7F:92:B5:79:16:2E:D6:19:21:AF:9C:D9:93:64
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.126.0/24
Signature Algorithm: sha256WithRSAEncryption
74:17:09:0e:5f:51:f9:1c:45:fd:85:0c:06:1a:f9:99:a6:79:
18:27:88:02:37:81:a5:e7:89:26:10:c8:b9:64:b5:d1:4f:3c:
f3:f4:fc:69:63:f0:4a:3f:62:9e:d8:cb:ff:e5:b6:46:a2:f7:
98:e0:a3:2d:14:23:c3:a2:dd:df:88:70:45:5c:0c:84:7d:19:
96:01:9a:90:24:46:c7:2d:d2:76:12:90:c0:0c:bc:ea:12:aa:
eb:90:24:36:e5:8b:72:91:55:44:6f:a1:47:37:66:1f:da:4e:
a2:27:3d:eb:b7:b7:3d:0e:a9:62:d8:88:ab:d3:04:a1:e8:9a:
cb:19:30:0a:97:ea:5e:71:4e:59:f5:a9:7d:d1:0f:25:46:8f:
56:ca:18:ea:b6:be:40:b1:7d:0e:71:65:72:94:ac:04:a4:d8:
93:10:2d:58:5b:e6:90:62:93:79:f8:2f:08:3a:a9:31:0c:20:
e0:5a:3a:88:30:ed:d8:6f:f1:f5:85:2f:5d:3d:f2:c4:f4:26:
dc:a6:83:67:34:af:7e:96:44:46:0a:11:5b:a0:d7:3d:95:50:
dc:67:7f:1f:9c:5e:88:84:4c:7a:01:4a:b7:bb:2a:93:88:69:
55:05:21:62:2f:d4:4a:f6:8c:e3:df:92:71:6d:bc:51:5b:f6:
a1:ac:c7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:26:44 2025 by rpki-client