Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa
File: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (raw, json)
Hash identifier: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=
Subject key identifier: B4:48:B9:BE:EB:F5:78:B3:E3:FB:75:67:64:E0:43:7C:EB:9A:AA:5A
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 019420D5CE6CF9498868B82A7E1FC2EBF8A0
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57468
IP address blocks: 194.56.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ce:6c:f9:49:88:68:b8:2a:7e:1f:c2:eb:f8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b448b9beebf578b3e3fb756764e0437ceb9aaa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:d7:6c:b4:ca:36:29:bb:8f:f5:db:e7:9d:
f9:ef:1d:ae:6e:a5:7e:b6:db:30:2d:f9:bc:64:aa:
38:63:7e:20:5c:3f:e5:72:48:90:76:ec:17:d3:65:
cd:b8:f6:92:63:66:23:50:61:25:7a:76:aa:fd:c3:
2f:5b:b3:90:6e:64:91:5a:47:88:10:2c:b8:e5:44:
78:8e:cc:6e:f5:33:d9:81:29:57:3e:62:f7:d6:ea:
32:04:cf:3d:25:be:c0:cc:c2:14:85:c6:5a:4b:b1:
8c:3f:2e:36:e6:3c:31:66:f9:bd:00:a8:10:b1:09:
44:c4:07:75:a1:3c:50:f2:7d:16:76:17:b1:a7:3a:
a4:19:3f:83:db:bc:9f:28:42:b1:05:35:3a:5c:7e:
0f:27:05:d4:3f:cc:e1:f2:67:2a:58:2b:78:b8:56:
8f:85:e1:ea:f3:5d:ea:3c:94:8b:13:d4:f7:ed:b9:
04:8c:47:64:6d:95:a1:6a:2c:44:d2:7b:21:4c:dc:
ff:38:56:d4:a1:8b:9f:f2:b4:e8:b4:c2:12:a3:40:
38:7f:21:7a:a6:a2:29:b7:41:7a:55:17:9c:3b:b9:
0f:f1:6d:59:90:f7:7d:ec:85:44:66:ca:6e:a7:3e:
55:49:6f:1b:f7:10:7b:44:c7:f6:3f:80:3b:f5:32:
e0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:48:B9:BE:EB:F5:78:B3:E3:FB:75:67:64:E0:43:7C:EB:9A:AA:5A
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.183.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:a7:1e:96:84:85:a7:25:42:6d:04:9f:0d:6e:11:40:e4:ab:
b1:e4:71:b9:1a:cf:8b:c7:d1:a7:3c:30:1b:e2:18:13:ca:ba:
5a:6f:b3:1c:d3:e7:a6:0d:fb:df:32:23:e2:dd:0a:1e:2d:f6:
7a:c2:22:23:9f:8f:e4:8e:b1:84:18:6a:2c:80:84:3b:74:ad:
02:c2:9a:f7:40:9e:07:a2:b2:5e:2e:a4:34:95:62:cc:0b:f5:
f7:d0:6b:6f:b0:c3:8f:29:88:7f:0d:67:7c:62:8c:69:62:2f:
6a:4f:f1:88:25:22:6c:9c:f8:41:d2:ad:ae:98:d1:23:a4:74:
e5:d0:29:97:ca:4d:a3:83:91:8e:5b:13:60:34:e9:22:06:95:
2e:ec:da:5c:3f:21:ff:25:14:85:15:6c:73:8e:e8:c4:0a:5b:
65:4e:65:0a:ab:fd:87:5c:ed:f1:20:c3:56:22:97:d5:10:89:
93:35:be:fe:21:25:d0:b0:6a:a8:1e:57:43:ab:33:16:a5:71:
27:3a:f4:80:27:6c:7c:6c:46:72:45:c1:91:ab:22:8f:8b:53:
3c:dd:b5:d0:6d:93:fd:67:ba:73:63:53:8c:b7:cc:11:9e:11:
7e:10:7d:65:f9:0c:c7:8b:b2:be:2c:d6:c5:82:ab:15:f8:a4:
3a:c5:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:39:14 2025 by rpki-client