Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-ID2D7QUIB6aL3TGkVMvinxiCK8.roa
File: 1-ID2D7QUIB6aL3TGkVMvinxiCK8.roa (raw, json)
Hash identifier: Pp55em/uV0Be8tBdyYatLH1/jjZczM1w0IijTPIUwKo=
Subject key identifier: F8:80:F6:0F:B4:14:20:1E:9A:2F:74:C6:91:53:2F:8A:7C:62:08:AF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0194222017FF708FE83637E04A6B3422662C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-ID2D7QUIB6aL3TGkVMvinxiCK8.roa
Signing time: Wed 01 Jan 2025 13:48:36 +0000
ROA not before: Wed 01 Jan 2025 13:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15440
IP address blocks: 194.124.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:17:ff:70:8f:e8:36:37:e0:4a:6b:34:22:66:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 1 13:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f880f60fb414201e9a2f74c691532f8a7c6208af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:14:2a:23:11:92:00:02:2d:02:9d:ea:c9:
0d:df:92:84:aa:9d:3a:94:86:ba:3d:98:8f:66:c8:
7f:29:46:e0:10:88:b0:7b:dd:2f:90:71:71:e6:52:
35:ec:c8:32:b4:84:ed:45:41:8b:6b:26:a5:b6:ee:
9c:26:ff:23:80:78:11:ed:60:86:bd:01:20:64:48:
46:54:e3:10:29:a7:41:b3:97:11:42:0a:57:04:c7:
35:5b:82:b2:39:35:94:fd:4c:d2:e7:77:19:96:d1:
bc:ac:b9:e9:51:76:6a:88:6a:6d:a6:df:a7:ee:d4:
73:b8:b6:b3:e7:cf:8f:ca:4a:9f:eb:68:4c:3f:85:
dd:21:04:37:9b:a8:0e:82:87:08:66:ee:9f:9a:2d:
66:c3:c9:98:33:75:dd:ff:c6:c4:c1:ba:82:cc:be:
bf:d8:f1:57:29:cd:31:86:a7:c3:b1:be:ef:3c:c0:
80:bd:71:6b:1b:ca:29:0b:b8:8d:d5:a6:a4:08:e0:
ef:7d:c5:67:aa:09:7d:78:97:23:1a:57:a0:f6:60:
3b:f9:b1:60:46:c1:e1:79:d0:cd:7f:e1:6b:c4:28:
1f:d5:d0:35:5f:47:49:fb:0e:78:62:d3:da:aa:19:
42:8b:dd:fa:46:4b:30:a1:3c:d7:eb:73:69:53:e3:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:80:F6:0F:B4:14:20:1E:9A:2F:74:C6:91:53:2F:8A:7C:62:08:AF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-ID2D7QUIB6aL3TGkVMvinxiCK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5a:d8:35:ed:b7:ef:99:fe:6c:cd:85:af:88:c5:b1:b9:3d:
b2:35:56:15:b5:ed:8a:17:9c:6e:92:16:e6:55:9a:7f:2f:18:
24:43:1f:df:07:80:a1:be:92:ec:a0:a9:8a:0b:d5:c7:95:2c:
de:fb:98:5f:30:b5:50:5b:81:fd:42:75:bf:78:3f:4f:42:2a:
84:82:ef:2d:4b:f6:93:34:a3:2d:a7:dd:76:8d:6c:ea:6c:79:
72:c2:6e:3f:00:c0:b8:15:0b:5a:66:24:9e:c7:ac:ed:88:49:
65:62:54:02:00:10:94:a1:26:65:97:95:79:e3:aa:55:e9:b4:
08:3e:be:06:aa:50:11:a1:a3:84:6c:e6:0f:08:c8:96:ef:ba:
61:1d:e9:99:d5:03:50:8d:29:bc:0b:26:bd:41:22:88:58:47:
26:4c:13:9a:fc:3b:5a:96:8c:3f:5a:c7:92:b8:ac:c6:84:55:
7c:e5:36:76:35:b9:e1:72:d6:fe:6e:e0:d9:34:90:6f:2b:45:
0c:a3:16:8e:89:32:66:92:09:f5:6f:87:58:78:a9:c4:91:54:
02:99:11:51:41:35:e4:18:e5:8f:62:6c:3d:a9:00:6e:60:7f:
1a:cf:42:9e:cf:4c:c1:24:64:51:1b:46:a7:33:70:d4:4a:42:
3b:d7:64:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:55:16 2025 by rpki-client