Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/7Atpb8ICQNgBoE2VxygDoXR916c.roa
File: 7Atpb8ICQNgBoE2VxygDoXR916c.roa (raw, json)
Hash identifier: 9LfiFF+kHY8QeDVlYR0804RgSHl5CYTGB3eoMEBzGw0=
Subject key identifier: EC:0B:69:6F:C2:02:40:D8:01:A0:4D:95:C7:28:03:A1:74:7D:D7:A7
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 0194258F11112E180D54F1FFB4FE69E5B303
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/7Atpb8ICQNgBoE2VxygDoXR916c.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33915
IP address blocks: 194.53.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:11:11:2e:18:0d:54:f1:ff:b4:fe:69:e5:b3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec0b696fc20240d801a04d95c72803a1747dd7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:69:6c:92:d3:72:aa:d2:e6:ed:e1:5b:2b:65:
e8:04:c2:28:a6:26:6d:78:5b:0c:6f:c0:42:40:48:
d8:cc:d2:6c:4f:e2:70:fc:fa:39:58:af:e0:e8:ab:
17:3c:80:db:25:37:1c:c9:1c:f4:5c:71:a8:2a:45:
b5:02:69:c4:6e:33:8f:34:e4:3d:96:16:23:29:b2:
77:83:32:ef:5b:b7:5b:ba:06:c4:22:f3:56:37:83:
2a:8f:d0:a3:e0:ba:8c:3b:25:37:7e:c7:62:c7:aa:
4c:48:3a:f5:81:3a:ee:81:c9:68:3c:34:d0:c1:08:
63:0f:c8:ca:ca:ad:28:f8:c5:a9:58:ee:73:f9:9f:
d2:92:c7:52:d7:45:cb:17:10:04:00:25:94:08:33:
99:c6:8a:a6:8b:85:33:50:4e:cb:c9:a9:ca:f4:73:
67:33:fc:89:69:d1:86:e0:8e:4c:d9:b8:6c:e9:8d:
1c:72:ba:a9:fc:ac:8d:be:2d:4b:5c:ad:25:f8:a9:
0a:40:18:f2:8f:5e:2e:b1:c4:d8:9e:a5:ee:c1:7d:
03:1d:ee:72:08:29:18:e8:ee:96:e8:b5:03:19:c2:
53:1b:5a:34:b9:f5:dd:71:c5:a1:4a:4b:44:0f:ba:
be:86:d2:24:5e:40:8b:cc:40:c9:72:6c:e2:6f:a8:
9b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0B:69:6F:C2:02:40:D8:01:A0:4D:95:C7:28:03:A1:74:7D:D7:A7
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/7Atpb8ICQNgBoE2VxygDoXR916c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.10.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:9b:89:79:4d:47:86:87:f7:49:69:12:a2:34:97:d8:55:42:
70:f1:60:26:da:83:28:0d:d1:22:ca:1f:b0:68:65:7c:f9:42:
00:a2:3c:2f:55:49:b5:d6:a0:c6:21:6a:29:8c:0a:e9:ea:83:
2c:93:8d:d8:42:62:7a:21:1e:5a:31:db:5c:34:46:f0:76:f6:
ad:39:50:06:f1:b9:b4:fb:d9:2e:56:8f:d8:59:6f:11:3d:d4:
23:ce:98:b4:9d:92:a9:45:68:fe:70:81:54:7d:55:70:1a:c5:
21:9e:8f:1e:8b:ed:5d:cb:7d:7e:11:e9:56:f0:47:8d:e7:a2:
0b:7c:84:39:5f:8e:b4:f8:a5:99:8f:4e:8f:95:5f:89:4d:f5:
cb:d8:0f:d7:de:46:a6:28:4a:64:c3:b1:82:03:17:ae:33:d0:
59:2a:fa:37:9e:24:ae:fd:48:96:d4:03:47:24:17:2f:35:06:
f0:a2:28:6b:4c:e2:22:7f:8f:53:e9:dd:b3:ea:dc:22:bd:26:
48:d0:5c:d6:f7:2e:8e:ab:f3:af:43:92:7f:f4:38:1f:d5:5e:
e3:9b:81:c8:b7:9b:03:3c:fa:7d:25:a9:c3:c4:8f:9e:50:91:
91:a3:14:23:dd:3a:a1:a0:7a:6a:0c:53:3d:26:50:a0:f4:26:
79:40:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:50:50 2025 by rpki-client