Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/slEa5UmLy7uclTfFj-q9FjlKerU.roa
File: slEa5UmLy7uclTfFj-q9FjlKerU.roa (raw, json)
Hash identifier: 5+Nl0WOxV28qBWNFtIb46w9H3Fv63geuF1o8ltl50q4=
Subject key identifier: B2:51:1A:E5:49:8B:CB:BB:9C:95:37:C5:8F:EA:BD:16:39:4A:7A:B5
Certificate issuer: /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial: 0194B7118749FFF309BDA08BE3387637DF2B
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/slEa5UmLy7uclTfFj-q9FjlKerU.roa
Signing time: Thu 30 Jan 2025 11:56:06 +0000
ROA not before: Thu 30 Jan 2025 11:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215567
IP address blocks: 194.187.208.0/24 maxlen: 24
194.187.210.0/24 maxlen: 24
194.187.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:11:87:49:ff:f3:09:bd:a0:8b:e3:38:76:37:df:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Validity
Not Before: Jan 30 11:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2511ae5498bcbbb9c9537c58feabd16394a7ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:14:a7:b9:9a:c9:c5:89:9d:ab:ac:d9:cd:eb:
6e:0c:f6:e0:1c:d5:a4:6c:d8:b8:e4:3a:d1:c8:26:
f3:13:d4:fb:bb:3f:2a:4d:cc:37:b2:65:08:72:f5:
cd:76:33:73:68:de:f0:3a:82:9f:a1:4d:4d:01:67:
2e:fb:90:5f:30:cf:73:cf:11:76:79:dd:89:71:60:
72:72:92:b7:3d:8a:fc:be:69:c4:e0:0a:7c:c4:b5:
31:f5:64:31:a1:8a:13:88:2b:2b:94:74:a4:5b:6c:
32:33:28:44:ea:34:dd:9a:0e:2b:d4:96:a9:49:76:
bf:c6:7d:ac:db:a2:f2:70:ea:2a:2b:19:ce:51:47:
9d:13:55:f0:4a:70:4c:e2:1a:33:74:7c:b9:09:bb:
a9:90:06:f5:b5:c4:12:99:48:a0:25:28:0c:05:ff:
43:49:a2:7c:8e:66:35:02:36:9b:e8:ec:2e:9f:87:
60:0b:1b:7e:a2:18:d0:04:e6:0b:1e:27:16:4b:90:
41:21:4c:84:66:85:db:70:43:8b:67:34:72:4a:8b:
60:88:b5:19:a2:8e:95:1c:62:34:59:1e:85:b3:59:
ee:57:11:09:07:fc:21:ba:d9:37:de:bf:39:b4:55:
cc:43:82:ef:5f:14:ea:c8:af:78:c4:6a:9f:b2:cc:
67:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:1A:E5:49:8B:CB:BB:9C:95:37:C5:8F:EA:BD:16:39:4A:7A:B5
X509v3 Authority Key Identifier:
keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/slEa5UmLy7uclTfFj-q9FjlKerU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.187.208.0/24
194.187.210.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:df:2a:ca:79:06:03:bb:60:e7:b3:84:97:31:6f:ef:32:df:
32:41:f6:07:9d:16:0f:51:ee:67:ea:44:7d:0f:04:0c:8d:17:
0c:65:52:8b:e7:87:d5:e3:9d:07:df:dc:7f:5e:2a:67:84:25:
1b:5b:d1:1f:86:56:eb:ac:fe:56:51:ed:48:ff:3e:f6:69:db:
6e:d4:0c:5d:84:d0:0d:b9:5e:e7:76:e1:7b:a6:d7:84:c4:4a:
f9:7f:ab:cf:fc:ea:07:14:b6:b8:7b:c0:cd:28:df:da:fc:bd:
50:75:2e:d2:9a:f8:70:f5:46:f3:63:47:92:08:f9:aa:7a:53:
13:0f:0c:9a:4a:98:e1:c3:03:bc:7b:25:b9:cd:71:0e:08:a3:
80:c5:20:5b:28:3b:a3:03:a0:fb:ba:be:18:d8:55:f1:41:1d:
8e:a8:69:c4:19:ab:ee:32:30:0b:2b:14:87:fd:f6:48:b3:2a:
c9:9d:b3:bf:c4:54:17:0c:c5:26:da:d6:bb:bb:8f:1a:cd:d2:
3e:a7:4e:bc:ef:ef:b6:76:a7:31:ab:62:55:74:b9:59:f2:64:
e2:73:b4:41:a6:9e:4e:96:81:44:ec:34:00:ab:df:17:32:51:
74:7d:62:33:d3:71:85:1d:4d:9e:d7:db:8f:f9:34:d9:b3:c6:
99:b2:9d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:50:59 2025 by rpki-client