Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/psTRvusZFk5Ps_Sd4pnp1hlanU8.roa
File: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (raw, json)
Hash identifier: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=
Subject key identifier: A6:C4:D1:BE:EB:19:16:4E:4F:B3:F4:9D:E2:99:E9:D6:19:5A:9D:4F
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019427B68EB0F8A8EE2BA76FD25F52E0B03C
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/psTRvusZFk5Ps_Sd4pnp1hlanU8.roa
Signing time: Thu 02 Jan 2025 15:51:02 +0000
ROA not before: Thu 02 Jan 2025 15:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39628
IP address blocks: 194.50.97.0/24 maxlen: 24
2001:67c:314::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:8e:b0:f8:a8:ee:2b:a7:6f:d2:5f:52:e0:b0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Jan 2 15:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6c4d1beeb19164e4fb3f49de299e9d6195a9d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:d9:be:9d:35:b8:5b:43:31:db:e4:51:5d:
ab:af:72:e8:02:f9:8d:0d:e9:d6:0b:81:b6:f1:7b:
74:52:76:66:c0:49:3e:9d:e6:bf:48:5d:2f:cc:b1:
f5:29:aa:e0:be:50:7e:f4:b9:5f:e8:f8:3c:8a:15:
34:6e:d3:0b:1d:4b:57:59:e2:b8:d7:fe:5a:2d:58:
3a:d9:47:cd:68:01:8d:70:21:f7:93:7e:02:f6:e6:
6b:93:f2:d0:85:3d:1a:9f:78:f6:45:32:c0:2a:59:
ff:b6:81:bf:68:76:2b:aa:0b:e7:e2:ad:e3:6b:3e:
72:c8:d1:87:f4:97:72:cd:c8:98:52:eb:0d:ff:39:
e3:60:b5:a2:60:e4:44:63:0a:be:e8:ed:75:ce:bd:
6e:0e:1f:fa:55:81:16:f0:a0:90:3b:0c:0a:98:d6:
c5:32:cb:eb:c6:cb:bb:bf:79:e2:67:45:a1:0b:10:
8e:fc:b7:84:0b:df:e2:54:2b:ab:4a:10:c4:df:40:
29:d3:6d:5e:69:67:3d:16:71:f3:8f:03:64:f6:6c:
78:0d:be:13:ef:cb:42:c2:04:3a:66:d8:08:ec:23:
2d:c3:4d:79:d4:10:52:b5:d2:9e:cc:10:2e:b3:a0:
2d:84:77:ce:9c:0a:f7:c5:d7:83:e3:42:2a:38:2c:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C4:D1:BE:EB:19:16:4E:4F:B3:F4:9D:E2:99:E9:D6:19:5A:9D:4F
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/psTRvusZFk5Ps_Sd4pnp1hlanU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.97.0/24
IPv6:
2001:67c:314::/48
Signature Algorithm: sha256WithRSAEncryption
27:ec:e5:6e:e8:13:16:42:d7:f3:e2:3e:bb:35:fa:0a:2e:85:
39:7c:bb:d5:38:15:c8:64:8c:00:18:91:ef:e0:2b:e1:18:b8:
0c:95:42:da:9f:1b:57:ff:88:93:67:d1:ef:8d:82:3f:7f:7a:
5b:51:e9:d3:ed:16:a0:55:e3:0d:49:57:2c:24:7d:00:54:27:
28:2e:69:33:e7:80:a2:62:a1:46:08:e7:42:86:d4:56:b2:93:
4b:36:0d:6a:6f:7e:44:62:b2:8e:ec:7a:c0:17:b5:d6:a6:c5:
dc:c8:d4:6c:3b:f2:ee:ca:64:5a:fe:e2:5d:e9:35:45:74:89:
b5:d8:ff:77:e1:e5:92:77:4b:35:e5:a3:4e:4e:8f:80:8e:7e:
91:cb:35:6b:d3:1b:3b:92:a4:8c:eb:12:16:03:4a:d2:28:86:
72:3c:1a:0c:5b:85:c5:ec:7e:e2:96:09:c3:67:eb:ab:25:cf:
38:1f:78:20:1b:b9:92:b5:fe:ea:9e:a2:82:f8:57:46:4c:58:
3c:57:2d:70:92:21:28:6e:ca:a7:5a:aa:5c:b1:12:fa:55:e6:
1b:42:9c:d9:6c:26:99:6b:8f:67:d8:8a:e3:56:9d:5f:76:ad:
15:aa:ea:2e:56:80:dd:57:fc:a9:3c:fa:f5:b2:e5:97:76:52:
59:33:5d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:37 2025 by rpki-client