Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/U_EQ5jekqkfzEnde1Ryv_SKglkw.roa
File: U_EQ5jekqkfzEnde1Ryv_SKglkw.roa (raw, json)
Hash identifier: cXnEtyK2NW31Ug/q25GQCbINI47bxmk/UuYt64mKZR0=
Subject key identifier: 53:F1:10:E6:37:A4:AA:47:F3:12:77:5E:D5:1C:AF:FD:22:A0:96:4C
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 0194266B710A927E00B275674D6B4D44B03D
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/U_EQ5jekqkfzEnde1Ryv_SKglkw.roa
Signing time: Thu 02 Jan 2025 09:49:23 +0000
ROA not before: Thu 02 Jan 2025 09:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211090
IP address blocks: 194.127.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:71:0a:92:7e:00:b2:75:67:4d:6b:4d:44:b0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Jan 2 09:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53f110e637a4aa47f312775ed51caffd22a0964c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:36:1f:42:08:9d:ba:76:5a:78:26:76:03:
9c:7c:5d:96:25:fc:fa:22:8b:29:e7:47:16:e6:42:
6b:84:0d:a6:28:d1:20:61:27:0f:5b:e3:fe:b3:69:
b0:10:5c:64:93:ad:71:66:2a:21:3f:94:11:a6:64:
9a:a9:f6:43:48:83:42:eb:c6:f8:e0:d7:e8:2b:6c:
02:61:45:eb:fa:cb:25:fb:48:76:09:1c:f6:0e:5b:
04:1d:89:69:0e:4f:f9:cc:8c:25:1e:f7:be:33:cb:
0a:ff:40:da:34:de:ab:1b:3a:9f:4c:2c:a3:62:33:
7f:a8:f2:01:60:ff:7f:16:3c:f6:c8:62:c3:fa:3f:
82:4e:6c:cf:84:9d:97:f3:f3:56:3f:18:02:43:ec:
70:4d:77:e0:7e:52:eb:a7:1d:a0:96:51:14:63:1a:
69:0d:52:3d:f4:b0:04:de:15:2e:d3:6c:ca:ef:e1:
ff:98:13:cd:27:c1:6b:fd:52:b3:7c:89:99:ae:d5:
38:c7:f0:d0:42:f3:02:a3:a1:e7:9c:37:19:9e:60:
94:30:34:79:a1:c3:87:9e:9d:10:63:92:0b:6d:6d:
ff:70:bb:8f:fc:51:dd:9f:fd:3e:cb:5d:ce:e2:3a:
28:87:21:a8:05:f9:d8:12:45:f8:bd:6f:71:99:a9:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F1:10:E6:37:A4:AA:47:F3:12:77:5E:D5:1C:AF:FD:22:A0:96:4C
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/U_EQ5jekqkfzEnde1Ryv_SKglkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.111.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:ac:04:6b:f9:9f:29:47:9a:a8:7e:bb:fc:2e:58:57:bf:f8:
6a:eb:c0:1c:a7:4c:9c:67:4d:1f:86:e1:79:c0:fe:1a:c5:d9:
15:9b:d5:09:2e:b1:f0:46:d7:b3:b3:fc:59:92:58:89:7b:f6:
da:67:73:cf:a1:bb:04:bd:b3:96:8f:a2:60:ea:77:8b:00:de:
d9:32:e6:a0:fa:98:88:8b:11:67:3b:bd:73:76:bc:77:71:0c:
c6:e6:2f:80:9b:b7:fe:53:9a:01:dc:c0:3e:88:cb:43:d2:a4:
c4:d4:24:98:57:38:f2:6e:3b:16:36:e4:10:0c:09:2e:9c:53:
44:29:1e:ab:7e:77:f9:f5:58:91:a2:33:42:77:00:81:b3:13:
b8:68:d2:e6:fe:ad:52:2e:a5:d3:8d:78:48:96:eb:82:7f:6b:
18:7e:9c:2f:aa:bf:69:69:5b:90:73:c7:9d:82:d1:f6:bb:cd:
aa:26:78:dc:67:d9:e7:08:e9:7f:42:31:43:6a:46:cc:33:99:
72:6e:5b:ed:62:c7:cb:9b:8a:14:90:f5:09:f3:06:2d:ed:ac:
6c:a4:a3:2a:bd:b9:8d:c8:c6:3c:b5:a4:e4:02:15:ee:70:cf:
56:82:68:2f:27:f9:ff:c0:c9:06:75:9d:cd:91:da:ac:90:63:
02:43:67:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:04 2025 by rpki-client