Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/snxuxsWrIVBOH4PJX-798Ws3-_I.roa
File: snxuxsWrIVBOH4PJX-798Ws3-_I.roa (raw, json)
Hash identifier: eUyKfNa1R42Kf80mOcHHq43jou6WV27ocUUMJBjr/10=
Subject key identifier: B2:7C:6E:C6:C5:AB:21:50:4E:1F:83:C9:5F:EE:FD:F1:6B:37:FB:F2
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 0194228DCA94B0242AD643E9529D91139982
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/snxuxsWrIVBOH4PJX-798Ws3-_I.roa
Signing time: Wed 01 Jan 2025 15:48:25 +0000
ROA not before: Wed 01 Jan 2025 15:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202401
IP address blocks: 194.39.204.0/22 maxlen: 24
2a0c:8fc0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ca:94:b0:24:2a:d6:43:e9:52:9d:91:13:99:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Jan 1 15:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b27c6ec6c5ab21504e1f83c95feefdf16b37fbf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:29:5c:2f:64:da:0e:27:a0:b4:31:bf:0f:
38:e0:61:99:53:80:75:56:06:ca:de:0e:2d:f6:b2:
3a:49:5d:09:6c:57:40:01:29:e3:d8:a5:af:f2:f7:
50:6b:69:4f:65:d7:c7:48:de:4a:a9:7c:35:48:cf:
53:b9:45:11:ff:9f:f1:53:68:5e:e6:5e:e8:77:3a:
92:80:7b:17:73:d7:60:06:2c:bf:6c:ab:a7:8c:88:
7e:ed:29:98:1c:ba:a7:1f:78:64:cf:7e:a4:96:52:
51:57:1e:af:b0:45:2f:f3:e1:f0:87:4f:77:8c:ad:
f7:42:8b:7f:ab:b5:1a:20:c6:3a:06:1f:dc:cf:25:
e3:9f:3b:b7:4b:24:d1:76:89:b9:27:e5:3a:a8:36:
57:07:ca:5b:84:7d:4a:f7:0e:0c:04:24:ce:4a:1a:
88:8e:16:cf:5b:db:dc:1e:a2:03:6e:a7:90:c1:0d:
9b:cb:ed:be:68:dd:67:2c:0a:71:22:e7:db:72:93:
4b:e1:81:a2:ea:81:71:84:7e:e7:1e:45:78:f7:7d:
ab:93:e4:30:e9:b4:21:95:5b:11:bd:89:3d:1f:9d:
49:e6:f3:a5:fb:64:60:89:d4:32:32:a6:bd:83:24:
92:5d:97:18:9d:88:0e:0c:3e:63:52:bc:7f:4b:62:
1d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:7C:6E:C6:C5:AB:21:50:4E:1F:83:C9:5F:EE:FD:F1:6B:37:FB:F2
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/snxuxsWrIVBOH4PJX-798Ws3-_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.204.0/22
IPv6:
2a0c:8fc0::/29
Signature Algorithm: sha256WithRSAEncryption
12:66:8b:4a:1f:a6:2a:e4:03:32:d0:59:4e:fb:bf:b1:2e:3b:
7d:12:39:17:63:98:05:f5:52:1c:e2:95:e4:d6:98:04:5d:b3:
76:39:46:63:5a:a9:3d:31:a5:7d:94:4d:a7:3d:78:5d:62:16:
cf:50:05:7f:9e:87:6c:67:13:a5:b6:62:21:21:5a:8a:f7:7c:
10:c2:c6:3e:f7:b7:25:76:86:58:f3:c3:bd:12:18:b9:94:20:
0f:fc:30:99:9d:61:45:e1:eb:f7:d9:75:06:af:da:ff:5a:45:
99:13:4f:21:6d:f4:4a:23:70:92:02:95:fb:32:54:8a:31:fd:
d5:ce:c1:22:2f:32:02:3c:de:e0:f7:1c:19:14:25:a8:27:42:
ba:33:b1:b8:fe:ef:50:2b:f6:60:a6:d0:bd:27:26:24:24:08:
c8:0f:46:2d:87:60:3a:d4:bb:b7:47:d3:e2:f5:c5:2f:f0:8f:
58:b5:7e:3f:d9:7d:5e:32:1d:be:e4:b4:c4:e3:ac:55:33:d6:
d1:c5:f6:74:a1:8d:c9:a2:97:54:8c:72:1f:87:ec:d7:ae:52:
10:2b:28:f5:e4:7d:cd:dc:4d:74:52:0e:2b:b2:d6:07:f3:99:
10:a0:c5:90:f6:e9:88:85:1d:8a:77:20:61:17:a4:15:8e:73:
b2:a7:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:30:57 2025 by rpki-client