Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa
File: 7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa (raw, json)
Hash identifier: Spe2b/mS1SAvEHCJH7XwFJrcW3b1Bvz1bY1SvDC0yz8=
Subject key identifier: EE:65:59:C0:2B:24:C8:95:10:EE:03:C1:2F:F1:7F:E2:76:CA:5A:B9
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 0194419125CE4A82AF458B38D8ABB9CCFD4A
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa
Signing time: Tue 07 Jan 2025 16:20:18 +0000
ROA not before: Tue 07 Jan 2025 16:20:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 194.145.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:91:25:ce:4a:82:af:45:8b:38:d8:ab:b9:cc:fd:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Jan 7 16:20:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee6559c02b24c89510ee03c12ff17fe276ca5ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:f2:67:a9:ef:d2:5e:f7:e3:8d:60:56:11:
c0:d1:93:b4:1f:9f:da:b8:48:8c:38:88:b0:1f:54:
56:bb:21:be:f1:d4:de:78:8e:99:bd:00:75:5a:c2:
73:32:e6:d7:63:a5:ca:3e:30:96:03:72:16:9f:47:
cf:05:40:78:c9:35:e7:b9:3e:3e:7d:d8:31:8b:0d:
23:8e:51:39:1c:fd:99:77:92:1a:a6:8a:22:90:dd:
62:35:e8:d2:7e:0e:fc:16:00:87:ed:f1:61:ae:c9:
14:83:4f:fe:11:35:26:93:8a:aa:4b:cb:49:a6:7d:
90:49:a5:11:fb:99:42:d4:e6:71:8d:08:b7:f8:4b:
f4:fa:0b:de:4b:c6:98:e1:94:9f:6a:50:b6:bd:48:
37:a6:31:4f:55:15:44:c2:01:fc:48:a3:20:e2:e8:
9b:c3:44:cb:19:ad:70:4e:6e:d8:a1:74:45:5a:65:
7f:02:35:ab:10:5d:94:37:71:c3:e0:f4:d4:5d:45:
15:0f:d4:6b:15:35:3d:61:cf:b8:d0:ee:0b:3c:2e:
0d:6d:f3:43:9d:35:b8:95:ab:a0:c4:cf:80:e7:57:
6f:d6:0f:a6:ab:25:9a:47:59:6c:21:1a:77:71:f5:
b1:9e:93:ae:d8:3d:09:3e:e4:05:94:b1:4a:45:9c:
ff:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:65:59:C0:2B:24:C8:95:10:EE:03:C1:2F:F1:7F:E2:76:CA:5A:B9
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.160.0/22
Signature Algorithm: sha256WithRSAEncryption
78:50:70:a1:3f:36:b1:be:6e:ab:d0:00:e1:52:1f:95:c4:66:
b7:5a:3c:3f:14:d6:03:01:d3:7b:0d:31:e4:ab:a1:59:9a:f7:
11:74:23:8f:50:52:fe:39:b3:c3:96:e3:a0:42:27:64:57:d1:
cf:03:88:72:26:26:67:b7:73:16:b7:99:e5:0d:2a:1e:36:eb:
b9:2e:97:96:ff:76:93:25:08:90:81:4b:bb:ec:eb:4b:ac:10:
2a:46:f3:d5:a4:f9:46:b8:e8:2d:31:ca:1e:2a:d4:aa:aa:ec:
de:38:c9:f8:31:7c:76:ed:3b:0e:23:9a:cf:3f:47:3f:90:4b:
ab:ea:56:c4:26:4b:f4:56:69:5f:cd:98:50:16:c5:36:bc:3b:
97:5a:d0:5c:ba:e4:aa:37:84:8f:53:63:b8:06:29:6b:37:c0:
5a:b7:b7:e5:d2:3a:58:d2:28:82:f2:35:b7:4e:ce:42:97:8b:
98:60:a7:a4:be:3c:2e:14:77:18:f7:ac:7b:90:6a:42:0e:ee:
a5:40:89:28:fa:73:a2:03:0b:2e:5d:66:91:7c:d8:c6:3e:eb:
45:41:2f:82:b9:06:59:2a:9c:1f:a0:05:9f:35:be:db:00:21:
81:b4:a9:75:4e:a5:70:0e:a3:b5:08:31:f0:6a:b4:67:bc:d5:
15:37:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:37 2025 by rpki-client