Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/kpSxAGf-JEobwBlUTuy9w2kq9CQ.roa
File: kpSxAGf-JEobwBlUTuy9w2kq9CQ.roa (raw, json)
Hash identifier: g89MP8+0dMYS7AxnUtFPb35wq3oTVlO8M0aQrm02TxM=
Subject key identifier: 92:94:B1:00:67:FE:24:4A:1B:C0:19:54:4E:EC:BD:C3:69:2A:F4:24
Certificate issuer: /CN=1571e6684306b748156c2ae3f420bb366b2efcee
Certificate serial: 019426D953B5057EE46D95943B859E0F3F2C
Authority key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/kpSxAGf-JEobwBlUTuy9w2kq9CQ.roa
Signing time: Thu 02 Jan 2025 11:49:24 +0000
ROA not before: Thu 02 Jan 2025 11:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207646
IP address blocks: 194.31.224.0/24 maxlen: 24
194.31.226.0/24 maxlen: 24
2a0f:aa40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:53:b5:05:7e:e4:6d:95:94:3b:85:9e:0f:3f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571e6684306b748156c2ae3f420bb366b2efcee
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9294b10067fe244a1bc019544eecbdc3692af424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:5c:a9:f4:35:79:38:6c:fa:7f:85:67:db:
9c:8d:aa:5d:5c:ea:e0:26:ff:74:7c:c6:11:19:f3:
ee:71:f0:a4:14:0a:e3:e1:c5:8b:4e:a7:cf:65:55:
06:29:29:2a:74:ae:44:c6:1c:82:e9:d1:13:10:9a:
3f:cb:4d:fd:dd:d0:eb:da:c8:31:09:87:ea:a5:eb:
4f:4a:b4:66:10:69:77:6f:3d:3d:65:ce:ff:8b:16:
90:bb:e9:63:c1:3a:98:39:1d:25:a1:34:18:ea:43:
88:8c:a4:a0:af:27:f8:c4:07:50:56:44:81:63:2e:
4c:2b:4c:3f:c7:22:61:98:c7:e2:2c:e6:2a:d8:98:
9a:89:99:45:f1:27:5f:f0:4b:40:5c:91:91:ef:79:
97:aa:53:b8:b0:6e:35:b2:f2:a2:61:e3:d6:85:94:
70:89:c5:20:e5:6f:d0:a3:69:e9:cc:38:89:5a:81:
6a:5a:7a:43:1e:53:39:ee:88:c4:51:76:c5:a8:fb:
17:1f:06:86:b6:58:68:bb:68:7d:29:c7:bb:f2:70:
d6:a7:1a:ce:05:d4:1d:26:3a:7d:7c:cb:b0:0c:a9:
82:c1:c0:35:89:2e:be:1c:39:6e:5d:79:b7:42:69:
0d:13:dd:99:a7:b1:25:d9:a3:9f:1c:94:d4:6a:1c:
c3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:94:B1:00:67:FE:24:4A:1B:C0:19:54:4E:EC:BD:C3:69:2A:F4:24
X509v3 Authority Key Identifier:
keyid:15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/kpSxAGf-JEobwBlUTuy9w2kq9CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.224.0/24
194.31.226.0/24
IPv6:
2a0f:aa40::/29
Signature Algorithm: sha256WithRSAEncryption
56:02:7b:44:4c:8a:cf:8d:5a:cf:32:1c:8d:07:ad:7f:46:17:
73:23:7f:ba:fe:81:d2:3a:48:67:a2:01:13:fb:e6:3b:59:7b:
fe:f8:2e:ad:01:5c:ef:cc:a2:6f:38:e8:5d:e6:22:2d:7b:84:
f0:46:6f:59:5a:ed:3b:6d:ec:75:39:0b:06:72:88:6c:da:84:
1d:62:69:aa:4d:40:17:e1:e7:cf:4c:48:e6:d4:e8:3b:42:4e:
b3:82:07:5a:36:86:8c:ef:25:45:bd:5b:10:d3:b1:11:9b:f9:
6a:cd:20:ca:ee:12:8d:98:e2:ff:90:99:b8:72:36:59:95:fa:
ac:71:e1:45:05:92:b0:97:82:8f:15:95:05:c2:df:2b:d1:5d:
85:aa:29:05:f4:79:60:8b:03:6e:5f:e0:68:40:8f:f3:91:d3:
87:79:e7:3e:9f:c4:34:1b:93:fc:b2:5b:7e:c4:c3:f6:85:fd:
65:81:68:61:29:37:21:1f:52:c0:c4:68:40:52:6b:d2:b4:44:
89:b9:9d:98:85:4e:4f:5d:29:d5:ce:26:2b:5e:d1:21:9c:c6:
b0:d5:e7:f8:27:d6:b6:82:93:5e:b6:ef:ea:b3:2c:0d:da:48:
ba:ea:2e:53:25:2b:8b:3d:2d:7b:46:49:3f:a2:4b:60:3b:cb:
f2:ba:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:49 2025 by rpki-client