Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/69ehIxwfed5HZyZV9c2Bvvjf_kA.roa
File: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (raw, json)
Hash identifier: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=
Subject key identifier: EB:D7:A1:23:1C:1F:79:DE:47:67:26:55:F5:CD:81:BE:F8:DF:FE:40
Certificate issuer: /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial: 019421B2580385B849830EAEAD027DFAB1F1
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/69ehIxwfed5HZyZV9c2Bvvjf_kA.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57364
IP address blocks: 194.110.152.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:58:03:85:b8:49:83:0e:ae:ad:02:7d:fa:b1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebd7a1231c1f79de47672655f5cd81bef8dffe40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0a:5f:6f:5b:69:d4:ef:38:d9:37:eb:62:e2:
29:ae:58:20:1d:ff:69:29:92:5d:65:f9:c2:85:bd:
d8:3e:86:dd:e7:5f:e9:c3:da:90:08:c6:97:ff:c0:
19:5a:8d:fe:e6:67:e1:4f:e9:a7:5f:4f:02:3c:67:
f7:41:d2:1a:8f:44:13:3a:30:88:ab:b7:60:83:e7:
16:ff:8c:64:50:8f:22:37:ae:cb:28:74:7b:0c:c3:
f4:6e:d1:ff:76:f0:48:9e:df:1e:8c:6c:c0:df:c5:
d1:12:33:1f:73:fa:42:1d:53:97:df:2a:90:1b:6e:
c7:36:fc:bc:1d:6d:ef:bf:2e:71:9a:af:2d:31:53:
4f:e8:23:bf:5b:15:68:f5:9a:1a:3f:d1:3a:44:74:
a6:81:82:74:c0:bc:98:d2:92:95:5d:7f:9d:b3:bb:
53:90:3e:0f:18:1a:39:51:22:56:88:7a:41:77:af:
8b:73:73:d6:ca:4f:5e:3c:ec:6a:4e:ec:92:26:71:
83:8c:5d:10:12:cf:54:75:e4:b9:3f:09:ee:64:f3:
88:cc:32:1b:27:ac:94:7f:cd:51:ae:cb:c0:12:f5:
e2:31:29:15:fb:95:a6:a1:31:94:20:45:92:ea:f5:
c3:92:cc:42:43:99:55:c2:c9:67:46:41:a9:fc:38:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D7:A1:23:1C:1F:79:DE:47:67:26:55:F5:CD:81:BE:F8:DF:FE:40
X509v3 Authority Key Identifier:
keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/69ehIxwfed5HZyZV9c2Bvvjf_kA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.152.0/23
Signature Algorithm: sha256WithRSAEncryption
62:50:14:7c:bc:7c:48:55:73:1e:76:cb:d0:bb:f8:de:55:5f:
2f:0a:99:9d:77:7d:3d:26:99:aa:dd:d6:15:ba:cd:0d:6c:ac:
99:c0:bf:01:aa:7b:05:57:85:01:97:24:89:6e:b8:4b:f6:5c:
c8:b6:81:d1:3c:d3:43:36:cb:ff:1a:a2:cb:d9:f3:ce:26:3f:
e4:f5:75:1f:82:b2:d0:e7:98:1d:61:41:47:a4:21:4a:d3:4b:
73:4d:a0:57:5a:33:e3:2b:41:36:48:68:57:aa:f7:7c:ea:87:
48:29:74:04:87:8a:da:df:cb:31:c9:82:fc:15:10:eb:dd:d7:
48:18:cd:13:ea:1b:e0:5c:97:fe:b2:59:17:a9:f4:25:ef:40:
88:c3:1c:21:8c:8d:97:f4:dd:18:ad:b7:60:ec:c2:39:58:e9:
95:bc:a9:ea:00:97:ef:c0:4d:4d:e9:ec:c9:dc:56:e2:1e:8c:
b4:be:67:e0:f0:d0:0d:08:d4:c6:df:94:b1:d9:08:68:37:4e:
43:f8:a3:e9:27:db:28:da:ed:f5:14:0c:03:79:3b:3d:57:71:
51:24:2a:dc:6b:64:a3:42:fb:c3:34:74:72:78:69:ba:b3:03:
f6:38:6b:10:be:f4:2d:38:af:74:47:ca:b0:07:17:e8:9b:fa:
ad:d8:9c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:02 2025 by rpki-client