Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/AOhn7xhM2kSUfRAFFhvDCxU-O20.roa
File: AOhn7xhM2kSUfRAFFhvDCxU-O20.roa (raw, json)
Hash identifier: 1VAhBGtFhGjWFmWSsORfWNgJJ1LUT2F54ZQ/3ep5zho=
Subject key identifier: 00:E8:67:EF:18:4C:DA:44:94:7D:10:05:16:1B:C3:0B:15:3E:3B:6D
Certificate issuer: /CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Certificate serial: 019428258EB2269D49E3D49D41E3EE6860F7
Authority key identifier: 77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/AOhn7xhM2kSUfRAFFhvDCxU-O20.roa
Signing time: Thu 02 Jan 2025 17:52:17 +0000
ROA not before: Thu 02 Jan 2025 17:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42181
IP address blocks: 194.0.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:8e:b2:26:9d:49:e3:d4:9d:41:e3:ee:68:60:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fbbce2c2080f81f5a0f98f279229826de4850b
Validity
Not Before: Jan 2 17:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00e867ef184cda44947d1005161bc30b153e3b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b2:68:27:3b:a4:24:c0:ff:3b:29:16:a0:5a:
54:79:b9:59:0a:9c:f1:ba:de:cb:b9:70:15:72:2b:
1e:73:a5:bf:e8:6d:34:81:40:be:f1:e9:ca:03:78:
7e:83:1d:e6:d5:5d:47:3f:a3:67:29:4c:cb:fc:d1:
ad:db:06:61:7c:c2:a3:ef:67:64:ab:b9:11:98:5d:
bc:93:04:20:89:0a:61:93:89:b5:c5:e2:67:73:dc:
a3:a2:9d:55:bb:36:ec:25:1b:8b:b3:e0:91:de:13:
b0:b1:e2:9e:15:0e:71:9d:f2:0b:ce:8e:7a:00:e9:
3d:5d:d3:f2:c9:72:e6:f1:83:b4:8e:dd:b5:86:f7:
33:a3:23:33:f6:68:32:e9:f6:b3:72:cb:82:ea:4d:
36:0d:17:c1:17:df:88:3e:bc:25:3d:3e:60:7e:29:
ef:3d:46:c3:a7:ea:26:71:00:62:21:6d:ff:c2:e6:
f5:1c:f4:ab:7e:b1:a0:e6:bd:87:6a:b4:e8:96:4d:
bc:51:4d:a4:83:1a:bf:22:44:e9:ed:d0:c7:00:0e:
63:58:46:09:bc:a3:d3:84:d0:74:ef:1e:38:8c:0d:
60:e2:57:9c:a3:38:8a:0b:05:b7:22:a7:0c:6d:49:
b1:50:c9:e0:78:07:ed:a7:26:00:64:2d:39:5a:6e:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E8:67:EF:18:4C:DA:44:94:7D:10:05:16:1B:C3:0B:15:3E:3B:6D
X509v3 Authority Key Identifier:
keyid:77:FB:BC:E2:C2:08:0F:81:F5:A0:F9:8F:27:92:29:82:6D:E4:85:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_u84sIID4H1oPmPJ5Ipgm3khQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/AOhn7xhM2kSUfRAFFhvDCxU-O20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/1ed739-2754-440f-9546-3aa27df47521/1/d_u84sIID4H1oPmPJ5Ipgm3khQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.160.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:84:a0:1d:33:92:31:38:ad:3d:56:5e:2b:58:39:08:7e:1d:
55:6d:9d:86:29:d8:65:cc:4e:02:d4:48:2e:ac:91:d9:97:af:
ec:aa:e4:52:a6:07:e4:0f:aa:d3:5f:9f:27:a3:93:3c:70:52:
f9:ed:d6:7e:06:68:96:e0:4c:5b:99:1e:ae:35:7d:7e:30:53:
00:60:8d:2e:d5:83:c7:f0:5f:bf:8c:b7:92:e7:7b:31:b3:ff:
b9:48:87:4a:0b:35:2b:5f:90:08:bf:c7:83:86:d6:c7:4c:fa:
b6:81:40:ae:2d:23:0b:c0:14:34:60:21:f5:7b:a7:a4:98:99:
ec:fb:b0:7a:5f:89:93:c5:f3:27:64:af:e3:ba:c2:04:29:b0:
be:b0:34:66:80:f5:6c:71:b5:8b:dc:2e:bf:27:2f:c7:c1:d0:
93:b7:c2:78:63:a6:1e:ee:3e:84:6d:0c:f7:10:5a:69:ab:f3:
aa:54:72:bb:dd:45:fe:45:eb:48:31:91:11:b1:cf:6e:ff:a9:
17:52:0f:8f:72:a1:c4:79:ad:dc:82:2a:1e:cd:c9:4d:43:45:
8f:25:19:4e:c5:39:2f:3a:61:76:f9:1f:e7:ed:eb:41:10:fd:
b4:91:d4:17:5a:2a:83:b8:99:be:ab:43:09:cc:2a:f8:be:c5:
83:1c:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:57:51 2025 by rpki-client