Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/aMc4nGsoGQu2w3W1s-uVvNsFK0I.roa
File: aMc4nGsoGQu2w3W1s-uVvNsFK0I.roa (raw, json)
Hash identifier: /2ttmZLJW9TyxvH3IbbsGdnKYvWQ9tFHHmFxUOSmV/4=
Subject key identifier: 68:C7:38:9C:6B:28:19:0B:B6:C3:75:B5:B3:EB:95:BC:DB:05:2B:42
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 0194266B6FD6C7563EE9EC6447B3DD62AD65
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/aMc4nGsoGQu2w3W1s-uVvNsFK0I.roa
Signing time: Thu 02 Jan 2025 09:49:22 +0000
ROA not before: Thu 02 Jan 2025 09:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206471
IP address blocks: 194.127.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:6f:d6:c7:56:3e:e9:ec:64:47:b3:dd:62:ad:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Jan 2 09:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c7389c6b28190bb6c375b5b3eb95bcdb052b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:0b:02:c5:4b:00:e2:75:a4:f2:76:70:99:
ce:bb:ed:b5:5a:e4:45:52:16:c7:4c:52:14:ac:ad:
36:c1:26:c2:a1:13:e6:05:7a:00:33:ec:a4:c3:51:
90:48:1f:b5:54:6d:8a:e6:4b:c0:cb:0c:b5:22:e8:
e6:10:dc:ac:db:4c:40:dc:57:22:d8:08:4a:bd:86:
84:59:c0:62:d4:12:36:ad:74:d7:5e:df:25:e7:81:
d5:dc:56:dd:76:dc:3a:bb:b2:45:f7:dd:78:31:9d:
eb:c2:78:42:c8:81:36:7d:8a:22:91:93:06:54:bf:
a3:86:94:17:ed:d3:f7:99:fc:90:70:b2:b8:99:c8:
04:20:69:36:1f:d4:3c:2e:3e:32:7d:cf:5c:f1:93:
5b:05:bc:12:2a:9a:e4:9a:8a:e2:41:56:0c:b3:76:
cf:2c:49:f3:8c:1a:a4:98:97:e4:83:5f:06:72:8e:
06:cf:d7:67:c4:17:86:03:d3:4f:12:1c:c0:d5:28:
c2:1e:37:50:3e:51:29:60:0b:69:fd:4a:0c:1f:a3:
e0:4d:ec:6e:68:b1:36:f6:4b:2b:64:ef:ae:04:98:
53:52:9b:e0:49:14:87:12:af:16:72:2a:b6:87:38:
93:d9:f2:3e:df:78:a1:cc:86:57:77:29:e2:a3:b8:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C7:38:9C:6B:28:19:0B:B6:C3:75:B5:B3:EB:95:BC:DB:05:2B:42
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/aMc4nGsoGQu2w3W1s-uVvNsFK0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.109.0/24
Signature Algorithm: sha256WithRSAEncryption
09:b9:d7:a0:a2:ab:6f:53:e6:76:ff:30:d0:88:a4:c2:71:04:
37:22:fe:09:83:75:08:f5:c2:a8:cb:6e:59:14:d4:09:47:ce:
f6:0c:ed:31:7f:b5:0f:7d:3f:c8:b1:84:9a:64:f9:ba:6c:02:
d4:a2:98:0f:fe:d9:c4:37:7b:1d:e0:f3:0e:1e:49:31:5f:ec:
53:46:64:59:e4:0c:15:e1:e7:38:dc:51:0c:d7:8b:13:9d:6e:
ac:b3:e1:82:2b:d2:0a:14:a6:a8:76:bb:7b:15:e1:1b:35:f4:
0e:d9:76:51:fa:d9:0a:f4:3b:eb:01:10:dd:1b:54:c9:6d:ab:
84:36:f1:0b:55:5a:35:9d:38:a3:52:ff:a7:da:d4:46:ec:4f:
f1:b0:e0:2f:50:fd:5c:8f:b4:72:f7:0c:1e:45:9b:2e:65:80:
38:60:be:45:67:8c:ff:32:01:0d:11:f9:7f:f0:0c:fd:ee:d9:
89:ad:76:a7:aa:db:1b:2b:06:54:d1:e5:e2:d6:55:cc:83:5a:
fb:fc:b6:1e:73:3b:b4:64:9a:2a:21:c8:d7:1b:9b:6b:55:61:
dc:70:3d:20:c6:e6:4b:bf:69:d8:5a:7f:c7:1c:64:03:be:e9:
77:23:bc:19:6f:2d:30:8e:dc:2c:ed:20:22:e9:18:32:d1:79:
af:dc:70:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:27 2025 by rpki-client on console.sobornost.net