Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/70684a-662c-40c5-92b5-bb4eabd1bec3/1/abblLy14QCk0oM_zzAm4YEnNqkw.roa
File: abblLy14QCk0oM_zzAm4YEnNqkw.roa (raw, json)
Hash identifier: dlwzFgHSNM3z56VvBfkb7UaWtp232BzyYvriKPJu3Dg=
Subject key identifier: 69:B6:E5:2F:2D:78:40:29:34:A0:CF:F3:CC:09:B8:60:49:CD:AA:4C
Certificate issuer: /CN=ce4902ded69290c771f7eb0a5719e607536140af
Certificate serial: 018CC64B55ED8997535EE6E9111FD11074E5
Authority key identifier: CE:49:02:DE:D6:92:90:C7:71:F7:EB:0A:57:19:E6:07:53:61:40:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkkC3taSkMdx9-sKVxnmB1NhQK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/70684a-662c-40c5-92b5-bb4eabd1bec3/1/abblLy14QCk0oM_zzAm4YEnNqkw.roa
Signing time: Mon 01 Jan 2024 18:31:15 +0000
ROA not before: Mon 01 Jan 2024 18:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 194.30.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:55:ed:89:97:53:5e:e6:e9:11:1f:d1:10:74:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4902ded69290c771f7eb0a5719e607536140af
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69b6e52f2d78402934a0cff3cc09b86049cdaa4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:70:6d:64:c9:08:8c:8f:b1:7d:5c:48:0f:85:
a6:43:94:fb:54:11:a7:90:66:c6:49:ec:51:e0:8d:
38:8b:c1:7a:b1:23:29:fc:23:e8:f8:a2:27:e0:9d:
fc:79:30:78:9e:2f:c1:bc:63:04:38:e9:15:6f:5b:
00:50:a9:fb:81:d1:00:b8:f7:86:6c:00:7c:64:97:
a2:17:7b:c4:e7:a5:02:61:3f:42:ac:0e:b7:d5:ad:
e5:2c:56:06:04:14:5c:21:d3:13:65:d1:b4:75:c0:
7e:0b:e3:5f:3e:b1:4d:9c:21:85:4f:26:3b:84:3b:
3b:5f:d7:f5:54:db:c2:be:26:e0:c1:4a:fa:a0:34:
e3:26:5c:be:41:ff:ea:9e:3a:33:67:f5:5c:ee:1e:
49:f6:9c:6d:95:8f:14:a6:e7:29:05:9a:b2:ea:45:
77:5d:02:74:88:cf:8d:35:ac:57:31:53:00:5f:78:
87:39:f1:cd:83:8a:02:6e:5e:6d:53:41:ad:66:d7:
30:00:a1:42:3a:96:11:d1:94:75:7f:0d:db:83:73:
21:f4:11:37:c2:d0:e9:96:6f:e4:d8:45:8b:ad:15:
23:81:e3:63:47:7f:dd:13:0c:a9:d9:e0:c0:89:0b:
56:f9:83:ea:4c:76:5e:03:fe:a8:c6:ab:c2:ee:31:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B6:E5:2F:2D:78:40:29:34:A0:CF:F3:CC:09:B8:60:49:CD:AA:4C
X509v3 Authority Key Identifier:
keyid:CE:49:02:DE:D6:92:90:C7:71:F7:EB:0A:57:19:E6:07:53:61:40:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkkC3taSkMdx9-sKVxnmB1NhQK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/70684a-662c-40c5-92b5-bb4eabd1bec3/1/abblLy14QCk0oM_zzAm4YEnNqkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/70684a-662c-40c5-92b5-bb4eabd1bec3/1/zkkC3taSkMdx9-sKVxnmB1NhQK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.168.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d2:1b:04:1b:8c:8d:87:3b:ec:dd:28:62:4a:d6:dc:61:5b:
25:87:be:eb:b1:a8:14:78:b0:90:33:42:58:d6:d1:fc:70:26:
f4:1b:e2:ca:a8:a6:7d:ea:6e:ed:10:c6:12:74:d5:35:c4:b0:
2a:99:62:44:ee:8d:9d:95:7d:71:42:e0:6e:1e:6f:4b:ec:ec:
e8:0a:0c:4d:7b:86:db:b8:dc:51:11:52:46:85:e0:c8:70:67:
f5:58:dc:a3:7e:95:e6:45:a3:dc:1f:cb:c6:d0:b9:df:6d:94:
55:99:6e:c8:43:aa:c3:17:63:bb:7d:fb:2b:04:2e:23:00:39:
de:fa:de:e9:67:ca:7a:c0:97:29:de:30:67:6b:26:8d:0a:fc:
48:27:0b:3d:e5:5a:43:5e:1e:e7:73:54:3f:69:1a:26:41:00:
42:ec:ce:6b:53:66:eb:44:ca:1b:33:29:e5:37:05:27:31:d2:
1f:6b:46:05:9f:4d:f5:71:74:89:16:1e:b6:84:cc:d6:93:25:
89:65:1d:19:66:0b:f1:be:d5:38:dd:e5:6c:4f:95:ba:f2:75:
39:26:e5:8a:d2:33:38:b1:bd:6c:0b:f9:b4:96:58:c6:f4:2d:
ba:0b:af:06:d5:7f:03:66:7a:90:50:bc:70:a4:5a:76:86:51:
3d:5e:a5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:49:43 2025 by rpki-client