Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/5ZNOGBQ9w8dTp0XQhpuUk8zzApg.roa
File: 5ZNOGBQ9w8dTp0XQhpuUk8zzApg.roa (raw, json)
Hash identifier: 1/+Fm1r/KA+hNLAy+y/H8/1fP0WyouANNJuTvhP3iNk=
Subject key identifier: E5:93:4E:18:14:3D:C3:C7:53:A7:45:D0:86:9B:94:93:CC:F3:02:98
Certificate issuer: /CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Certificate serial: 019424B3F31B631FB324C8BA34202E944640
Authority key identifier: 9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/5ZNOGBQ9w8dTp0XQhpuUk8zzApg.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210418
IP address blocks: 94.143.227.0/24 maxlen: 24
2a12:a780::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f3:1b:63:1f:b3:24:c8:ba:34:20:2e:94:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5934e18143dc3c753a745d0869b9493ccf30298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:2e:ec:59:69:24:f6:47:aa:1a:9e:ae:2a:
31:7d:9d:a9:7a:0f:d0:44:c8:50:bc:2c:eb:4b:7b:
a2:69:6f:b5:24:d9:2b:4b:68:08:6f:4f:1b:38:ca:
59:56:6a:ba:c2:17:b2:f4:04:e9:2f:54:ca:f5:cb:
26:a4:8e:c2:cc:e2:f2:35:86:23:94:d7:92:33:ff:
8d:09:49:9f:bc:79:53:70:53:b2:a6:e2:57:7c:86:
bb:fe:4d:fe:1e:ca:e6:27:b0:d2:af:6f:a1:fd:c2:
98:6c:6f:29:b5:2b:d8:f0:aa:99:ac:72:96:29:d1:
8d:c3:d4:3f:d7:0a:3c:5c:b8:da:58:b1:71:4e:a4:
3a:0e:06:8f:5d:34:97:2c:bb:68:bd:34:14:2d:a5:
f2:17:ca:f0:1a:a5:75:42:97:5f:47:3e:e5:10:3c:
07:70:60:a3:22:35:4b:0c:f3:e0:d5:05:41:7a:a6:
c1:f7:bf:f9:e7:44:47:ae:95:27:f0:3b:20:92:1b:
52:19:15:de:8f:cd:40:55:2e:0b:9d:9e:c0:81:cd:
ea:da:b2:78:78:aa:78:a7:6a:b0:b2:7e:af:50:47:
51:35:a7:e4:5b:4b:e5:0d:e9:61:66:23:c2:f0:a4:
99:b1:a4:2a:e1:ba:e9:9c:f9:8c:69:b9:bd:5c:6c:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:93:4E:18:14:3D:C3:C7:53:A7:45:D0:86:9B:94:93:CC:F3:02:98
X509v3 Authority Key Identifier:
keyid:9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/5ZNOGBQ9w8dTp0XQhpuUk8zzApg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.227.0/24
IPv6:
2a12:a780::/32
Signature Algorithm: sha256WithRSAEncryption
19:af:07:cb:c9:8b:c8:ac:97:f7:e1:da:23:49:c9:a0:12:ac:
02:49:9b:b5:e5:f0:f3:11:23:c1:87:65:7c:16:c3:37:99:77:
df:56:80:47:7c:f6:ff:5d:08:17:1a:60:13:e9:34:ac:b6:06:
c3:28:c3:ae:22:cc:ed:de:0b:f1:af:b6:01:d4:aa:70:01:c0:
ff:77:48:28:7e:7b:6a:e6:0e:11:85:d1:e9:d9:9d:ef:a2:c3:
38:b8:02:67:a4:4d:d6:b8:8a:dd:94:c2:ad:43:76:95:d2:72:
cf:f8:c8:17:ae:74:8c:d3:9a:ab:ab:ad:d3:4d:06:83:38:a5:
76:34:f3:6e:95:b8:b9:a4:1c:ac:22:5e:32:de:94:84:65:2e:
3f:70:3f:29:a4:20:d9:8b:54:f9:b5:fe:8a:0a:cc:ed:17:12:
3a:64:ba:84:be:74:b5:43:16:0a:58:02:f6:14:59:95:8b:17:
a5:35:70:c6:01:6c:4e:4f:ba:55:22:68:af:a1:a0:04:25:97:
d1:26:ff:4d:01:e9:d5:ff:10:32:41:51:97:e2:6b:01:47:76:
95:ad:85:ff:b7:a4:8c:bc:9b:83:b9:7c:8a:90:e6:ac:59:59:
8b:4f:e3:c7:db:a7:e9:32:3e:26:a8:26:ae:38:f0:5b:0b:44:
9c:1e:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:40 2025 by rpki-client