Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/9AJxDtY7P1EIdtRJtlV_POunNNs.roa
File: 9AJxDtY7P1EIdtRJtlV_POunNNs.roa (raw, json)
Hash identifier: KZb05CoUKougLWY9WQNd2WCLqOi1mJz+1xSCfQFl0K0=
Subject key identifier: F4:02:71:0E:D6:3B:3F:51:08:76:D4:49:B6:55:7F:3C:EB:A7:34:DB
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01947FDF4633C5498F1FE93EF8AB6ABC5B47
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/9AJxDtY7P1EIdtRJtlV_POunNNs.roa
Signing time: Sun 19 Jan 2025 18:42:06 +0000
ROA not before: Sun 19 Jan 2025 18:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 94.154.35.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7f:df:46:33:c5:49:8f:1f:e9:3e:f8:ab:6a:bc:5b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 19 18:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f402710ed63b3f510876d449b6557f3ceba734db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:0a:67:f5:43:ed:db:a4:c5:ba:ec:13:fd:
5b:76:46:8c:12:d8:e2:bb:a1:6e:ae:57:a6:a0:43:
a9:d0:ab:64:73:85:0a:f3:04:ee:71:2c:c7:c3:7f:
fb:1d:64:3d:72:10:36:c7:ae:a4:b3:03:bc:d4:e5:
51:55:79:3a:b6:4d:3b:f5:17:cd:ed:21:e2:7b:f4:
ae:15:2b:1b:0e:63:28:9f:f9:09:57:3a:47:12:b6:
92:cb:04:54:31:02:7b:cb:48:39:47:be:27:b4:d2:
b4:42:b7:76:fd:87:4a:07:43:60:70:10:c2:60:ad:
ad:0e:e0:62:26:2c:ce:e5:dc:bc:92:08:02:1b:66:
15:db:d8:5f:ba:a7:65:48:14:55:3a:1d:c4:89:d1:
c8:32:43:4b:17:91:d3:1d:a6:65:b3:16:1e:c3:26:
80:54:50:52:ee:99:54:54:6c:08:0c:ad:5c:29:fa:
c3:a9:d9:e7:fe:d0:19:23:5c:eb:74:be:81:97:8d:
e2:94:26:e6:d2:62:b3:c3:30:64:7d:9c:76:eb:77:
28:05:be:36:a9:c7:03:14:ec:70:fa:9c:77:54:ce:
4c:dd:03:43:b0:40:e4:75:1a:3b:23:47:bc:4c:8b:
3e:6f:5d:7b:c0:c5:cb:d4:0c:23:09:5e:7a:5d:66:
94:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:02:71:0E:D6:3B:3F:51:08:76:D4:49:B6:55:7F:3C:EB:A7:34:DB
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/9AJxDtY7P1EIdtRJtlV_POunNNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.35.0/24
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
72:11:97:7a:83:4a:2b:64:dc:03:04:70:b9:15:f2:1e:65:8f:
21:6d:f3:04:22:b5:73:46:2a:67:5e:a8:55:47:76:7f:f7:95:
75:c8:64:73:f1:3f:c2:68:f3:61:3b:fa:85:3b:5d:39:c0:59:
89:3d:94:75:8c:25:9d:78:ff:05:22:24:b1:d1:d5:89:26:87:
d4:72:b4:e3:41:66:af:14:8a:b3:75:ac:56:10:e0:2e:b5:77:
b9:b0:7b:81:2a:23:57:24:6b:48:95:4b:e6:24:97:6b:27:b3:
ca:45:27:f3:e5:3f:a0:36:fe:90:51:eb:a0:ce:e9:fb:14:c6:
67:1d:72:31:12:7b:3c:eb:76:8a:87:1d:80:6b:b2:09:75:5e:
b3:dc:c9:40:ca:57:58:f3:bc:7b:5a:7a:d1:89:43:2b:a9:c4:
02:fe:f8:c3:7d:b2:f3:32:14:55:59:61:d0:58:4f:bd:79:b4:
0d:f6:52:fa:99:c7:7e:d7:10:38:ec:ca:a3:15:88:df:b5:1a:
77:37:a9:92:40:c3:e5:bc:8e:d5:72:b9:1a:51:9b:33:48:ed:
52:04:9b:62:35:b1:b9:65:0e:08:3d:21:43:77:d5:ec:51:fa:
56:fa:30:fd:52:9a:de:8a:a7:53:4a:f1:4b:c6:39:57:d4:b0:
60:6c:ec:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:08 2025 by rpki-client