Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Y4qGYle0DfUw7oAN69mj-K1DV7E.roa
File: Y4qGYle0DfUw7oAN69mj-K1DV7E.roa (raw, json)
Hash identifier: Vg8Q8yuHEGQHq23pq0u0JC3PXHTHSatzMxYCEGnmhRo=
Subject key identifier: 63:8A:86:62:57:B4:0D:F5:30:EE:80:0D:EB:D9:A3:F8:AD:43:57:B1
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 0194975B8B5C0CB67BBC38EDDE6C4CCBBD64
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Y4qGYle0DfUw7oAN69mj-K1DV7E.roa
Signing time: Fri 24 Jan 2025 08:09:06 +0000
ROA not before: Fri 24 Jan 2025 08:09:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 94.103.56.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:97:5b:8b:5c:0c:b6:7b:bc:38:ed:de:6c:4c:cb:bd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jan 24 08:09:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=638a866257b40df530ee800debd9a3f8ad4357b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a5:bb:37:fa:8d:d9:c0:a1:0d:91:c4:1d:1f:
9b:0d:2d:31:c3:76:e2:69:20:54:7a:86:1a:ee:76:
90:ba:ac:75:08:0b:31:3b:d4:f0:76:1d:d5:29:73:
cc:a6:d5:3e:14:f7:99:90:8d:e9:f3:05:bb:5d:b2:
cc:8c:1d:1b:a6:75:5b:0a:32:57:96:43:94:cd:38:
0c:36:3b:15:e9:cf:09:f6:29:72:2e:da:73:92:35:
6c:c1:3f:aa:58:14:de:51:f9:c2:4c:92:ab:eb:d2:
88:9b:1d:26:a6:c7:cd:7d:44:5b:ac:3d:79:53:f9:
d1:b6:00:dc:8d:fc:4c:17:81:83:3a:00:6e:53:ce:
1a:c9:be:d0:7c:c8:ea:8f:0f:6b:26:f1:4b:c2:bb:
42:d9:e1:80:42:0a:76:d9:cb:4b:9f:fd:c1:0d:92:
e3:33:97:32:37:92:e3:81:57:82:e2:75:0c:6f:b1:
21:34:16:23:69:a9:8d:65:ad:49:62:32:3e:10:7f:
a4:5b:da:b1:6e:c5:34:43:e0:2b:3c:d1:b7:90:8e:
38:2c:e2:52:94:4e:64:6a:74:91:db:dc:15:58:82:
50:c5:14:82:96:57:f5:52:aa:cd:45:30:50:ec:db:
c9:a5:56:81:c5:a0:54:55:d2:ff:8d:ee:88:55:1a:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8A:86:62:57:B4:0D:F5:30:EE:80:0D:EB:D9:A3:F8:AD:43:57:B1
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Y4qGYle0DfUw7oAN69mj-K1DV7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.56.0/21
Signature Algorithm: sha256WithRSAEncryption
96:67:7a:57:bd:a3:f9:0a:7e:89:6e:87:b4:2e:39:eb:de:3c:
1c:fb:8d:51:d7:e6:f5:07:27:88:f9:e9:9f:01:9b:de:05:de:
0e:c1:37:77:3e:1e:6c:59:96:56:89:fc:a5:37:c1:65:a7:0a:
2e:1c:8d:2d:4c:e6:44:34:68:65:8b:ff:ff:a7:5b:3b:a0:85:
52:35:93:a0:21:da:0c:ac:04:df:a1:62:1b:ce:bd:b4:5a:dc:
f5:ea:c9:c0:09:9e:64:00:f5:b1:e9:a5:7f:d9:40:8d:19:75:
5c:18:c1:bf:83:72:df:79:7e:b4:52:70:82:d2:88:f6:bc:c8:
db:cf:14:4d:42:9d:05:d9:8b:c6:43:73:ea:14:65:96:d2:07:
25:d8:0b:f0:89:a8:f6:6f:3f:c8:4b:60:07:ac:4a:14:9d:d0:
3e:1a:fc:9e:91:c5:61:53:22:57:a7:f8:7c:49:9f:99:1b:e8:
7d:7d:67:61:63:aa:f9:53:32:48:e0:df:d2:23:d0:51:5a:20:
19:ee:6e:50:8f:6c:ee:9f:7d:e6:e5:00:15:c3:ce:01:ef:43:
b2:d3:53:a4:d3:bb:98:51:c2:6c:24:fc:f5:e1:fa:87:d9:3a:
b5:6e:71:20:08:00:01:ae:60:ab:f2:b0:cc:db:ed:c7:6e:a9:
b2:6a:bb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:27:48 2025 by rpki-client