Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/B9R7j-0-BgaCSy3boeQLonLKm0k.roa
File: B9R7j-0-BgaCSy3boeQLonLKm0k.roa (raw, json)
Hash identifier: WH3s6YayhFNQdUbUDmK2H25xLVDh9LZv/S7MHi6F+EQ=
Subject key identifier: 07:D4:7B:8F:ED:3E:06:06:82:4B:2D:DB:A1:E4:0B:A2:72:CA:9B:49
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 019426D9B6F73D3F106ADEB9A0AE8E09A549
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/B9R7j-0-BgaCSy3boeQLonLKm0k.roa
Signing time: Thu 02 Jan 2025 11:49:49 +0000
ROA not before: Thu 02 Jan 2025 11:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47899
IP address blocks: 94.102.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:b6:f7:3d:3f:10:6a:de:b9:a0:ae:8e:09:a5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Jan 2 11:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07d47b8fed3e0606824b2ddba1e40ba272ca9b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9c:c4:ea:7f:9f:ae:0c:d5:77:f7:31:a8:fa:
09:08:6f:67:4e:39:d4:97:98:9c:ec:7b:72:4b:ad:
65:f0:05:93:49:0b:4b:c6:65:0b:69:3f:98:c7:56:
d2:d1:86:77:58:03:1a:94:2c:cf:b1:4f:14:7c:8a:
72:81:f8:74:91:b1:28:fe:ff:56:10:da:b8:46:ea:
6c:43:d1:4f:fd:ee:07:c3:48:0f:77:6b:61:d9:e6:
43:07:59:cb:7d:d6:ef:6c:39:a0:ff:c4:29:14:18:
b5:c8:15:53:1b:ff:f1:e3:81:05:e6:96:a5:33:a8:
87:b7:f8:70:64:27:10:e4:52:ee:33:a1:c1:d3:b7:
34:a1:a6:e6:b2:21:59:14:e1:b6:35:82:8c:3a:e1:
92:2f:5b:47:84:2e:39:ff:05:c3:60:bd:9c:24:53:
59:ec:1d:66:31:4b:eb:10:a3:41:44:9d:21:fc:89:
b7:e8:0d:31:26:35:c5:1b:92:4f:3c:d8:a2:bf:a4:
f5:4d:2b:00:a0:83:ab:f4:f0:bb:71:14:78:b2:e2:
be:78:6a:9a:5c:58:e6:15:e2:46:6b:8e:40:41:87:
2a:ad:af:7f:ee:ed:87:8c:5c:18:35:63:b8:4b:97:
e3:8e:45:db:62:53:35:80:3b:a8:e6:82:f7:07:6c:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D4:7B:8F:ED:3E:06:06:82:4B:2D:DB:A1:E4:0B:A2:72:CA:9B:49
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/B9R7j-0-BgaCSy3boeQLonLKm0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.102.176.0/20
Signature Algorithm: sha256WithRSAEncryption
73:69:f4:3c:fa:3d:a9:d8:59:42:50:e4:80:47:43:38:c4:58:
16:38:c8:10:98:59:1b:b4:47:e2:f9:60:05:df:e2:46:52:42:
55:ea:3c:d2:e3:31:4f:90:92:c0:66:42:8a:b5:70:3d:5d:6c:
37:61:c7:cd:3e:f4:ae:71:ab:5f:fa:8e:65:77:ea:3c:6f:46:
f3:d0:db:37:1d:3c:a9:c5:83:2e:e6:29:7b:b9:e9:7f:66:d7:
07:92:88:ef:f7:2c:d5:63:92:16:90:89:18:89:eb:99:ab:8c:
d9:22:97:87:cc:5f:9a:ca:91:45:45:61:a5:fe:6e:da:41:29:
bd:65:2e:a4:29:34:70:04:02:69:fb:be:51:9d:18:36:bb:21:
7d:f9:48:ee:2c:df:a0:7f:4e:aa:5d:c1:cb:31:29:28:32:df:
ad:f3:52:b6:f9:eb:4d:c0:16:34:a3:f3:d7:8e:e0:d7:d3:d1:
95:da:34:93:bd:96:f7:f8:48:64:4d:d9:d1:6f:0b:f9:c8:be:
7b:31:4f:9d:10:eb:a1:09:46:fa:8f:99:9e:12:af:38:11:20:
08:55:d1:c9:c3:c2:08:34:7c:9b:3f:78:aa:10:b8:d7:8a:de:
a7:6f:13:91:84:a1:f7:42:d0:16:99:2c:03:df:c6:7b:6f:a8:
db:97:e1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:51 2025 by rpki-client