Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/j6m8JD754OZd2zfkrzPKc7t_k4U.roa
File: j6m8JD754OZd2zfkrzPKc7t_k4U.roa (raw, json)
Hash identifier: hUQqPswFb44tCsj8bdeOO4xSCpedzp6XZaAwqO/TYtU=
Subject key identifier: 8F:A9:BC:24:3E:F9:E0:E6:5D:DB:37:E4:AF:33:CA:73:BB:7F:93:85
Certificate issuer: /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial: 019426D998B45831D0CFAC56AF59F04E875C
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/j6m8JD754OZd2zfkrzPKc7t_k4U.roa
Signing time: Thu 02 Jan 2025 11:49:41 +0000
ROA not before: Thu 02 Jan 2025 11:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12338
IP address blocks: 94.101.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:98:b4:58:31:d0:cf:ac:56:af:59:f0:4e:87:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Validity
Not Before: Jan 2 11:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fa9bc243ef9e0e65ddb37e4af33ca73bb7f9385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:9f:1b:6b:46:52:e0:a4:37:58:77:5b:b8:
35:c2:0d:d1:d8:b1:41:a5:5f:b5:f0:96:f2:93:93:
ca:15:b6:e4:28:43:ee:4d:94:3f:71:a8:ee:36:00:
8b:3e:42:c7:13:d2:5a:d0:ef:e8:a7:b0:e2:31:f8:
46:e6:85:98:f9:64:8a:e4:6d:f4:f4:6a:58:31:3b:
56:3c:f3:8d:01:ba:56:98:42:82:dc:c4:27:91:b6:
6c:6e:3d:dc:59:44:83:c5:bc:e3:44:8c:62:f8:6f:
90:96:3c:c6:e8:7b:46:14:1d:22:57:e3:63:e9:30:
9c:10:2d:81:90:1e:72:d0:3b:70:81:e7:2c:3d:82:
09:18:f7:57:ed:e4:b6:63:92:ea:8c:8f:24:45:1a:
36:9f:36:ce:29:fa:26:c6:ce:e6:49:71:23:67:65:
98:26:b7:75:fa:c0:5f:b2:6f:cf:e9:56:6c:9d:ad:
c5:b8:8e:83:4f:ef:d6:54:5e:79:cf:67:fc:fd:64:
06:df:18:46:69:f8:8a:1a:25:0c:a1:de:54:36:4a:
84:6f:ba:7c:ff:10:a9:c6:5e:cb:3a:84:7a:5e:1b:
0f:9d:78:6d:44:55:89:55:d1:7b:18:df:67:78:7d:
8d:ba:2e:7f:37:b4:d1:bd:4d:dd:19:b6:f9:5b:79:
b5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A9:BC:24:3E:F9:E0:E6:5D:DB:37:E4:AF:33:CA:73:BB:7F:93:85
X509v3 Authority Key Identifier:
keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/j6m8JD754OZd2zfkrzPKc7t_k4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.106.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ca:73:75:c6:96:25:fc:83:f6:fe:29:56:2a:ac:60:7a:9d:
6c:e0:94:d4:4d:c5:3f:d2:64:7a:ab:47:44:f3:2d:01:ea:b1:
a8:b7:02:aa:88:27:a9:b8:86:b3:67:cc:28:7f:fa:8f:08:28:
11:32:1b:79:b4:08:8b:b1:f1:23:33:14:00:fe:a6:8e:6c:6a:
52:aa:de:27:7c:c2:d9:40:38:6a:37:b3:46:6d:5f:88:8e:d2:
f8:41:08:25:25:00:ce:1e:ba:8d:fa:34:99:da:9d:24:47:40:
02:86:33:4b:d0:52:0d:58:6c:e8:10:95:d9:05:ac:4d:62:8d:
99:f8:94:af:71:13:21:9d:ac:45:49:9a:71:83:c3:c2:03:d3:
52:b8:e7:22:52:6f:98:a2:1a:c6:1d:7a:4e:d5:52:84:db:27:
e4:d4:c4:13:1a:fa:dd:84:10:02:c4:e7:33:e3:e1:54:fe:d4:
f0:a7:ea:34:3c:82:44:17:95:23:c1:89:a7:e9:75:a1:1c:a7:
c5:9f:c4:81:8e:4a:03:8a:2f:7e:6d:ac:f4:7f:99:86:d0:16:
7e:fc:16:a2:16:d2:e3:a2:58:07:63:40:55:31:ac:c4:75:20:
d5:28:35:90:09:99:d6:2a:a4:49:46:4c:65:a3:de:c4:39:4b:
42:47:4e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:46 2025 by rpki-client