Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/Z4ofkESpTnS_Za2f7bq3x2ReDGc.roa
File: Z4ofkESpTnS_Za2f7bq3x2ReDGc.roa (raw, json)
Hash identifier: 8EmcU+Ud2yGKJeKRWd+BCSPrScNtKeU4SYeONSGw0pc=
Subject key identifier: 67:8A:1F:90:44:A9:4E:74:BF:65:AD:9F:ED:BA:B7:C7:64:5E:0C:67
Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9
Certificate serial: 019473D59DED059F26461B8B7215573A0953
Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/Z4ofkESpTnS_Za2f7bq3x2ReDGc.roa
Signing time: Fri 17 Jan 2025 10:36:06 +0000
ROA not before: Fri 17 Jan 2025 10:36:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197984
IP address blocks: 94.230.232.0/24 maxlen: 24
194.107.115.0/24 maxlen: 24
2a13:9fc0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:d5:9d:ed:05:9f:26:46:1b:8b:72:15:57:3a:09:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9
Validity
Not Before: Jan 17 10:36:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=678a1f9044a94e74bf65ad9fedbab7c7645e0c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:b8:f8:77:fb:6c:90:3a:1e:8e:5b:6f:f3:
68:3e:86:ca:c5:27:d2:b9:75:a4:af:91:cc:21:b9:
32:7e:f6:13:3a:26:23:46:4e:10:c6:1a:19:b6:d0:
0a:47:21:2b:70:85:b2:47:cd:68:3c:28:78:55:3d:
47:7d:6c:53:92:d2:5e:10:15:9b:3c:d4:3a:38:ad:
55:5a:cd:aa:65:52:22:01:c6:9a:40:c7:42:b7:7e:
b3:34:fb:da:e1:a8:34:c8:5f:66:79:ac:cb:c6:ad:
08:a4:29:ca:b7:f1:e4:37:43:4d:13:7a:20:ec:0e:
47:1d:f9:b8:94:13:7e:82:75:dd:62:45:1b:94:fd:
be:44:13:9c:50:a3:d3:a5:b0:07:7d:31:40:51:4e:
cc:93:91:ad:0b:9c:26:f1:38:99:8c:08:a3:f7:94:
3d:a7:3b:b6:c2:7a:ef:c8:14:14:2a:56:f1:e2:14:
0a:ea:66:30:9d:54:7f:fd:c8:cb:02:77:1e:a3:ad:
7f:f8:55:b9:87:45:fc:b8:e5:36:e8:22:90:1f:0d:
a7:78:c4:9d:7d:7a:51:8f:4e:32:98:e6:18:ac:1a:
95:26:6e:82:d1:3f:c3:cb:f0:ee:fd:26:83:ee:93:
73:7f:2b:76:f9:09:af:16:d0:eb:e4:07:a3:f4:52:
c8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8A:1F:90:44:A9:4E:74:BF:65:AD:9F:ED:BA:B7:C7:64:5E:0C:67
X509v3 Authority Key Identifier:
keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/Z4ofkESpTnS_Za2f7bq3x2ReDGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.230.232.0/24
194.107.115.0/24
IPv6:
2a13:9fc0::/48
Signature Algorithm: sha256WithRSAEncryption
42:00:15:0d:c4:7c:77:2c:f5:5b:ac:cc:21:da:72:f2:b6:50:
89:b9:dc:13:d7:99:cc:a3:da:b8:c8:a6:4b:d5:24:18:0e:aa:
a2:f7:b5:df:28:c3:fd:3b:d8:13:da:e8:6f:a2:a1:fb:19:6a:
44:64:96:dc:75:62:1f:0c:a8:ca:22:f1:de:9c:7e:46:67:e0:
5c:cd:c5:d4:5a:f4:e6:dd:26:09:ec:8b:c8:98:01:2e:91:a2:
f8:9a:c4:de:ce:a3:6b:cd:21:66:80:bb:f1:23:83:53:2f:a3:
47:10:a4:b7:f4:4e:ec:23:bb:8e:03:52:80:95:74:7b:7c:59:
f3:fa:25:9f:d5:7d:89:5c:27:54:b3:25:f3:9d:a7:57:59:c7:
cc:bd:3e:c7:02:ee:20:93:34:50:b1:a5:fa:b6:13:a9:35:f4:
eb:5c:98:f1:0d:4c:30:66:ea:03:82:dd:38:81:dd:a8:4c:a3:
f3:10:d6:54:0d:84:31:16:6d:9d:6e:3c:89:b5:64:2e:3c:44:
34:4b:3b:33:e7:f8:a3:11:46:41:f4:dd:7c:8d:7e:61:6f:b8:
5c:51:2d:99:a3:fe:6f:f2:84:16:53:ae:2e:79:28:6d:18:d0:
69:ee:5a:1e:22:83:8e:b1:e7:7d:da:70:22:7f:df:9b:90:ab:
21:d3:24:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:36:50 2025 by rpki-client