Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/AbDDieAjiM47QPI38uwxhNFokMk.roa
File: AbDDieAjiM47QPI38uwxhNFokMk.roa (raw, json)
Hash identifier: KjxwOHLyj1c1EEBagKLxM0Nr+10mBGuGj4d5BS85kno=
Subject key identifier: 01:B0:C3:89:E0:23:88:CE:3B:40:F2:37:F2:EC:31:84:D1:68:90:C9
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 0194221F8F4E23FC6E0D35D43E3D670678D6
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/AbDDieAjiM47QPI38uwxhNFokMk.roa
Signing time: Wed 01 Jan 2025 13:48:00 +0000
ROA not before: Wed 01 Jan 2025 13:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49036
IP address blocks: 81.94.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:8f:4e:23:fc:6e:0d:35:d4:3e:3d:67:06:78:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Jan 1 13:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01b0c389e02388ce3b40f237f2ec3184d16890c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:7f:b9:93:3a:ab:93:f5:8f:92:93:8e:44:
9e:16:4e:df:07:07:69:6c:80:d0:74:b1:51:f6:c8:
52:64:12:a3:99:05:0a:57:1d:e1:b1:6e:b3:d8:77:
cb:53:91:0e:1a:e7:69:bd:2e:98:65:98:69:45:a9:
84:e7:43:56:e0:d5:e1:ef:3a:98:f6:d8:e9:1c:62:
77:1b:fc:cf:c5:88:03:95:0c:78:dc:54:c7:fd:fc:
5f:9a:0b:41:39:2d:bc:5f:59:80:25:7b:a8:23:4a:
d6:4f:52:68:1b:8c:de:27:a9:d9:0f:a8:03:d2:6a:
a6:15:5a:33:a6:42:04:f5:89:79:01:9e:c0:5e:ae:
32:fe:95:79:96:37:71:4f:a8:e3:34:5d:a0:93:da:
50:8d:50:22:96:56:41:12:1d:ca:47:97:7d:2c:90:
50:54:76:54:de:3c:f0:61:ea:12:23:fd:3d:86:59:
d3:3f:8b:1e:db:86:4a:f8:b6:5c:2f:46:af:fd:5b:
64:fb:ee:80:0c:91:3a:28:5b:51:99:5c:3e:17:f0:
5d:93:d7:ad:44:0b:93:35:6e:88:7a:b4:52:9f:48:
24:d3:a1:22:8f:f7:e4:a5:c2:47:87:9f:3c:08:4d:
1a:3a:4f:ed:6d:37:86:c9:f2:6b:a9:b5:fb:1b:d0:
ff:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:C3:89:E0:23:88:CE:3B:40:F2:37:F2:EC:31:84:D1:68:90:C9
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/AbDDieAjiM47QPI38uwxhNFokMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2d:bc:5d:23:9b:c4:24:2a:fa:43:a8:33:3c:7d:81:9c:fa:
22:54:b5:99:8d:8c:42:19:a0:9d:bd:39:a3:62:15:f2:dc:70:
ba:1d:93:a7:06:51:71:e3:9b:d6:3f:b6:12:42:50:b1:2c:07:
27:2d:92:15:f1:b0:8d:76:42:45:0b:cf:58:42:0c:fe:c9:c6:
b1:05:a1:ae:6e:7d:ce:6a:a1:18:c1:79:fc:a8:29:2c:18:aa:
da:92:75:f0:7c:50:50:72:df:9a:ae:01:fc:5a:18:6d:76:d7:
f2:de:39:ea:fb:b2:8c:5e:3a:d5:1b:b2:be:23:ea:57:f9:c7:
c7:90:c1:b9:a7:68:96:63:d5:20:01:b4:d3:f9:2b:dd:64:e6:
48:12:d1:41:cb:8f:e3:72:92:08:ec:16:cd:02:e8:36:ec:93:
00:de:72:64:2d:b9:2c:dc:e9:01:fc:6c:35:aa:cc:61:14:60:
b5:02:4f:30:8d:59:5a:c6:19:8b:22:6e:5c:80:6b:9d:e4:67:
f7:ed:7b:39:65:05:14:ab:bf:7c:1d:fd:70:5d:80:ab:3a:38:
a4:b3:91:c7:23:7f:af:6a:79:2a:7e:fe:28:fe:f5:6a:41:d0:
ab:e2:97:6c:32:fa:a4:6e:5c:aa:c0:bc:c7:3c:25:63:7c:dc:
e0:a8:12:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:14 2025 by rpki-client