Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/uxOV7IYIl0nOiPC48ooZo0Bt_LM.roa
File: uxOV7IYIl0nOiPC48ooZo0Bt_LM.roa (raw, json)
Hash identifier: lyMZrr+5NelerEo1KC88KcN/f2W5wCKFdUhMA++xkyk=
Subject key identifier: BB:13:95:EC:86:08:97:49:CE:88:F0:B8:F2:8A:19:A3:40:6D:FC:B3
Certificate issuer: /CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
Certificate serial: 0194236A1B0DAEBA628DA1A03D60E3F3238F
Authority key identifier: 18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/uxOV7IYIl0nOiPC48ooZo0Bt_LM.roa
Signing time: Wed 01 Jan 2025 19:49:03 +0000
ROA not before: Wed 01 Jan 2025 19:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48685
IP address blocks: 94.250.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1b:0d:ae:ba:62:8d:a1:a0:3d:60:e3:f3:23:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18f003fba37b00d5f9ce7ec84a3e0668bcd02824
Validity
Not Before: Jan 1 19:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb1395ec86089749ce88f0b8f28a19a3406dfcb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:88:4f:9c:1a:2e:02:73:69:ef:8c:e7:dc:38:
56:97:5b:81:79:c7:00:89:bd:fb:b4:2e:9b:bd:3c:
16:8e:c1:98:bf:c9:97:26:94:96:4a:3f:00:8e:7a:
a9:f0:9e:8d:a7:1d:41:16:2a:c6:c8:3c:f3:3c:8a:
38:4e:f7:1a:6f:ea:f5:bd:3f:41:96:67:a6:2e:f9:
3b:f2:5c:f4:b8:92:5e:3b:89:e4:2e:c4:76:d9:fd:
f4:95:7a:46:93:3e:b6:b3:67:48:c0:26:80:6e:37:
5c:f2:7f:59:ba:61:e6:ad:89:52:13:3b:7f:8d:71:
a3:06:8a:aa:23:62:69:df:2e:8f:74:8c:4a:c7:18:
80:1a:0b:dd:ad:da:0b:d3:7f:f0:18:cb:eb:18:a0:
1b:49:f2:be:3e:7a:3e:8f:95:66:77:31:38:f1:d4:
64:4c:1e:1f:0f:3c:a7:4b:25:da:f0:b4:3e:2a:a3:
e5:f6:2f:8f:65:c3:17:cb:fa:6b:8f:d2:3c:50:14:
06:43:7f:61:3c:b5:7e:fc:67:4c:a2:e0:93:fb:17:
12:9c:d4:94:14:54:bc:32:d4:a7:07:c0:4d:0a:fa:
d3:d6:53:65:65:d4:97:ff:7b:8c:2c:5b:4e:06:ed:
8e:c1:ca:f4:f0:0b:73:28:cf:06:43:65:7c:00:79:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:13:95:EC:86:08:97:49:CE:88:F0:B8:F2:8A:19:A3:40:6D:FC:B3
X509v3 Authority Key Identifier:
keyid:18:F0:03:FB:A3:7B:00:D5:F9:CE:7E:C8:4A:3E:06:68:BC:D0:28:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/uxOV7IYIl0nOiPC48ooZo0Bt_LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d20fd2-072e-4752-afa4-0334ee1ef3ff/1/GPAD-6N7ANX5zn7ISj4GaLzQKCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.250.244.0/23
Signature Algorithm: sha256WithRSAEncryption
09:2d:23:33:55:23:2c:e4:92:c7:7a:45:59:6e:79:fa:06:dc:
88:54:86:18:03:54:f8:fc:6d:e3:a9:26:23:d9:6b:6f:5f:56:
db:18:bf:c1:2e:b1:bd:bc:7f:95:88:ce:33:17:ed:f6:87:cd:
88:f9:16:b4:fd:11:39:10:4b:f4:94:22:46:04:89:43:43:c0:
45:6c:ec:bc:a5:0e:51:5c:c7:8f:40:37:5f:90:60:95:51:9b:
df:6e:47:50:d9:ce:80:bd:5b:0d:68:26:45:cb:88:62:8f:b6:
79:61:ae:67:5c:1f:9b:43:ae:84:59:3d:c7:b3:2e:4c:31:dc:
ae:91:58:07:bf:b9:eb:ad:e6:c5:47:18:40:2d:66:fb:6f:db:
b8:b8:4b:a2:68:8d:f5:cc:97:ad:44:4b:d5:9e:c9:09:4b:1f:
68:47:d5:e2:1f:a0:24:f7:69:f3:17:00:2c:aa:43:d6:05:f3:
c0:9e:b4:d2:da:0c:22:f2:f1:3b:b5:0d:31:50:3e:60:96:4b:
bd:40:0c:7c:42:e3:bc:79:5a:eb:5a:fc:e4:24:41:49:81:ec:
b0:c5:48:77:c2:7c:a6:5b:61:e5:64:d6:51:99:7c:7c:87:1b:
53:a6:bf:42:a4:97:1d:e8:df:ad:bc:7c:2c:41:a3:aa:ac:df:
95:00:50:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:51 2025 by rpki-client