Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa
File: WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa (raw, json)
Hash identifier: OqboybhTqeUl9b9SecOseaZfDnk1cvhEpGeclcmitv4=
Subject key identifier: 59:15:39:6C:9F:6C:EB:E7:02:31:4C:6E:1E:7B:7B:AC:87:59:D4:18
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 01941FFA1D599DC06778DE5DD88BB15D417F
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25465
IP address blocks: 94.207.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1d:59:9d:c0:67:78:de:5d:d8:8b:b1:5d:41:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5915396c9f6cebe702314c6e1e7b7bac8759d418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d5:6b:52:b1:ec:9e:e1:f7:3f:e1:97:b3:c0:
df:03:01:48:26:7e:9b:c9:a5:ab:db:10:17:75:23:
95:3c:c2:ff:d6:a0:a0:87:ca:25:ed:d5:e6:5e:b2:
39:a1:5c:f7:2e:8c:db:69:4f:79:2d:e5:6d:df:3c:
49:d5:63:9f:d2:bf:64:ad:22:80:ce:68:a4:53:ee:
83:9d:90:f2:5e:d0:0b:0b:58:e1:45:ed:75:03:d9:
68:e2:e3:9a:c4:fb:5c:82:5f:d8:ed:9c:ff:d4:16:
97:31:fa:b6:c7:40:f3:f5:83:58:f5:4d:86:ac:dc:
7a:15:f9:13:53:02:47:11:a1:2e:e5:ca:fa:30:0a:
79:80:86:37:90:8d:86:dd:c0:d1:b3:c4:d2:6e:17:
9b:7e:8a:7b:4a:ef:cb:63:8e:d9:12:88:50:e0:11:
e0:20:69:03:98:08:1e:93:dc:f0:0d:8d:ee:f8:50:
2a:09:cc:db:f5:4d:77:1b:e4:b9:9c:49:57:aa:4d:
70:e6:c9:b8:33:9c:91:a7:86:99:b6:aa:d8:7a:4d:
a6:2e:7b:f3:8d:c2:db:f4:e9:c1:0a:3b:d2:34:63:
81:6a:06:30:67:ac:c3:97:9a:d5:3a:45:38:54:6d:
04:dc:dd:81:86:c4:16:c9:eb:e1:7e:e6:b2:06:09:
0d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:15:39:6C:9F:6C:EB:E7:02:31:4C:6E:1E:7B:7B:AC:87:59:D4:18
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/WRU5bJ9s6-cCMUxuHnt7rIdZ1Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.207.41.0/24
Signature Algorithm: sha256WithRSAEncryption
72:0b:9a:21:be:d7:23:79:07:ec:b3:96:da:59:b5:9b:a1:be:
1c:05:e0:22:5c:50:8e:bd:bf:c3:eb:84:fa:54:8e:c7:6e:3e:
32:a2:d2:1e:f0:66:62:c2:97:b9:9c:47:28:6f:e5:32:90:7f:
e4:31:c9:18:22:a0:7a:a8:21:33:19:95:e4:ea:45:43:bd:80:
d6:7d:0c:a3:aa:f8:e6:ce:7a:81:c7:38:f6:14:6f:92:13:f6:
31:d9:f9:ca:69:1d:14:8e:74:03:60:9f:b0:30:2e:e3:2a:52:
33:a1:7c:fe:25:e6:f5:ca:10:0e:af:65:df:3a:71:f2:59:fd:
20:5d:2a:23:40:11:bc:a0:e3:42:7d:90:29:8f:72:ac:90:d7:
94:36:4a:44:42:94:20:49:05:ed:cf:45:5f:59:ed:b7:a3:b5:
0c:76:05:b7:a2:90:ff:06:d9:ae:de:c2:ff:13:e5:a0:82:f7:
98:47:27:13:53:ef:dd:51:61:35:90:80:06:00:f4:43:37:83:
4f:c5:65:0e:b3:24:00:fc:97:07:22:5e:8b:3f:70:63:3f:82:
d1:f2:8e:18:83:f7:d4:7a:16:90:f1:6b:4a:68:9d:7f:c9:f6:
91:10:bf:3b:8d:06:35:36:e1:78:a0:23:48:f4:f9:a8:cb:2d:
6b:5e:1f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:11:54 2025 by rpki-client