Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/0I1Z0G38n0YJrpY9RYQTiEbwkeU.roa
File: 0I1Z0G38n0YJrpY9RYQTiEbwkeU.roa (raw, json)
Hash identifier: nhISjkHrGUdu9DkOm+JicyPkRd7uOy5I5pZByrTsVVE=
Subject key identifier: D0:8D:59:D0:6D:FC:9F:46:09:AE:96:3D:45:84:13:88:46:F0:91:E5
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019440CE249E0D67033D84D1EA1A3D7C17D7
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/0I1Z0G38n0YJrpY9RYQTiEbwkeU.roa
Signing time: Tue 07 Jan 2025 12:47:19 +0000
ROA not before: Tue 07 Jan 2025 12:47:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59703
IP address blocks: 94.139.182.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:40:ce:24:9e:0d:67:03:3d:84:d1:ea:1a:3d:7c:17:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jan 7 12:47:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d08d59d06dfc9f4609ae963d4584138846f091e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f4:b0:20:25:69:7c:93:10:d6:79:6e:94:0f:
2c:26:54:52:f5:d0:8c:ce:a3:13:a4:a6:8a:24:bc:
0b:36:8c:72:1a:39:b2:06:0d:37:ad:6a:a8:37:80:
d5:d3:0e:31:1e:dd:0d:44:e6:4a:8c:7b:1c:56:19:
dd:92:bf:21:cc:49:a7:f8:06:ca:01:c0:54:d6:e1:
65:fd:c5:74:1e:30:84:05:a0:3b:75:72:be:22:dc:
b9:bb:1f:ba:ce:0d:cd:08:c0:91:76:da:82:b3:16:
87:23:12:23:2d:19:0e:8a:37:b6:81:c1:e8:06:64:
b0:69:9f:bf:24:3c:e1:d6:11:fc:34:5e:49:58:5c:
0d:8f:6a:37:f5:62:e0:4e:26:90:56:a7:1c:d8:8a:
af:e5:88:88:24:d8:63:07:de:68:3a:dd:59:62:3b:
32:40:df:38:aa:31:bb:c8:22:55:18:53:a3:b2:67:
a6:f9:dc:ca:3b:ae:86:5f:56:e3:72:a5:9e:16:0e:
fc:d9:3e:ab:90:b9:5b:9e:b5:85:84:95:8d:9e:89:
e2:23:c5:c9:fb:41:9f:7b:cb:d1:78:ab:a0:00:91:
b2:b7:74:83:76:4e:a4:e5:1d:d4:44:b9:5b:ab:e7:
de:3a:5d:c7:95:34:8f:f6:cb:29:3a:b8:24:12:aa:
04:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8D:59:D0:6D:FC:9F:46:09:AE:96:3D:45:84:13:88:46:F0:91:E5
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/0I1Z0G38n0YJrpY9RYQTiEbwkeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.182.0/23
Signature Algorithm: sha256WithRSAEncryption
45:25:b8:9b:06:45:cc:6a:d2:75:9f:d6:7d:72:ac:c7:e7:eb:
0c:8e:26:be:2e:c3:8c:2e:76:34:5b:fa:25:d4:9a:d9:e0:c5:
0e:2b:ac:41:7c:f0:38:51:21:94:c5:0b:1b:52:5e:27:03:6f:
e9:48:24:1e:40:c5:e3:81:50:9c:54:54:92:c0:a2:69:ea:12:
6a:6e:49:6b:e1:df:c9:b8:32:ce:2c:80:69:22:d6:b8:36:e3:
a7:4c:4a:1f:f1:23:41:e6:1c:fe:f8:cf:f4:3d:5e:54:9b:35:
ba:3e:5a:76:62:d7:e4:68:4d:86:dd:50:94:18:3e:7f:47:4a:
ff:42:cf:92:61:f1:e5:58:d6:25:b2:ad:55:6e:61:e6:77:91:
7e:c5:b7:da:43:df:c9:b8:d6:e9:a7:89:86:3b:aa:3d:ab:9d:
22:89:da:5b:b4:ab:8b:84:7b:b7:fb:d4:33:cd:93:91:51:96:
81:72:d8:d9:46:ea:33:ee:f6:66:fc:08:69:f8:88:44:22:f9:
99:af:3c:6b:52:c5:28:56:4a:91:b4:3a:a6:9f:e4:ff:ae:12:
d0:53:a2:88:cf:bf:28:63:69:80:70:f2:73:27:ee:cf:d1:5a:
5a:f1:84:37:d4:7c:54:96:03:d1:7b:06:77:c2:34:8b:56:1e:
8b:96:0a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:05:05 2025 by rpki-client