Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa
File: j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa (raw, json)
Hash identifier: OwOwX0XTVGFVpqs+QebopX8jgHz3h7KxGANJ/Crp1oA=
Subject key identifier: 8F:E5:9F:DF:39:C0:C7:21:D5:39:AD:72:1C:4C:D7:EA:FD:EC:A7:D5
Certificate issuer: /CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Certificate serial: 0194221F87A62DA4E9F10EC3EB4E8AB2B7A9
Authority key identifier: 9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa
Signing time: Wed 01 Jan 2025 13:47:59 +0000
ROA not before: Wed 01 Jan 2025 13:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51696
IP address blocks: 93.115.9.0/24 maxlen: 32
94.142.134.0/23 maxlen: 32
2a0c:1000::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:87:a6:2d:a4:e9:f1:0e:c3:eb:4e:8a:b2:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4d76dd2f46068b0871ad4500ac6e577afe469c
Validity
Not Before: Jan 1 13:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fe59fdf39c0c721d539ad721c4cd7eafdeca7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:12:34:ec:d9:a6:be:d2:6b:98:17:61:a2:
40:f9:45:d3:96:fe:6d:a1:c7:f9:dd:23:a0:c6:1a:
65:07:35:a4:3e:86:3f:e3:62:2e:e6:0b:d4:62:77:
30:cc:86:d1:36:35:26:1c:54:c3:70:cb:26:07:3f:
53:e7:a2:20:c8:4e:f5:41:4e:21:2e:0e:91:8a:19:
9e:57:cc:af:39:5b:34:19:0c:c1:ce:87:6a:35:d8:
1e:e0:86:90:a2:08:28:c4:59:bf:ad:f7:86:1c:69:
99:f9:00:c4:c9:4f:ea:65:cb:f3:de:dc:fd:e5:ff:
57:d1:b9:e5:80:3c:c3:bb:7c:fc:60:16:83:13:5a:
2c:34:1f:c3:32:a5:e6:df:33:3d:e6:f7:53:d3:0c:
3d:a2:d7:34:01:ce:1b:7f:e4:c0:90:fa:29:7c:42:
45:db:a8:ac:f3:fd:fc:09:69:17:ee:38:db:43:8e:
18:7c:ce:49:5f:83:9a:f7:19:97:98:ac:4b:d2:b9:
fe:ed:a9:1e:51:ef:a4:59:75:c7:47:15:54:22:53:
94:3f:8c:41:ea:5c:11:6b:88:6e:92:d6:5a:96:da:
d1:13:ff:ed:87:70:73:5b:66:06:d5:04:6b:7d:66:
08:e1:e0:4f:20:fa:cc:34:7a:3b:cf:57:23:ea:08:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:9F:DF:39:C0:C7:21:D5:39:AD:72:1C:4C:D7:EA:FD:EC:A7:D5
X509v3 Authority Key Identifier:
keyid:9A:4D:76:DD:2F:46:06:8B:08:71:AD:45:00:AC:6E:57:7A:FE:46:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk123S9GBosIca1FAKxuV3r-Rpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/j-Wf3znAxyHVOa1yHEzX6v3sp9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ed7c8a-3952-4401-9dd4-44692dbccb32/1/mk123S9GBosIca1FAKxuV3r-Rpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.9.0/24
94.142.134.0/23
IPv6:
2a0c:1000::/29
Signature Algorithm: sha256WithRSAEncryption
77:3c:1a:58:dd:04:d0:6c:a0:84:d2:c6:ea:e5:c4:0d:5c:9d:
0e:f8:99:4d:d7:dd:1c:ee:f5:a0:d4:f2:dc:22:9c:d4:36:2b:
fd:3d:9a:76:61:d0:1b:77:96:5e:c1:73:c0:e8:c2:64:13:74:
15:ef:ce:9e:37:5d:42:95:95:a2:d3:f6:6c:28:c4:24:a2:c6:
e0:87:75:d8:03:3b:29:24:fd:f6:7a:8f:ad:ca:34:8c:8a:32:
e9:5f:c7:14:4e:66:3b:34:f7:7e:bd:c0:24:6e:6d:91:93:37:
17:52:7a:bc:9c:10:fe:93:e1:d1:93:15:6c:85:1e:66:91:d6:
48:78:41:5a:c9:b1:19:68:56:f0:1f:f6:a3:9c:b9:8f:0e:74:
bf:64:a3:f0:80:b6:ec:d8:75:f0:91:cc:86:1d:30:21:a2:36:
d3:d2:6a:46:1d:99:cf:2d:69:29:86:14:4a:48:b6:d8:b8:37:
55:30:78:73:29:e8:fc:7d:68:96:87:b0:12:1b:b3:a7:ed:51:
a6:27:0f:6e:16:ef:0a:30:0b:0a:3b:7b:b0:96:90:45:24:8e:
c3:f1:c6:d9:52:9f:63:35:aa:db:f0:b0:cd:98:ef:fc:10:d6:
52:f5:29:f6:95:b9:4f:1f:74:16:cb:f6:70:2f:26:ab:55:a0:
68:d0:06:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:52:55 2025 by rpki-client