Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/ipcAqlbQdh9QjilJG8UTA6cw-zw.roa
File: ipcAqlbQdh9QjilJG8UTA6cw-zw.roa (raw, json)
Hash identifier: RUMHng+Xlo2Ru6wmJaBAotc3mLSEqq30G4I26Jr98jk=
Subject key identifier: 8A:97:00:AA:56:D0:76:1F:50:8E:29:49:1B:C5:13:03:A7:30:FB:3C
Certificate issuer: /CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Certificate serial: 019420D6132483362FD7F808AEFF1686CD27
Authority key identifier: 48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/ipcAqlbQdh9QjilJG8UTA6cw-zw.roa
Signing time: Wed 01 Jan 2025 07:48:08 +0000
ROA not before: Wed 01 Jan 2025 07:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57373
IP address blocks: 94.143.228.0/24 maxlen: 24
2a12:a580::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:13:24:83:36:2f:d7:f8:08:ae:ff:16:86:cd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4806b9e62f1b00f2cf98d0dcc583292afacb522f
Validity
Not Before: Jan 1 07:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a9700aa56d0761f508e29491bc51303a730fb3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:93:e1:c5:f2:b8:6b:05:cb:df:e6:40:31:
3d:f6:e1:16:e0:12:69:05:8f:da:ff:59:47:43:d2:
8e:fa:55:15:fe:56:c8:c5:a9:5a:5d:62:58:17:d7:
bc:bc:57:3d:34:00:fd:f2:89:69:c5:a7:55:15:f7:
d9:ff:de:b3:4f:e3:a5:ad:68:89:82:ac:38:1f:22:
8f:b5:c8:0c:0a:ad:51:63:90:32:e3:05:4a:39:33:
e9:6e:52:f9:78:a1:73:48:a2:1a:14:a6:d9:46:5b:
f9:8e:ed:be:cb:c2:fa:35:e7:18:0d:a3:06:ce:ff:
86:fd:33:73:f1:e6:29:a7:b1:30:19:12:16:b9:6c:
5a:67:9f:c4:b6:7e:0f:aa:7a:ee:a4:b7:22:33:7c:
3b:3f:16:53:01:97:b8:5f:c3:47:b3:30:64:de:ee:
df:cf:a1:c3:bd:e8:f8:41:12:49:71:79:67:cd:7f:
46:53:78:49:8f:ea:26:14:54:3e:97:30:ba:ba:76:
66:97:50:53:5b:5c:90:26:10:93:9e:2a:ec:09:b9:
86:ae:67:10:b7:93:e8:cf:0f:4c:53:4f:ee:1d:f6:
39:e5:60:15:bd:bb:eb:55:80:a9:82:e2:0c:46:18:
20:65:5d:f1:c9:2e:61:18:41:54:52:d3:02:c6:af:
d3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:97:00:AA:56:D0:76:1F:50:8E:29:49:1B:C5:13:03:A7:30:FB:3C
X509v3 Authority Key Identifier:
keyid:48:06:B9:E6:2F:1B:00:F2:CF:98:D0:DC:C5:83:29:2A:FA:CB:52:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAa55i8bAPLPmNDcxYMpKvrLUi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/ipcAqlbQdh9QjilJG8UTA6cw-zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/baa4bc-924e-4364-9f13-a5c96e211605/1/SAa55i8bAPLPmNDcxYMpKvrLUi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.228.0/24
IPv6:
2a12:a580::/29
Signature Algorithm: sha256WithRSAEncryption
82:69:93:5e:87:ed:27:16:57:23:73:b7:16:cf:e8:7d:b5:cd:
fe:e6:86:92:08:fc:40:63:09:f8:48:8d:c8:b1:13:4d:df:03:
c5:ed:7a:66:b1:3d:b4:01:28:6f:48:73:67:67:c5:ae:93:e9:
f9:a3:29:8a:04:d7:c7:0f:34:33:55:97:d8:c4:69:da:27:bd:
d3:0e:a3:20:c1:77:08:65:10:51:49:05:b0:10:f6:dd:75:43:
d6:59:65:7b:f5:99:c8:d1:f5:49:f8:18:96:2e:7b:30:bc:9b:
d3:a0:36:06:16:85:e2:0a:0f:38:eb:cf:02:bc:81:70:9e:3e:
c2:6b:05:3c:6e:e7:e3:93:6a:75:60:ee:d1:d2:f5:4a:a8:e8:
a4:74:6f:8e:b8:03:0d:9d:5b:fe:a7:a4:c3:dc:64:d5:31:51:
85:ea:50:b1:c3:c2:d8:42:27:7d:d8:82:2f:e8:9b:71:eb:5e:
36:a9:71:61:ce:77:05:fd:7f:b5:90:e7:4a:68:cb:cd:a9:79:
c8:43:23:68:8f:d4:1a:06:90:82:e9:41:67:4f:46:b7:b3:47:
fd:94:d6:03:37:24:26:e2:02:bd:c1:e5:47:07:d8:3f:27:f0:
9f:10:3f:bc:2e:ac:db:d2:ed:a5:5f:2c:0c:30:09:9b:aa:7d:
63:29:5b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:40:38 2025 by rpki-client