Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/9yjHUYS9Fxw_4dxtmR-3Rxot344.roa
File: 9yjHUYS9Fxw_4dxtmR-3Rxot344.roa (raw, json)
Hash identifier: AWQ6glDSqhKNOCwBlnvSM0hvzT6dwIHbQaxbn9xxzkI=
Subject key identifier: F7:28:C7:51:84:BD:17:1C:3F:E1:DC:6D:99:1F:B7:47:1A:2D:DF:8E
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 019420D62B6BDDC2874E6704C30C3DA83331
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/9yjHUYS9Fxw_4dxtmR-3Rxot344.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211334
IP address blocks: 94.229.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2b:6b:dd:c2:87:4e:67:04:c3:0c:3d:a8:33:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f728c75184bd171c3fe1dc6d991fb7471a2ddf8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e9:25:f3:1e:6e:38:83:f5:da:09:07:6b:20:
06:74:60:37:9f:24:41:95:80:27:2f:d9:68:52:89:
bd:5f:49:49:da:b8:e3:09:b3:bb:0d:4a:d3:c4:af:
20:1f:4c:7d:05:3e:7e:ae:6d:ae:53:a3:0e:bf:74:
1d:e0:d4:b6:f1:c7:81:8e:68:75:0b:e8:21:0c:da:
63:bb:fd:57:dd:cf:7d:9d:f7:93:f5:de:0f:2f:c8:
e0:86:76:4d:6a:84:3c:59:c5:11:0b:21:2b:14:9e:
ee:97:42:56:ff:a9:2e:2c:1b:a5:f2:84:b2:aa:f2:
71:f3:c9:25:b7:a4:2a:05:2c:e5:58:c8:23:75:e2:
69:86:dc:ab:42:41:12:00:bd:b0:89:cf:c7:36:92:
b8:44:27:06:47:38:bc:60:c2:93:a3:03:4e:9f:18:
97:70:66:e1:80:e1:f0:64:c9:52:f5:16:61:ba:d4:
5e:88:eb:61:3a:51:05:0a:c6:a8:15:89:ad:9f:fd:
97:22:8d:d9:83:d8:80:fa:50:c8:a9:36:a5:94:90:
79:21:2f:0f:ac:43:85:aa:c1:da:9e:8a:ce:94:54:
70:eb:27:10:6e:97:52:3a:4f:f1:49:47:c9:cb:23:
3d:97:38:da:b9:1f:60:e3:ef:51:eb:9d:b2:f6:35:
95:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:28:C7:51:84:BD:17:1C:3F:E1:DC:6D:99:1F:B7:47:1A:2D:DF:8E
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/9yjHUYS9Fxw_4dxtmR-3Rxot344.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.89.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:31:09:52:31:df:af:27:e7:f0:4d:1c:b6:61:a4:ba:fe:03:
e4:0e:1d:b5:42:ef:e5:d9:45:6e:b9:c1:89:ee:71:9b:58:0a:
5f:69:39:d0:30:a2:d8:b5:44:55:e4:eb:e9:bc:80:e2:fb:45:
8f:91:a8:a6:b4:2c:71:86:0d:de:a4:05:f1:e1:df:0f:28:12:
f7:c7:36:e3:47:0f:26:9e:7a:ec:ae:f2:e3:09:a8:9b:e1:c2:
74:88:08:23:2a:e2:3f:0c:08:3c:e1:a2:61:2f:65:51:1b:0a:
e2:d7:b7:4a:fd:2a:ab:6e:8a:43:5d:8b:33:d5:09:aa:d5:69:
39:dc:b2:dc:06:c7:d3:cb:15:0e:fc:36:dd:f8:13:41:93:3f:
93:80:84:d9:62:1a:dc:63:3c:78:9b:47:dc:a9:0d:88:56:af:
8e:49:81:81:9e:0f:51:4b:80:2b:c0:5a:8e:45:ac:5d:d3:1d:
13:c6:58:86:68:84:bd:17:fd:f1:97:3d:d8:8c:e7:05:7e:e2:
25:b2:68:8c:00:8f:fa:e9:cb:d5:54:b8:c3:ec:b5:71:6e:03:
0c:19:c7:ef:8a:05:00:27:f0:0f:92:81:f0:05:8b:c3:29:2a:
45:47:60:bc:a9:3c:20:ee:dc:94:7f:53:00:cc:4c:db:b9:b5:
e4:00:fc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:43 2025 by rpki-client