Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/2s76caLde7v2dsIuooS45-OE_SY.roa
File: 2s76caLde7v2dsIuooS45-OE_SY.roa (raw, json)
Hash identifier: SfMU8ADtIuJJDH8Zngm2/B9pvSJn1Jkcdcg5vCFct6s=
Subject key identifier: DA:CE:FA:71:A2:DD:7B:BB:F6:76:C2:2E:A2:84:B8:E7:E3:84:FD:26
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 01942068791664AC4FAD9745962B04451655
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/2s76caLde7v2dsIuooS45-OE_SY.roa
Signing time: Wed 01 Jan 2025 05:48:25 +0000
ROA not before: Wed 01 Jan 2025 05:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203949
IP address blocks: 94.126.86.0/24 maxlen: 24
94.126.87.0/24 maxlen: 24
193.111.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:79:16:64:ac:4f:ad:97:45:96:2b:04:45:16:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jan 1 05:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dacefa71a2dd7bbbf676c22ea284b8e7e384fd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f3:6f:2b:56:69:ad:f9:54:6e:c9:20:c8:9e:
23:08:9d:71:3f:44:dc:47:9d:ca:71:e1:18:47:d6:
05:3f:55:b9:90:8f:2d:7e:09:99:8f:97:79:33:87:
74:1c:7b:77:8b:41:dc:67:6c:cb:a8:cf:67:37:9c:
ca:71:0a:89:64:5b:a0:a8:61:2b:64:b2:32:77:56:
ae:c2:d4:7f:72:50:d8:06:8f:48:82:15:2b:76:88:
02:f3:0d:21:b3:68:1c:19:4b:8d:fa:cf:51:93:21:
32:e2:60:b3:cf:3d:6e:a5:e2:3a:16:ba:80:c6:ae:
46:65:22:37:ce:3a:1b:5c:f8:00:09:eb:dc:78:d1:
4f:41:c6:78:c0:4f:8f:6d:2e:81:1a:9c:62:70:eb:
de:e1:5e:14:e4:28:56:ad:bf:3d:8d:c6:92:d6:09:
63:ee:e4:f9:8f:02:bb:ca:88:01:0f:b8:d7:e5:ba:
83:49:db:a8:2f:63:e8:db:00:f6:1e:33:9a:a3:f6:
8f:fa:bc:04:69:e3:b6:db:0b:d8:67:1e:b4:d0:3c:
91:5d:a6:f7:aa:44:37:eb:04:67:ce:7d:84:cb:f6:
0c:f7:f2:c8:80:6d:ef:ee:34:6a:32:c3:77:bf:7e:
61:f6:a5:1b:e4:b4:b3:c7:67:ea:84:d5:97:08:68:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CE:FA:71:A2:DD:7B:BB:F6:76:C2:2E:A2:84:B8:E7:E3:84:FD:26
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/2s76caLde7v2dsIuooS45-OE_SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.126.86.0/23
193.111.148.0/24
Signature Algorithm: sha256WithRSAEncryption
05:75:65:39:5f:10:23:a8:f6:fe:53:87:8c:97:25:f8:0c:5f:
55:b8:d9:59:fd:3b:50:fb:44:b2:62:eb:e8:6c:94:26:18:a3:
1d:d7:1b:2c:41:39:52:87:3b:ba:1e:3b:8d:16:76:d9:91:f7:
64:87:5c:ec:b6:b2:cd:93:01:c5:0b:e2:10:cd:07:94:54:14:
66:e2:45:5d:71:5c:68:14:03:e0:f8:cd:da:4c:94:62:85:37:
3c:a3:cd:93:1f:1c:1a:12:19:db:fa:34:f0:9c:8b:7d:13:39:
ed:f9:a4:f8:9d:a6:8c:95:b9:86:77:cd:21:90:9e:f8:2d:4b:
e5:04:b9:64:f9:bf:7e:da:5f:a4:b0:f6:98:b9:85:7c:9e:a7:
65:d1:89:27:04:8d:2a:c0:9e:b0:fe:c6:6c:c8:e5:af:03:e9:
d5:01:50:b2:a7:f8:be:ab:fc:6e:03:c9:2d:98:8e:53:67:fb:
14:c1:08:64:d4:79:1d:8d:ce:4f:aa:2f:42:70:e1:ca:8f:b0:
71:8c:7a:64:a1:d3:1e:07:9b:ae:ee:11:0e:11:8c:19:2c:d1:
d3:96:48:af:e4:c6:fe:2f:dc:5e:01:44:f2:10:d0:63:34:b3:
df:38:35:dc:af:31:bc:e7:68:0b:c2:0b:2c:1d:be:89:77:48:
b4:ed:95:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:42 2025 by rpki-client