Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/07jXGO8Hz4F8EW5iBQdrH8Ssj9E.roa
File: 07jXGO8Hz4F8EW5iBQdrH8Ssj9E.roa (raw, json)
Hash identifier: BvjvJOUT5YxxU6jH6FHTYHjENLJrfak0hSPVtJa63mw=
Subject key identifier: D3:B8:D7:18:EF:07:CF:81:7C:11:6E:62:05:07:6B:1F:C4:AC:8F:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194949D5735809511F03D5F271855F904B7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/07jXGO8Hz4F8EW5iBQdrH8Ssj9E.roa
Signing time: Thu 23 Jan 2025 19:22:06 +0000
ROA not before: Thu 23 Jan 2025 19:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 94.154.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:94:9d:57:35:80:95:11:f0:3d:5f:27:18:55:f9:04:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 23 19:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3b8d718ef07cf817c116e6205076b1fc4ac8fd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a0:fb:7f:cc:b9:0d:4c:8f:1c:57:ba:45:09:
08:b9:2d:ba:98:60:0f:5b:3e:e7:96:82:94:ca:e6:
df:73:f0:cf:7e:6e:aa:c0:4d:01:46:a9:51:77:7a:
bb:e3:91:13:1e:26:b9:04:e6:86:34:a4:ff:a5:72:
cd:87:1d:b5:05:6d:c9:56:be:32:34:bc:b9:4f:89:
5a:10:59:36:7a:48:49:8c:b2:12:79:07:93:9c:d6:
7f:38:25:2a:ee:86:2a:22:2c:a8:f5:4a:54:01:e0:
6d:00:22:4a:1f:57:67:b7:47:72:67:3f:f7:48:52:
af:b1:00:20:b5:3a:35:d2:a6:82:93:d2:be:39:74:
e7:d7:96:90:cc:7a:29:7b:82:2b:ed:64:61:3d:58:
e1:0d:da:e8:78:1b:15:5e:04:73:35:6c:2a:b4:b1:
d3:50:be:e8:c6:fb:e7:59:3f:04:a5:f8:1d:e6:3c:
83:c6:06:77:d7:a6:3f:75:29:50:32:55:f6:83:09:
85:61:e3:dc:90:1a:9b:8a:27:89:77:9d:08:89:e7:
b0:55:76:8b:18:0f:82:67:e3:e3:35:c9:48:83:70:
61:00:96:3e:f5:15:92:83:f5:a3:04:9e:72:21:30:
0f:43:8c:e4:da:6b:d6:49:5a:d7:bf:de:d1:e8:ee:
75:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B8:D7:18:EF:07:CF:81:7C:11:6E:62:05:07:6B:1F:C4:AC:8F:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/07jXGO8Hz4F8EW5iBQdrH8Ssj9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.173.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:46:d7:3c:9c:95:d0:2e:cd:be:e5:db:fc:88:14:f0:3f:fc:
8c:a9:bd:75:d1:b5:e2:fe:19:28:f6:b3:0b:2b:44:5b:0b:05:
be:14:37:cb:78:16:d0:1a:66:b3:d2:f4:62:fc:ae:40:56:d2:
84:ca:e2:f9:56:44:9c:31:d6:32:1a:e0:13:05:03:dc:53:28:
7e:fb:f1:b8:94:b6:fb:b9:99:34:12:3e:88:94:1b:ed:7f:05:
2b:64:ed:24:4b:9f:c4:67:a0:3e:84:88:3c:cc:c3:9c:d5:96:
52:f1:ea:42:00:a9:6a:b6:60:27:3a:16:3a:a0:c9:46:52:5d:
9f:3d:43:6c:49:81:98:c6:61:d8:38:e8:a7:71:96:bc:50:34:
75:18:1b:3d:b1:6b:e7:5f:21:3d:8c:de:e2:84:c8:7d:99:58:
5e:f3:b0:12:b3:3c:f8:0f:94:80:b5:7a:aa:e5:2c:10:1d:f4:
4a:4f:a8:a5:b9:a6:b2:49:42:04:ca:0c:6b:8b:ca:b8:2e:c0:
db:78:bc:eb:0a:b1:f6:3f:ec:21:4d:f6:2c:c5:dc:92:23:ec:
a6:39:2b:84:56:7a:53:ec:f5:65:b6:9e:ab:5f:93:82:9f:c2:
7b:a0:a2:75:72:e5:ae:a8:43:0c:9f:b0:5e:e7:10:c6:73:a1:
62:b8:7f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:43 2025 by rpki-client