Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XS_fhN4gFYwujUfH915zPGB4xZo.roa
File: XS_fhN4gFYwujUfH915zPGB4xZo.roa (raw, json)
Hash identifier: L7FnifoBv1zAMPn4F6Zj/Yvi5+WgwtZnUVNk9ZnucLU=
Subject key identifier: 5D:2F:DF:84:DE:20:15:8C:2E:8D:47:C7:F7:5E:73:3C:60:78:C5:9A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824D10F1E976204042CB92CBDB25CDF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XS_fhN4gFYwujUfH915zPGB4xZo.roa
Signing time: Thu 02 Jan 2025 17:51:28 +0000
ROA not before: Thu 02 Jan 2025 17:51:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215707
IP address blocks: 94.156.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:d1:0f:1e:97:62:04:04:2c:b9:2c:bd:b2:5c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d2fdf84de20158c2e8d47c7f75e733c6078c59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:f8:65:95:a0:8e:14:73:60:a8:d5:6e:bc:
60:6a:79:9e:3b:52:ff:34:4d:9b:2d:8c:c9:86:b4:
61:05:f6:6b:01:62:d1:27:4a:48:71:37:d9:2e:83:
1e:44:74:14:76:ec:0e:95:bc:73:15:59:1d:1e:6a:
a1:e0:07:4a:6e:3f:59:6c:4b:b3:56:ca:b6:f2:4c:
0e:32:c6:2f:f5:f7:39:69:da:c6:23:78:cc:c5:63:
45:9e:c3:1f:de:e3:ef:fb:d4:58:70:14:b8:60:e7:
9d:f2:d1:c8:33:b2:ca:0e:f5:04:fd:14:26:7a:13:
6a:1c:a3:39:87:a2:79:b6:f8:15:2a:78:b4:39:76:
d1:bb:a0:ee:48:b5:11:de:a1:0a:80:1e:48:21:e0:
7b:89:67:31:2c:e4:d3:2f:2f:18:0a:e6:6a:ce:67:
90:5d:25:1e:ba:c6:e0:25:02:34:f2:f1:44:40:b8:
2a:4c:1e:8e:87:40:6a:0e:98:b9:5f:ab:86:10:fd:
8b:21:4b:5a:dc:cc:9f:fe:3b:a3:27:2d:ec:5d:5d:
2d:6b:0d:b9:1d:89:70:6a:09:04:fa:b8:d2:62:48:
38:42:3f:c8:52:eb:40:a2:8f:62:f2:0f:8d:53:24:
f6:a5:0d:ef:da:28:85:c6:f0:c5:05:f4:26:0c:17:
5a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2F:DF:84:DE:20:15:8C:2E:8D:47:C7:F7:5E:73:3C:60:78:C5:9A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XS_fhN4gFYwujUfH915zPGB4xZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:57:e9:c6:bd:82:4e:e0:36:2d:fe:bf:e5:f2:d2:99:4b:60:
47:c0:46:94:03:90:ef:97:3d:6e:c1:6d:47:54:1c:f7:cd:9d:
ff:ee:11:c9:dd:2e:03:17:de:49:c6:91:ea:97:e9:b2:cb:73:
58:63:64:39:40:41:bb:20:1d:54:e5:21:f7:85:4e:47:bb:60:
37:77:04:f7:bb:91:9f:41:e4:48:07:9a:dc:cc:9b:b2:d3:aa:
24:18:fa:69:cd:c5:25:88:c7:c4:73:32:83:dc:d0:50:b3:af:
0b:3a:41:19:19:ef:59:32:87:1a:e1:46:5b:b6:0e:2d:e5:f6:
86:98:f5:21:18:48:15:f1:b3:65:b4:82:cf:29:be:6b:07:81:
5e:44:10:ef:e8:8c:c3:96:2b:d7:a3:8f:cf:78:84:e8:f7:ca:
a1:e5:2b:c2:d4:bb:a0:cb:5c:db:f5:bc:25:c0:d8:8a:8a:e3:
fa:93:80:13:5a:32:47:30:ab:6b:99:82:ab:1d:03:1b:e6:32:
26:6e:df:91:e4:96:54:13:0b:4b:84:ca:69:0a:1c:56:6d:06:
a5:14:fb:e9:28:16:b8:6a:a3:0f:c0:f4:89:3f:be:be:6b:35:
88:24:02:ea:fb:79:11:76:8e:b5:02:b1:67:cf:3e:e3:65:e2:
76:6b:3b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:08 2025 by rpki-client