Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/atKTZmwcC-uKrCAzaY-oDJhEXmg.roa
File: atKTZmwcC-uKrCAzaY-oDJhEXmg.roa (raw, json)
Hash identifier: VxUfzMJo/+g9nJ0XiPXeCRcnVVGe1+H7eFghl1GumDQ=
Subject key identifier: 6A:D2:93:66:6C:1C:0B:EB:8A:AC:20:33:69:8F:A8:0C:98:44:5E:68
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824A67F383955EF1E09B18863DB890E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/atKTZmwcC-uKrCAzaY-oDJhEXmg.roa
Signing time: Thu 02 Jan 2025 17:51:18 +0000
ROA not before: Thu 02 Jan 2025 17:51:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200033
IP address blocks: 94.156.134.0/24 maxlen: 24
94.156.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:a6:7f:38:39:55:ef:1e:09:b1:88:63:db:89:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ad293666c1c0beb8aac2033698fa80c98445e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:40:cb:6a:11:cd:2c:c9:ab:8c:7a:d1:45:
e0:39:19:2e:74:86:30:97:37:97:64:c2:d8:6e:81:
95:14:d3:82:eb:19:76:5c:54:de:89:9c:41:fb:83:
5c:06:9f:a9:e0:34:9b:94:2e:8d:d5:2a:37:76:7b:
fe:31:a8:43:13:39:fc:e3:2c:99:8d:8e:a4:49:40:
38:4a:27:cd:a2:20:25:45:a0:1d:78:35:1f:92:d1:
38:1c:9d:b0:7f:1c:da:3b:3f:55:b4:1a:74:06:d4:
e4:30:3e:93:7e:94:da:de:cf:84:97:f9:0d:0a:d9:
b0:a4:6e:67:68:a5:76:be:f2:be:d9:cd:aa:80:13:
49:1c:b5:84:49:61:26:f3:05:57:f9:6b:02:52:fb:
8f:79:d0:a6:69:ed:ae:cf:11:04:51:26:93:72:b8:
15:25:d6:a9:41:13:3b:c8:15:49:dc:0d:2c:cf:9e:
0e:2c:3d:98:3a:dc:17:a5:5d:7c:d7:09:6e:18:19:
f9:54:eb:92:eb:b1:e9:89:52:c7:de:33:b7:e7:b5:
8f:f1:3b:a9:d0:9a:cc:33:25:f3:25:84:ff:85:9b:
8b:64:35:27:6c:b9:2d:b5:fa:19:c1:69:08:11:85:
7e:ec:7a:94:99:68:1d:8a:dd:04:7f:f2:08:15:46:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D2:93:66:6C:1C:0B:EB:8A:AC:20:33:69:8F:A8:0C:98:44:5E:68
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/atKTZmwcC-uKrCAzaY-oDJhEXmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.134.0/23
Signature Algorithm: sha256WithRSAEncryption
46:8c:d8:2e:f5:30:72:53:b8:82:cb:1a:f7:b4:56:6e:a9:40:
7c:b0:8e:a4:22:d6:5f:88:0d:27:68:fb:e6:f0:9c:d8:21:76:
0c:b8:ec:59:e6:2b:e2:72:c1:e7:61:14:7b:21:f3:a9:e7:35:
4a:ea:50:38:64:9b:f0:c4:e7:9e:36:e4:be:b1:b9:96:c6:88:
8e:8e:c7:54:de:aa:00:d5:63:a1:e0:21:fd:68:4f:ad:74:f3:
cb:50:a6:bd:f3:03:7f:69:bd:82:39:82:d1:03:53:69:ae:e2:
0f:68:f7:cd:8b:76:a4:3e:f8:4a:c1:c0:b3:be:a1:96:bc:5d:
dd:25:e7:10:d3:0d:03:1f:10:fb:b2:c2:03:1b:6f:89:76:67:
48:15:04:a3:13:9e:31:1d:f2:c7:e2:12:7f:a0:6c:2a:6e:18:
c2:6b:f7:b0:cb:22:8b:ed:bf:30:44:1b:c3:31:96:f4:d6:48:
2d:af:23:34:a0:e9:df:f4:23:c0:a6:d0:1d:b1:20:9d:6f:b1:
73:58:49:ed:0e:c5:f5:40:e8:74:e3:26:c3:18:59:ec:d2:c3:
dc:87:37:9d:63:ee:df:24:93:af:50:d1:bc:7a:1e:90:b7:48:
fd:b3:9b:cc:80:a1:91:4d:43:fa:42:96:7d:22:35:d4:8b:2a:
8d:c6:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:29 2025 by rpki-client