Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wv5gJ9X9Xxq8wVhGkymRyJ91svE.roa
File: wv5gJ9X9Xxq8wVhGkymRyJ91svE.roa (raw, json)
Hash identifier: rVsAF8LYJLebRrDdG60+lrIUhkeE3ojNOSK6B/ADoIg=
Subject key identifier: C2:FE:60:27:D5:FD:5F:1A:BC:C1:58:46:93:29:91:C8:9F:75:B2:F1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A93FDEAF7E3027E48BB750D3C4813D6C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wv5gJ9X9Xxq8wVhGkymRyJ91svE.roa
Signing time: Tue 18 Mar 2025 12:34:50 +0000
ROA not before: Tue 18 Mar 2025 12:34:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214209
IP address blocks: 94.156.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:3f:de:af:7e:30:27:e4:8b:b7:50:d3:c4:81:3d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 18 12:34:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2fe6027d5fd5f1abcc15846932991c89f75b2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:a3:f4:82:82:42:85:c2:62:74:ee:26:cd:
f8:74:bd:8f:be:3a:0e:22:c8:d8:5e:bd:39:e0:f6:
16:a1:eb:dd:7d:30:98:2c:36:d9:37:73:da:47:c7:
46:2b:7b:fb:90:db:de:49:ed:a1:3e:77:b1:fe:4e:
55:e2:24:c5:87:38:e5:a6:45:32:f9:98:7e:8d:99:
a4:33:7d:47:6b:00:b5:49:2c:ad:b6:7e:fe:52:c3:
05:f0:71:23:15:8f:cd:54:31:b2:94:1c:5e:60:91:
35:73:ae:2b:0f:0b:e0:57:25:3d:c7:ca:56:5d:a2:
11:94:50:01:a1:85:8a:63:1f:6c:5d:f7:bc:84:3b:
60:72:40:fe:60:48:b4:19:12:ee:15:2a:cb:0b:18:
0b:2b:73:ff:4a:e0:9a:94:f2:b8:00:cb:2e:7d:22:
fa:a4:09:ba:b2:d3:38:cd:2a:2b:22:37:5c:90:d4:
74:0b:63:bf:a2:f9:18:02:52:cc:b7:32:e8:e6:32:
48:eb:1f:71:9b:7e:3e:ad:c2:8c:45:fa:c4:6d:59:
94:c4:4f:56:83:f5:5b:ce:c7:fb:1a:10:41:91:c1:
73:b9:a7:b7:96:f2:22:7e:b6:0a:63:51:5f:cf:8a:
ad:00:f3:ac:bb:0d:0a:4e:de:13:c5:24:d1:6d:d1:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FE:60:27:D5:FD:5F:1A:BC:C1:58:46:93:29:91:C8:9F:75:B2:F1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wv5gJ9X9Xxq8wVhGkymRyJ91svE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.152.0/24
Signature Algorithm: sha256WithRSAEncryption
31:43:36:d6:d6:cf:05:ca:fc:a8:f9:8b:d2:6c:74:62:f2:63:
c7:b3:50:71:3a:1f:ca:4e:20:04:19:31:9d:b1:bf:fd:9f:af:
41:69:3f:10:0c:89:d3:f1:65:11:20:26:7a:38:ba:66:12:ff:
ea:fe:b8:0d:d6:7d:77:a6:1b:1a:20:fd:cc:fe:2d:2c:fc:ab:
ed:8b:82:3c:bf:84:1f:1a:9d:86:73:61:aa:1c:6d:d4:9b:97:
d9:99:57:21:8f:ec:67:c7:56:0c:4f:f5:de:96:d5:78:4c:bf:
30:75:08:a3:08:e8:7e:f2:fc:3f:a3:32:c5:cb:5a:10:af:95:
60:bf:20:7a:75:91:60:d0:e3:d5:fd:bf:de:ef:e3:94:a9:16:
ef:5a:fa:db:2b:06:ca:76:31:e1:af:8a:dc:d1:60:96:48:56:
92:6c:16:b8:c5:f6:cf:f7:e6:5b:70:4d:f9:65:1b:4b:83:86:
a4:52:f3:85:74:94:4b:fd:bd:7a:e7:eb:cb:09:a4:d4:c1:2f:
45:24:5d:b8:89:c5:8a:cd:2e:c1:9f:15:05:0c:64:6f:66:11:
ea:c5:52:3d:5d:95:75:84:8b:33:d1:c4:0b:6c:4f:77:b2:a8:
5a:b3:66:af:e0:ce:69:cf:61:7a:eb:b8:86:62:d4:d0:1f:e4:
45:ab:b1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:42 2025 by rpki-client