Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zLVCSXUB3WVxOqooeIV0p7sJnfw.roa
File: zLVCSXUB3WVxOqooeIV0p7sJnfw.roa (raw, json)
Hash identifier: NBYzHvlE72Y4ua6dRzs326AwKl2ymRtdxt/NK/h0sio=
Subject key identifier: CC:B5:42:49:75:01:DD:65:71:3A:AA:28:78:85:74:A7:BB:09:9D:FC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824AE67DE201CD84AD08BB3E80B180B
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zLVCSXUB3WVxOqooeIV0p7sJnfw.roa
Signing time: Thu 02 Jan 2025 17:51:20 +0000
ROA not before: Thu 02 Jan 2025 17:51:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204457
IP address blocks: 94.103.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:ae:67:de:20:1c:d8:4a:d0:8b:b3:e8:0b:18:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccb542497501dd65713aaa28788574a7bb099dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:05:76:83:ae:22:b2:03:6c:a1:2b:44:37:
fb:04:84:be:76:be:ec:eb:a5:ec:79:d1:d6:dd:91:
19:64:ac:0a:e8:9e:e2:49:2a:ac:ab:c2:45:e6:72:
ff:b7:8a:d6:4e:bf:13:d4:24:ae:34:fc:e1:09:2d:
d9:23:42:8c:8e:01:9d:ea:3a:11:6d:50:f9:2d:e1:
e3:4c:71:69:dc:ed:ab:d1:53:37:91:44:b0:18:47:
b3:c7:53:2b:37:ba:96:83:c2:b4:e5:9d:19:b3:57:
17:c6:44:a9:32:cf:ec:31:95:60:fc:38:06:32:bd:
99:43:62:a5:13:e8:bb:f9:4a:25:28:29:05:08:08:
89:ac:f2:14:79:00:b5:4e:de:cc:9e:69:82:6a:ff:
20:aa:69:c1:28:94:6e:44:5d:8a:90:76:f7:3f:a4:
ad:fc:25:96:c2:9c:70:df:0a:e1:4e:55:b6:ac:fd:
7f:c0:ee:91:ca:9c:4d:fd:9c:af:fd:c0:39:97:93:
4a:e4:fd:12:7e:40:ae:8e:1f:db:96:ba:93:40:1e:
eb:a2:42:ad:fb:45:48:bf:50:61:bb:8d:6d:ce:7d:
b7:88:40:a9:77:74:a7:f2:89:18:d2:47:9d:2f:75:
d6:db:ed:5e:b7:5c:af:9a:97:53:59:18:98:e3:27:
eb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B5:42:49:75:01:DD:65:71:3A:AA:28:78:85:74:A7:BB:09:9D:FC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zLVCSXUB3WVxOqooeIV0p7sJnfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.124.0/24
Signature Algorithm: sha256WithRSAEncryption
86:73:d6:ae:58:36:5d:5e:ed:da:71:97:81:ae:58:5b:a6:e0:
0f:82:a8:0e:a5:dd:4a:92:90:bc:7d:a6:fe:f6:2b:d9:ad:9c:
da:38:0d:d3:ff:93:29:28:aa:8a:34:55:f5:ef:26:be:4a:91:
18:d8:8f:63:86:fc:fa:a6:3b:5b:ef:1c:53:79:4b:0c:d0:6e:
8a:a4:e4:06:41:f0:05:af:08:cd:b3:a3:e9:8e:09:a6:3c:10:
ef:35:11:08:d6:10:5c:f4:7e:4b:da:a0:a1:6f:52:c7:31:36:
9f:58:d4:95:f5:ab:ea:8f:91:89:ea:c6:30:c8:4b:e2:5b:48:
39:17:17:7a:20:82:02:a1:38:1b:88:a3:fa:08:01:35:40:12:
5b:35:6b:96:96:a4:1d:b2:58:53:5f:8e:04:88:c1:88:a9:ed:
99:e3:d0:32:9f:41:bb:2b:0a:38:19:23:d6:cc:89:87:18:9f:
34:9c:c8:44:5c:0c:e8:22:51:1a:8b:50:ba:42:18:63:17:15:
e6:fd:5a:e8:d9:1c:96:c9:66:86:65:c0:60:fa:99:58:02:b7:
33:11:a0:0d:48:48:3a:98:bd:72:59:53:95:1e:33:0c:f5:c5:
04:43:e4:86:b1:6a:e8:5b:49:8a:15:e0:7f:12:6e:d5:e7:3b:
bd:de:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:30 2025 by rpki-client