Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/T1pSPZV-Mwgn4GLdqNtrKRS8C28.roa
File: T1pSPZV-Mwgn4GLdqNtrKRS8C28.roa (raw, json)
Hash identifier: 2LtzpsmH6wOcK3NJRz4N1bZwJy48SzEMKka7YujYVBw=
Subject key identifier: 4F:5A:52:3D:95:7E:33:08:27:E0:62:DD:A8:DB:6B:29:14:BC:0B:6F
Certificate issuer: /CN=abff1f77f397a1a80fba71b4d2d1db917b3ba6a0
Certificate serial: 5BE0
Authority key identifier: AB:FF:1F:77:F3:97:A1:A8:0F:BA:71:B4:D2:D1:DB:91:7B:3B:A6:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_8fd_OXoagPunG00tHbkXs7pqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/T1pSPZV-Mwgn4GLdqNtrKRS8C28.roa
Signing time: Sun 06 Mar 2022 07:50:41 +0000
ROA not before: Sun 06 Mar 2022 07:50:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50131
IP address blocks: 94.154.114.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23520 (0x5be0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abff1f77f397a1a80fba71b4d2d1db917b3ba6a0
Validity
Not Before: Mar 6 07:50:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f5a523d957e330827e062dda8db6b2914bc0b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:86:d3:a3:0e:81:10:a7:8b:b2:0f:e0:e4:
4d:5e:cb:8d:9e:6e:4c:a7:78:7a:14:22:43:83:c3:
3b:b4:a9:0b:e4:86:75:e2:03:75:38:c8:24:5a:e6:
b0:c6:f2:4c:98:45:e9:4e:0b:99:e2:6d:89:60:23:
64:f9:8f:cd:02:1d:ab:69:86:79:76:3b:30:3b:37:
8e:56:f3:2a:42:d7:0e:50:08:a5:b8:ac:91:22:c3:
25:97:b2:d0:89:fe:29:ec:dc:86:04:5b:15:3b:73:
d9:90:ba:4a:e1:3d:fc:99:b4:da:f1:43:14:c1:ba:
54:80:66:60:4f:aa:53:b4:9b:d9:47:f7:3e:14:87:
39:89:e9:77:64:8c:f1:b4:53:c5:97:01:bd:6a:98:
36:47:e0:6e:63:6c:a0:12:3f:8d:c0:a0:52:d5:ee:
05:9a:85:38:75:a4:54:37:1d:c2:41:0f:41:cf:e3:
d3:20:35:48:59:42:15:16:46:84:5b:65:06:0b:69:
19:84:c4:6b:80:9a:1e:5b:ef:ad:d0:77:47:be:26:
d5:43:da:03:a5:54:70:e6:10:2a:ff:4f:8b:49:ba:
56:74:01:85:76:7e:89:75:e3:e4:53:8e:1c:ca:ba:
c7:ab:39:35:24:dd:b8:a0:9d:71:ec:f3:89:89:1e:
49:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5A:52:3D:95:7E:33:08:27:E0:62:DD:A8:DB:6B:29:14:BC:0B:6F
X509v3 Authority Key Identifier:
keyid:AB:FF:1F:77:F3:97:A1:A8:0F:BA:71:B4:D2:D1:DB:91:7B:3B:A6:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_8fd_OXoagPunG00tHbkXs7pqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/T1pSPZV-Mwgn4GLdqNtrKRS8C28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2b8e3e-e3bc-4635-9397-7d5dfa7d03d3/1/q_8fd_OXoagPunG00tHbkXs7pqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.114.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ad:4a:99:f1:87:96:07:03:8d:3c:ea:5d:31:7b:75:36:e1:
24:7e:0b:76:8d:a1:fb:16:d7:c0:48:19:10:c4:16:8e:bf:68:
a9:b8:00:a8:84:24:42:83:55:e1:50:83:95:42:3e:c1:c0:60:
8c:57:8f:53:ac:10:99:a5:83:0b:76:e4:fe:e8:24:ba:66:16:
71:8d:6a:92:f2:0f:a1:53:06:aa:1e:6e:98:0b:31:5c:4d:b2:
19:62:65:a9:7d:61:a1:66:78:5c:41:6c:88:d8:25:c7:cf:c9:
49:28:d8:a1:50:dd:f9:77:8f:85:06:e5:1a:1d:2c:f7:7a:cc:
39:43:36:b4:1d:f4:f7:36:0f:2e:c0:01:2c:b4:f8:db:87:b4:
c8:31:a4:bc:a5:02:2c:0c:80:fd:aa:b9:98:f0:77:18:92:20:
63:55:21:71:dd:b5:1a:fb:e0:8c:97:b8:5e:7f:56:8d:be:a8:
e1:8b:02:54:91:1a:ad:e9:ec:06:72:94:5f:a1:7c:73:47:da:
b1:40:cf:01:db:0c:9a:e3:8d:93:7e:aa:6f:2d:6f:28:82:d2:
3a:08:66:25:69:47:2a:f4:c4:0e:ed:d9:b0:34:a0:1f:e2:2b:
9e:d3:e7:d5:50:33:ad:47:83:88:17:2e:04:d3:24:6f:99:0b:
81:85:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:20 2025 by rpki-client