Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/wSUmQHvgicp0DUrp54U8e4B9bSs.roa
File: wSUmQHvgicp0DUrp54U8e4B9bSs.roa (raw, json)
Hash identifier: 6yxPMXDSw6KRHugvWVrYp4LQxI6BlFDftXD+dNw90ug=
Subject key identifier: C1:25:26:40:7B:E0:89:CA:74:0D:4A:E9:E7:85:3C:7B:80:7D:6D:2B
Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Certificate serial: 01946B8B6AC1822B7689D2566FBED08CDA4D
Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/wSUmQHvgicp0DUrp54U8e4B9bSs.roa
Signing time: Wed 15 Jan 2025 19:58:06 +0000
ROA not before: Wed 15 Jan 2025 19:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400529
IP address blocks: 94.231.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:8b:6a:c1:82:2b:76:89:d2:56:6f:be:d0:8c:da:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8
Validity
Not Before: Jan 15 19:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c12526407be089ca740d4ae9e7853c7b807d6d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:c0:35:bd:eb:64:f6:40:16:22:64:b9:4c:
76:50:57:13:1d:f5:c0:38:24:ba:8c:76:cd:92:f7:
ca:3d:8f:f4:04:41:c4:d9:33:91:ed:00:3a:68:1a:
28:c9:74:30:94:99:63:9a:b3:9a:73:92:1c:bf:5f:
5a:2c:48:03:f3:3d:d0:15:4c:ae:5b:e8:7b:b1:66:
1e:87:43:51:54:f5:cb:65:ed:c7:34:e1:3e:0a:9f:
1d:aa:c0:3b:5d:f2:d5:a8:ee:16:b6:0b:9c:7c:54:
f5:fc:9b:b7:61:81:3c:71:59:b7:24:d3:b9:1b:3f:
00:2d:37:6b:7a:bc:86:3a:cf:35:40:bd:74:66:f5:
14:8f:7d:23:ce:7a:59:59:95:bb:42:c9:aa:c2:6e:
61:b4:27:02:cf:a4:8d:72:c1:35:37:5f:2a:c1:3f:
41:30:f7:e0:62:b2:24:ea:fe:af:2d:58:a9:d9:61:
0d:72:ac:30:36:91:25:3b:75:cb:df:c1:69:bc:5b:
3d:b5:b0:89:99:28:aa:cf:d2:80:c7:82:c0:47:16:
58:16:6b:10:ee:b7:1a:8b:96:df:b4:2b:4f:1f:d1:
3d:02:4d:de:a3:03:cd:bd:55:ff:45:8c:08:f2:2c:
d0:0a:17:b2:21:24:23:12:de:c1:72:4c:2a:48:2d:
4b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:25:26:40:7B:E0:89:CA:74:0D:4A:E9:E7:85:3C:7B:80:7D:6D:2B
X509v3 Authority Key Identifier:
keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/wSUmQHvgicp0DUrp54U8e4B9bSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.215.0/24
Signature Algorithm: sha256WithRSAEncryption
00:81:c7:46:e4:2f:45:4f:0f:fb:1d:6b:87:5f:41:78:65:82:
df:8a:41:89:8d:14:b7:94:d1:29:b7:b7:a0:70:6d:e3:5a:1d:
ac:49:e5:0d:90:b6:ec:55:cb:b6:b0:b0:02:da:61:ec:25:38:
5c:bd:2b:a7:c8:62:b2:9e:8c:85:ec:54:fe:ee:8b:fe:49:aa:
9f:6d:6d:13:99:5d:d3:7b:11:15:2b:9a:4a:58:90:b3:d2:37:
ed:0a:70:17:54:b8:ac:d7:cb:b1:0a:89:cc:22:17:9c:a9:85:
9a:d3:a6:b6:ae:30:f0:01:40:a8:46:c8:5d:ce:76:b6:70:b1:
5f:f3:7c:2d:a6:84:9b:e1:11:8b:87:e2:0c:25:3a:d7:bc:80:
88:20:59:32:0d:74:4c:63:f0:f9:28:26:ca:c8:41:e0:4c:cf:
45:b2:c4:e6:24:c8:70:f3:46:aa:a4:2e:5c:bf:4d:ee:31:7e:
47:91:8b:53:42:43:4c:fb:38:44:89:fd:55:d5:48:ef:af:dc:
74:62:de:bd:35:ca:60:be:82:9f:b8:5f:75:62:d5:21:7f:3b:
9d:ad:34:9d:45:2c:2f:19:2b:45:5d:c7:63:ef:b3:69:3d:a0:
bd:e2:f3:40:d4:4f:f4:45:5d:60:d4:42:9c:4e:c0:ff:5f:68:
82:9a:21:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:32:29 2025 by rpki-client