Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/X7rkHGG6jjFEbGXVthjC6Aet2y0.roa
File: X7rkHGG6jjFEbGXVthjC6Aet2y0.roa (raw, json)
Hash identifier: MkonCCR3Scjew0ShiEuhmdlNGRkpLCq5nLGOGcv6nxQ=
Subject key identifier: 5F:BA:E4:1C:61:BA:8E:31:44:6C:65:D5:B6:18:C2:E8:07:AD:DB:2D
Certificate issuer: /CN=440ce684d5701ddb02a26b55e29eac9fe804deda
Certificate serial: CF5E34
Authority key identifier: 44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/X7rkHGG6jjFEbGXVthjC6Aet2y0.roa
Signing time: Sat 01 Jan 2022 05:53:19 +0000
ROA not before: Sat 01 Jan 2022 05:53:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 94.103.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13590068 (0xcf5e34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440ce684d5701ddb02a26b55e29eac9fe804deda
Validity
Not Before: Jan 1 05:53:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fbae41c61ba8e31446c65d5b618c2e807addb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:cf:a7:74:95:28:44:17:cc:02:d5:ce:f6:
96:14:0a:07:8b:92:f1:6c:12:5e:ff:d0:4c:dd:9d:
d5:55:b8:b1:04:87:f9:a9:66:e1:4b:78:05:ea:ce:
80:13:9c:44:56:be:de:70:c1:f2:8b:96:f5:eb:35:
80:a9:39:ba:ae:0b:7a:b3:3e:3d:49:2c:81:23:c5:
2a:42:c4:4f:9b:b4:b1:94:b8:ea:73:db:cb:0c:ae:
8e:9d:cc:d4:ad:b9:c8:6f:86:b7:ac:7a:d1:80:47:
29:32:3e:9c:7f:32:b4:d9:45:b0:69:52:90:89:50:
73:2b:63:5c:41:16:96:0c:a9:d1:32:cb:11:c7:3a:
db:b9:4d:1f:81:9f:9f:32:77:35:32:73:c8:a5:76:
91:01:dd:53:73:29:99:75:83:19:4d:8d:bb:8f:41:
81:bb:21:2d:c5:88:e3:51:49:f1:d2:6b:ef:f1:d7:
fe:36:78:1a:03:ad:4d:64:ac:c2:90:f0:c3:ed:c2:
9a:65:ad:4e:c4:50:c6:ac:16:97:d9:7e:cd:68:ac:
e6:94:7f:4a:22:8e:a5:59:46:8d:cd:80:d2:95:58:
63:11:9e:7a:14:49:8b:10:1f:b8:65:3f:c1:77:62:
cc:a5:1c:11:9d:87:69:2a:9a:c8:00:72:43:e6:d2:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:BA:E4:1C:61:BA:8E:31:44:6C:65:D5:B6:18:C2:E8:07:AD:DB:2D
X509v3 Authority Key Identifier:
keyid:44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/X7rkHGG6jjFEbGXVthjC6Aet2y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.176.0/24
Signature Algorithm: sha256WithRSAEncryption
63:06:e0:d6:50:d7:b4:e1:e4:93:a8:6d:c2:21:d9:7a:af:18:
1e:eb:44:f1:c3:e7:32:09:1d:57:9f:de:4d:46:b8:6a:3e:54:
0b:63:81:91:06:d6:de:e1:bf:ed:af:35:44:b8:69:87:eb:5c:
30:a7:37:1a:84:ba:54:ae:13:57:58:01:12:1d:48:b4:cd:e6:
3e:53:ca:6e:50:bc:47:76:92:68:97:cf:d9:f8:b5:37:b3:3f:
26:aa:b0:69:ad:e4:ba:c6:a5:87:02:9d:05:95:54:11:9f:8b:
eb:c0:71:48:35:59:b5:86:dc:a4:e1:48:97:02:b1:73:b4:c9:
2f:3d:f0:ad:05:fc:34:b8:57:5a:86:96:ea:04:ef:cc:77:83:
05:50:b1:cd:ce:1e:86:9e:fa:ae:64:5e:2e:51:5c:a9:05:5d:
a8:8f:a3:1a:22:8d:92:58:23:11:b9:56:db:a6:fd:21:05:13:
7f:28:53:15:04:6a:ce:55:f8:31:9f:1f:50:ab:ec:c4:94:0a:
2b:26:42:6a:4c:0c:3b:e8:86:81:c2:70:6e:d4:2d:17:15:04:
72:39:1a:14:ff:dc:54:c5:59:21:7a:01:f2:2a:93:ca:4a:17:
61:6c:e6:3e:cc:c7:95:ef:21:78:b5:d1:b5:0d:f7:bc:ee:ea:
2d:f9:64:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:44 2025 by rpki-client