Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/i6X5UggHVk0CQgHWtu1LQisOfNI.roa
File: i6X5UggHVk0CQgHWtu1LQisOfNI.roa (raw, json)
Hash identifier: x6M3L3pJxdnTfX7sYLXnEIdy1V2akMAELRSztowPRdY=
Subject key identifier: 8B:A5:F9:52:08:07:56:4D:02:42:01:D6:B6:ED:4B:42:2B:0E:7C:D2
Certificate issuer: /CN=440ce684d5701ddb02a26b55e29eac9fe804deda
Certificate serial: 018CC49230344368DDAFA6AE2CA2527DB5B1
Authority key identifier: 44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/i6X5UggHVk0CQgHWtu1LQisOfNI.roa
Signing time: Mon 01 Jan 2024 10:29:24 +0000
ROA not before: Mon 01 Jan 2024 10:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3561
IP address blocks: 94.103.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:30:34:43:68:dd:af:a6:ae:2c:a2:52:7d:b5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440ce684d5701ddb02a26b55e29eac9fe804deda
Validity
Not Before: Jan 1 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ba5f9520807564d024201d6b6ed4b422b0e7cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:35:f1:b7:dd:b8:07:ff:cb:3e:95:1a:b8:49:
f1:6f:06:6f:55:0c:94:c0:28:ce:bd:1b:f6:9a:13:
83:f2:62:81:f9:8c:be:1e:df:73:6c:81:dc:d9:6f:
89:91:d1:d5:fc:2b:ef:7c:28:a2:18:28:76:0f:ec:
2e:97:cc:e6:7f:29:bd:2b:2d:77:6c:94:ab:49:80:
ce:26:86:cb:2e:b5:81:1c:d0:5d:a0:0e:1d:76:83:
74:76:f8:3c:67:06:b4:07:38:dd:fe:ed:14:2d:41:
04:3a:15:6c:f3:6d:91:67:36:bc:0a:18:2d:8b:2b:
5c:57:b3:ca:ef:c1:60:c9:38:95:45:c9:a5:81:b4:
b1:c8:54:fa:2c:5c:8b:52:b6:fc:c9:c0:49:25:cb:
d9:c5:40:8a:f1:d6:71:65:e0:92:72:8d:21:5c:a3:
36:46:03:92:80:53:a3:17:db:63:b3:58:22:8a:fe:
eb:35:b5:74:d2:05:55:1b:38:77:08:9c:0c:66:55:
5c:b2:b6:81:da:f1:36:b9:28:16:51:ab:32:81:59:
42:18:d8:6d:e8:1c:d9:93:5d:ad:5e:d3:77:2e:d4:
a6:70:16:1f:58:8b:08:2f:ac:91:8b:6c:72:ef:c2:
04:c5:b9:39:1f:27:0a:ff:ee:44:97:fd:94:ac:c4:
a9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A5:F9:52:08:07:56:4D:02:42:01:D6:B6:ED:4B:42:2B:0E:7C:D2
X509v3 Authority Key Identifier:
keyid:44:0C:E6:84:D5:70:1D:DB:02:A2:6B:55:E2:9E:AC:9F:E8:04:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAzmhNVwHdsComtV4p6sn-gE3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/i6X5UggHVk0CQgHWtu1LQisOfNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a48791-cafd-423f-bd61-816a8c210624/1/RAzmhNVwHdsComtV4p6sn-gE3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.176.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5f:08:8f:d3:47:77:46:b7:a4:a6:9d:a1:80:7e:ca:d9:5c:
f7:d2:c4:9d:23:5d:95:c2:c9:0b:b7:fe:01:c4:d3:d4:c1:b2:
2a:55:7c:9c:ac:b6:35:ad:e5:1e:cb:ad:67:c5:e4:a9:e6:df:
17:62:cb:ad:41:0f:61:66:8c:5a:1a:bb:8a:17:ed:ba:78:3a:
07:bf:79:52:42:a7:f2:38:aa:86:79:2c:4d:e3:68:8b:d5:a1:
1e:71:7a:b6:68:13:49:4c:d6:e5:a8:49:4e:71:f6:12:a4:c5:
0c:3e:9e:4b:a8:ad:9c:9b:0d:61:1d:83:45:7c:6a:75:51:a6:
e4:9c:e2:3b:9c:6a:ed:92:a2:d3:bb:c0:3e:1c:de:b5:1c:1c:
1b:d6:d9:a0:aa:f5:5c:27:40:67:11:c1:bf:b7:6d:5e:31:3c:
0a:b9:a9:15:60:fc:f3:e0:fc:84:a3:e5:77:f1:f9:4d:e5:3f:
5b:01:d0:29:d3:0e:ca:46:50:57:40:a5:77:fe:cf:89:20:76:
4c:2f:ab:3a:69:5e:19:69:f8:e6:58:a8:62:96:d1:68:f7:ad:
78:9b:7f:23:c2:f1:f9:34:3c:a4:ec:6e:4a:e9:c9:ef:7b:15:
d8:d2:53:b0:3e:61:7a:92:10:59:ab:0c:25:64:fc:f5:57:57:
2e:84:17:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:22 2025 by rpki-client