Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/_o5qzwf8rZDND75xcqQc9S6k6ok.roa
File: _o5qzwf8rZDND75xcqQc9S6k6ok.roa (raw, json)
Hash identifier: h8CRUtj6ko4KAv2CzgQ3rS/pQtlcU73gDhCpzytsImo=
Subject key identifier: FE:8E:6A:CF:07:FC:AD:90:CD:0F:BE:71:72:A4:1C:F5:2E:A4:EA:89
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0195D8796725CC8BB1047BD7C9ED3CC7030B
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/_o5qzwf8rZDND75xcqQc9S6k6ok.roa
Signing time: Thu 27 Mar 2025 16:39:49 +0000
ROA not before: Thu 27 Mar 2025 16:39:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197450
IP address blocks: 94.154.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:79:67:25:cc:8b:b1:04:7b:d7:c9:ed:3c:c7:03:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 27 16:39:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe8e6acf07fcad90cd0fbe7172a41cf52ea4ea89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:e7:5f:e1:a5:e0:31:67:0c:ac:58:93:ad:
69:a6:be:a2:fa:8b:ac:7a:7e:3d:4b:8e:3d:14:8f:
a4:a8:10:fa:c8:42:32:63:f3:e5:66:65:14:80:80:
df:f0:71:dc:0c:52:e6:26:3a:1a:03:57:db:e1:8f:
d0:3c:a0:e3:74:f4:db:66:65:fd:f1:f2:3f:92:1e:
41:cf:01:81:64:64:12:a2:88:6a:51:ee:e5:4c:f7:
e0:36:46:1a:82:3c:5b:6c:79:4d:62:2b:27:36:b4:
4c:41:92:e6:24:c0:44:9b:a2:d7:c3:cd:b0:04:2d:
87:4f:62:bf:8a:fc:be:8c:14:0d:6f:fa:f3:b4:c6:
ae:43:b6:2d:5c:bb:25:d9:cc:61:70:03:10:41:b0:
46:c9:8d:d1:69:57:27:48:88:5a:9e:87:81:1e:2c:
d0:25:cb:d3:2a:b4:a4:85:09:47:36:f7:2c:0c:fa:
b0:c3:a1:a5:f8:41:09:d1:a3:8e:ab:fa:23:a3:ad:
c6:8c:05:3f:e4:d9:c1:7b:3b:5b:de:13:0c:37:fd:
99:9f:75:23:28:4f:35:69:87:7b:67:30:60:4a:05:
f1:4a:0b:6e:e6:39:b4:00:be:5a:98:58:34:06:1d:
7a:f4:60:12:6e:76:d2:d5:dc:ad:a1:02:b7:10:81:
b8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8E:6A:CF:07:FC:AD:90:CD:0F:BE:71:72:A4:1C:F5:2E:A4:EA:89
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/_o5qzwf8rZDND75xcqQc9S6k6ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.41.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ec:8c:27:00:5c:fe:3c:01:56:26:11:6a:e3:03:ab:39:de:
78:8c:7a:a3:39:77:0e:8b:99:ce:79:39:d2:ef:01:c2:58:16:
ba:8c:a9:af:9b:c6:92:be:fa:09:7c:b5:22:e5:69:86:cb:aa:
e4:91:2e:04:de:9d:f7:d5:83:6e:a5:36:fe:35:70:ee:70:46:
e0:2d:63:e8:61:5a:df:f8:08:36:aa:96:15:05:62:f8:c3:63:
51:ed:10:3f:a6:c3:dc:93:f2:dc:7e:d9:c7:5f:81:3a:f3:eb:
0d:89:44:f5:45:62:a6:92:4b:5e:d0:57:25:74:50:e3:73:74:
63:cd:d0:3d:1c:c0:a7:9b:e3:2e:ed:1e:7b:af:aa:cd:5f:5a:
02:65:c6:05:6d:75:2e:f6:73:78:ca:10:1d:f0:c3:76:02:45:
05:a9:51:60:ba:fe:04:aa:4e:d8:3a:bb:85:e0:df:bb:e6:88:
2f:1f:9c:74:2e:9e:a3:53:e0:95:1e:b7:dc:71:28:fd:0a:80:
a8:7d:43:67:ea:74:55:81:10:72:9b:ce:ed:65:2e:9b:8c:7a:
d2:c2:d5:c7:ce:20:fa:41:76:6c:3c:c3:07:82:36:d3:62:ff:
22:7a:01:7a:e2:da:84:76:45:4a:01:16:d1:d4:de:7a:7c:a8:
ec:61:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:19:28 2025 by rpki-client