Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/iB-5Gh1pHVkAWY83mt70GWf7F_k.roa
File: iB-5Gh1pHVkAWY83mt70GWf7F_k.roa (raw, json)
Hash identifier: cjAD02BpLiwlKz0QWbmdYPtsy/2NR9/61nPXd4hWOkU=
Subject key identifier: 88:1F:B9:1A:1D:69:1D:59:00:59:8F:37:9A:DE:F4:19:67:FB:17:F9
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 0194206849815797865D6B42EA4D14AA681D
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/iB-5Gh1pHVkAWY83mt70GWf7F_k.roa
Signing time: Wed 01 Jan 2025 05:48:13 +0000
ROA not before: Wed 01 Jan 2025 05:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 94.154.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:49:81:57:97:86:5d:6b:42:ea:4d:14:aa:68:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=881fb91a1d691d5900598f379adef41967fb17f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:52:02:34:21:b6:01:20:0c:77:d1:4b:3c:21:
c3:c1:34:16:27:09:50:d9:fd:a6:3c:30:4f:b9:0d:
c0:52:a1:3c:8c:1d:cb:4a:a3:2b:6d:3b:79:84:bd:
1b:a5:7b:f5:5e:fe:3b:a2:c8:fd:35:31:7a:d3:68:
58:d3:b1:aa:b6:09:de:b5:ef:49:2f:b3:8c:82:04:
e1:7d:a7:6d:0b:7f:45:6f:54:58:c3:aa:43:5e:e0:
67:ab:36:39:b1:0b:ec:9f:fb:e2:42:ed:a8:83:68:
c0:b4:d7:64:82:b3:97:a7:33:4f:a0:b5:83:b9:1d:
a6:9f:29:81:4b:10:56:fc:bd:58:ed:e2:d3:c0:fd:
05:b1:9a:89:0e:e8:6f:92:d0:ed:b6:1c:b2:9f:59:
98:33:1e:c0:f4:29:dc:42:af:92:c0:20:66:33:bc:
72:f7:34:bd:c1:b9:70:04:02:1d:75:f0:2b:34:a9:
80:71:a3:80:69:ca:f4:24:fb:22:1a:81:2d:07:5e:
7e:62:56:fc:d1:8c:53:91:a3:ea:53:1d:de:06:3f:
45:6e:1b:39:b0:e3:44:bd:00:85:7c:f0:83:e4:01:
cb:e3:36:9a:2a:ce:f5:24:95:58:8d:82:9f:60:9c:
03:df:03:55:c6:25:3e:93:37:56:f0:57:73:a1:fb:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1F:B9:1A:1D:69:1D:59:00:59:8F:37:9A:DE:F4:19:67:FB:17:F9
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/iB-5Gh1pHVkAWY83mt70GWf7F_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.42.0/24
Signature Algorithm: sha256WithRSAEncryption
87:57:74:f1:19:e7:96:0d:b0:25:21:da:31:f3:a3:de:c3:61:
6c:b8:92:49:3a:6e:e7:10:49:b7:5a:a2:2b:54:e3:50:b9:89:
b1:26:62:66:b4:d8:75:5f:a7:81:b9:3f:52:bf:49:4e:aa:a7:
29:17:17:15:50:29:55:19:05:cb:f9:18:62:0b:d2:7d:f6:2b:
6d:78:1e:03:91:e3:20:87:1a:cc:cb:9b:49:7a:6d:50:88:67:
02:d5:d1:c0:09:e3:7e:7d:48:23:9b:12:35:cf:db:fd:20:3d:
98:3b:43:3b:01:7e:54:c2:2f:af:f7:de:2a:47:08:53:fa:56:
3b:87:62:38:2b:ec:ae:5f:a2:85:69:c1:2a:cc:e2:b0:2c:31:
b2:16:2d:eb:4c:0f:d1:7b:89:a0:de:ba:fc:33:f0:8c:0f:46:
2b:f1:74:29:e2:47:b5:20:3f:70:43:38:09:94:21:30:be:82:
cb:61:68:56:db:47:dd:2e:97:bb:b0:13:7b:ae:69:84:5c:7b:
a9:a1:60:0d:b6:e8:2f:e2:b1:bb:6c:11:17:c5:e7:6b:f2:aa:
ca:4d:07:53:ee:6c:59:46:e1:2b:31:8d:0c:c9:c5:bd:3e:d1:
50:3d:e3:2e:49:1a:0c:29:58:50:77:ab:96:01:c9:7d:8d:6c:
52:64:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:04:30 2025 by rpki-client