Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1JcY1-kqGJ7OHidARBfUwhCUV-Q.roa
File: 1JcY1-kqGJ7OHidARBfUwhCUV-Q.roa (raw, json)
Hash identifier: Ribk67HkQiP2uf2XNbnGos1Dj/w1RKUqJvx6V1wFUqk=
Subject key identifier: D4:97:18:D7:E9:2A:18:9E:CE:1E:27:40:44:17:D4:C2:10:94:57:E4
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01870EA59BCC6AF9D71C9F89D9460DC3CDB5
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1JcY1-kqGJ7OHidARBfUwhCUV-Q.roa
Signing time: Thu 23 Mar 2023 13:25:46 +0000
ROA not before: Thu 23 Mar 2023 13:25:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 94.131.96.0/24 maxlen: 24
94.131.98.0/24 maxlen: 24
94.131.97.0/24 maxlen: 24
94.131.99.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.101.0/24 maxlen: 24
94.131.100.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.110.0/24 maxlen: 24
94.131.109.0/24 maxlen: 24
94.131.108.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
94.131.111.0/24 maxlen: 24
94.131.116.0/24 maxlen: 24
94.131.114.0/24 maxlen: 24
94.131.2.0/24 maxlen: 24
94.131.3.0/24 maxlen: 24
94.131.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:a5:9b:cc:6a:f9:d7:1c:9f:89:d9:46:0d:c3:cd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Mar 23 13:25:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d49718d7e92a189ece1e27404417d4c2109457e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2b:1d:c8:4e:0a:c7:0e:88:ed:c9:b9:7d:a1:
54:1c:f0:bd:7a:8a:dd:54:e5:18:d6:bc:30:81:9f:
38:cd:51:12:d5:25:63:c9:09:0a:c3:a8:eb:56:7a:
33:41:d9:45:17:17:06:11:9b:0f:52:b7:f2:53:2d:
69:fe:4e:83:45:58:5a:dd:08:10:31:2e:de:23:84:
80:3c:84:1b:0a:40:ab:97:c5:aa:0b:18:f7:09:6d:
34:53:ba:03:60:ef:16:06:f1:08:3e:f1:b7:5f:8b:
19:14:2b:2c:c2:9b:bb:b6:41:6f:85:0c:9b:1f:c7:
ea:f4:cf:06:ce:2b:52:5f:0a:a4:da:5e:d7:9d:43:
46:5f:55:55:77:c8:9a:84:25:19:49:74:85:cc:45:
62:4f:0e:87:c7:e5:b3:11:e0:b6:1f:1d:a2:1c:60:
3e:09:ae:d5:82:22:8f:7f:73:f0:c0:ba:69:13:4d:
66:28:7d:cf:91:4f:4b:f9:fc:f6:a1:ba:c2:1c:9c:
10:71:f4:56:76:06:6a:06:6c:67:ee:66:9c:f9:85:
12:8b:21:6f:59:7a:c4:b7:c0:3f:b1:b5:27:82:85:
42:72:69:27:80:fa:da:56:99:58:1f:77:be:8c:6a:
4d:31:35:8e:c2:54:46:ef:b7:8e:c3:d2:58:71:ba:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:97:18:D7:E9:2A:18:9E:CE:1E:27:40:44:17:D4:C2:10:94:57:E4
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/1JcY1-kqGJ7OHidARBfUwhCUV-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.2.0/23
94.131.8.0/21
94.131.96.0-94.131.102.255
94.131.105.0-94.131.111.255
94.131.114.0/24
94.131.116.0/24
Signature Algorithm: sha256WithRSAEncryption
23:4a:60:4d:86:13:74:ec:e3:d5:6e:35:d7:36:6b:cd:1f:d3:
36:f4:63:90:1b:08:23:6c:d8:6d:db:bd:51:70:74:f8:3d:54:
04:f3:3e:ab:55:a6:bb:ea:86:57:c7:9d:8a:9f:f7:ce:19:5d:
2d:2f:69:ba:8b:b0:13:51:be:f7:a5:b6:16:2e:d0:3f:e0:6e:
30:81:72:cc:28:b6:fa:2b:bd:df:49:32:0b:b1:37:2b:95:12:
4e:87:9f:2e:ce:d0:49:f0:f4:61:e4:5b:dc:13:8d:f1:5f:d3:
be:8f:83:32:ee:d7:f7:09:cb:c7:e2:3d:2f:58:55:2b:d7:b3:
15:f5:2c:b4:29:b2:d1:7e:1d:cb:d5:c8:36:5e:20:22:a3:2b:
ea:dd:4d:95:29:82:ff:95:2e:79:9b:d6:7c:f5:1b:db:1b:b6:
75:ff:be:7b:28:4c:a3:1a:40:fc:e0:db:e7:c7:e9:b2:68:29:
8c:89:99:04:1b:41:8c:f4:ad:65:9e:44:98:cf:92:47:52:4a:
81:88:9f:38:6d:50:5b:60:09:4e:68:a5:31:7f:91:78:03:4a:
8b:14:ea:60:93:c2:0b:75:d4:c1:59:53:9a:df:e3:b4:6d:6b:
c1:ac:27:e1:62:72:b0:ba:0d:0c:c4:03:df:e3:80:0c:e3:c4:
f1:10:fe:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:31:40 2025 by rpki-client