Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/aFj5VxRMp6Gt9pZ6_dPjRg9SUyQ.roa
File: aFj5VxRMp6Gt9pZ6_dPjRg9SUyQ.roa (raw, json)
Hash identifier: TZkg+bw2rGirJCslQt/uQYAWcaLVLnUIi6NCRn5gXcg=
Subject key identifier: 68:58:F9:57:14:4C:A7:A1:AD:F6:96:7A:FD:D3:E3:46:0F:52:53:24
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 019424B3B38FA4DF235191753A87136FEABA
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/aFj5VxRMp6Gt9pZ6_dPjRg9SUyQ.roa
Signing time: Thu 02 Jan 2025 01:49:04 +0000
ROA not before: Thu 02 Jan 2025 01:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61424
IP address blocks: 94.131.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b3:8f:a4:df:23:51:91:75:3a:87:13:6f:ea:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6858f957144ca7a1adf6967afdd3e3460f525324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:f9:c8:8f:c0:ed:0f:48:ba:69:30:13:f1:
d0:4a:cb:f4:0c:f5:29:84:ca:2a:6c:85:e1:54:57:
46:ed:e2:f4:eb:59:b8:77:8d:1e:76:05:25:b6:c9:
31:f7:20:43:c4:58:91:b4:7f:6e:85:56:60:e8:b6:
d0:b3:85:43:b4:3f:1a:ca:8f:82:71:7b:80:f7:05:
c9:d5:e7:2a:49:b7:0a:67:20:c7:53:be:75:c6:82:
05:07:ac:88:c0:a2:ad:79:d5:2e:38:51:0b:4a:ea:
5b:92:4c:cd:5f:1d:ed:02:89:81:44:49:47:9f:05:
06:f8:95:3c:e2:b0:a4:0f:9f:f3:04:49:d1:c5:0f:
85:e5:3f:79:49:2e:e6:7c:fe:ab:bc:94:a7:c4:07:
bd:9e:68:36:e4:da:ad:3f:07:25:ec:61:a4:cb:7e:
33:3f:62:1d:65:39:90:12:f1:96:85:39:69:19:3a:
eb:b8:03:2b:4d:57:6f:1d:4f:7d:a1:a4:2e:b6:83:
ab:24:e5:8e:9b:d4:c4:b0:b1:2c:94:0c:71:fb:2b:
43:c3:b3:64:42:3a:b3:8d:50:4f:8c:aa:33:b6:b6:
43:59:06:85:51:2d:17:05:17:af:76:50:8e:9b:10:
4f:01:65:5e:e9:4e:d3:ce:76:b9:4d:5c:be:b9:37:
a7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:58:F9:57:14:4C:A7:A1:AD:F6:96:7A:FD:D3:E3:46:0F:52:53:24
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/aFj5VxRMp6Gt9pZ6_dPjRg9SUyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fc:f5:6b:68:9b:ee:73:3e:e0:2e:22:05:c0:68:96:49:cb:
42:01:9a:04:62:11:82:71:56:1b:f7:88:c7:86:c1:b8:67:5f:
84:f4:6c:d0:61:20:7f:8b:85:c5:e0:63:f1:a4:d1:c8:b7:7a:
02:46:f2:59:2f:0b:7f:fc:91:3e:f1:9d:b4:4d:f8:09:3a:11:
ae:a6:13:e0:68:c9:5b:a9:7b:96:5e:2a:46:71:3b:ba:71:ca:
0b:28:e2:d1:22:f1:ec:76:08:31:64:3f:54:5b:b5:61:3d:b4:
39:37:63:e8:79:4f:37:54:c4:1e:98:61:c0:f1:16:c8:7f:13:
20:20:cd:f6:f1:60:a2:e8:e7:12:5b:a7:00:f5:1c:8b:4d:8f:
f9:91:da:21:87:93:f9:77:bb:e5:03:7f:ad:59:fe:83:ac:e2:
7e:17:5a:bf:b4:75:c9:88:60:8e:84:7d:58:6d:1c:0e:46:b0:
1d:0e:71:89:06:ef:63:bf:84:03:10:10:55:23:e0:a8:79:5e:
72:c1:90:64:c4:10:8b:47:61:59:79:2b:01:4d:4f:b1:f3:6c:
8b:11:e2:f6:b2:03:41:53:7b:84:8f:b5:4f:c4:63:7a:85:c2:
4f:19:fc:d6:52:06:78:66:fc:00:f4:4d:f5:f9:14:d5:28:fd:
c8:52:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:50 2025 by rpki-client