Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa
File: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (raw, json)
Hash identifier: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=
Subject key identifier: 6C:56:12:27:F2:38:62:03:15:5B:82:3D:98:18:12:BC:50:3F:CB:EF
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0194266B4AB671D98342FAC5AE4485523573
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57100
IP address blocks: 94.154.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4a:b6:71:d9:83:42:fa:c5:ae:44:85:52:35:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6c561227f2386203155b823d981812bc503fcbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3f:1c:89:3c:f9:de:e8:3b:7b:b7:52:3c:2a:
ee:3f:be:c3:86:88:3b:9d:71:b9:e6:a0:cc:56:63:
88:51:6f:c2:c6:b4:aa:ff:b0:f2:63:5e:42:5b:78:
29:e4:20:fa:de:87:c3:d4:da:64:3a:d2:e1:23:a8:
9f:8a:7a:45:34:bc:d3:6f:d1:c8:f0:da:78:d3:7f:
5c:b0:f6:e9:38:08:50:03:4f:e1:a6:1f:cd:76:ec:
6b:a4:0c:d2:ed:ea:2f:e3:15:35:b2:b5:b8:a1:f6:
7d:04:b6:a4:8f:bf:98:ad:cd:bb:c6:b9:27:d7:99:
d9:dd:3f:34:24:c7:92:ed:e5:4c:10:f4:49:98:6d:
4b:c3:94:3b:bf:93:38:3d:06:ea:ff:df:1d:6a:6c:
72:65:11:c0:15:29:82:87:45:e1:f9:ba:31:2d:98:
c3:d2:08:f7:1c:03:b7:d9:ad:24:2a:c0:25:65:60:
4c:04:8f:80:9b:07:a4:db:3f:44:66:07:60:c9:31:
65:2a:3c:26:af:9f:69:df:c2:e5:7e:eb:ca:fe:97:
d2:a6:be:93:16:60:45:af:b4:74:5f:92:fd:2d:47:
d4:02:e5:0a:d0:2f:27:9d:e1:33:22:4f:ab:23:a7:
80:64:f2:71:5f:ba:f7:24:9a:d0:4f:7c:58:e7:d8:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:56:12:27:F2:38:62:03:15:5B:82:3D:98:18:12:BC:50:3F:CB:EF
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.39.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5f:d9:ec:ff:3c:52:c5:ab:5b:19:94:1a:c4:4a:57:25:c7:
b1:8b:19:be:8d:46:66:26:75:a9:69:0f:df:5c:58:56:bd:aa:
e4:85:75:fe:b1:25:d7:f4:bc:2f:88:4e:99:c2:9c:8c:94:fe:
23:0b:94:58:0f:d1:77:ee:82:94:26:a8:c6:cb:66:d0:8e:6b:
22:88:dc:64:6f:87:7c:18:a9:14:13:88:2e:bf:78:c9:c5:3c:
66:44:f4:66:79:d4:9d:b2:4d:a8:c7:89:44:60:9e:1a:48:dc:
cb:93:8d:c7:49:3d:a9:94:ee:aa:84:3d:9e:df:eb:51:97:23:
d2:c8:77:e1:60:e3:67:70:9e:58:84:21:69:79:d0:45:36:c2:
21:b6:9a:ce:d6:76:37:fb:e2:c8:b6:3b:1b:67:14:05:a9:4b:
26:ce:28:aa:22:6f:6e:e0:d4:6d:c2:17:ff:f8:36:30:6f:ab:
20:c3:72:dd:10:32:18:c9:53:21:dd:6c:28:6a:1b:7b:a1:5f:
bc:42:38:42:e8:db:df:dc:13:ae:a0:01:50:4b:a6:88:ce:08:
36:3b:44:ab:09:23:67:20:88:55:55:0a:2e:0d:a2:17:0c:a8:
82:e7:3c:72:13:b2:cc:2a:0e:5d:f0:46:22:0a:f5:8d:78:54:
e1:c6:e4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:34 2025 by rpki-client