Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/S-j8KrF9-Z7EgA1I4gr1JYpc8Ok.roa
File: S-j8KrF9-Z7EgA1I4gr1JYpc8Ok.roa (raw, json)
Hash identifier: eZK9HJiCpN6lVubG/bQi7DGgdx+1nKeyi2v0Mer4MLk=
Subject key identifier: 4B:E8:FC:2A:B1:7D:F9:9E:C4:80:0D:48:E2:0A:F5:25:8A:5C:F0:E9
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 019426D9C150B4BA117E76EC3AD6EF929644
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/S-j8KrF9-Z7EgA1I4gr1JYpc8Ok.roa
Signing time: Thu 02 Jan 2025 11:49:52 +0000
ROA not before: Thu 02 Jan 2025 11:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199458
IP address blocks: 94.137.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c1:50:b4:ba:11:7e:76:ec:3a:d6:ef:92:96:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4be8fc2ab17df99ec4800d48e20af5258a5cf0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:d8:65:07:23:16:17:58:fa:2c:b5:56:b4:
45:27:1f:7d:32:0a:1b:2b:1b:3a:bc:ef:48:79:58:
37:5b:a1:b5:60:72:b3:9e:fe:42:05:28:be:2f:ce:
de:d2:1f:1d:97:92:76:c8:21:56:fc:e2:9d:b9:ee:
59:ae:76:21:00:2e:f0:2f:c8:da:b3:64:99:24:ca:
2d:4d:f6:de:3b:0f:de:5d:20:e1:71:18:09:08:8e:
55:eb:7c:4c:14:b9:be:3d:5f:bd:06:5d:a0:c6:98:
29:4e:cf:f4:ac:02:89:99:a8:c0:18:59:52:c1:b9:
d4:9b:22:8b:1a:b9:b2:af:91:bb:d3:64:40:b1:12:
42:55:90:66:0f:ee:f9:88:7c:79:f6:27:86:e7:90:
00:35:ed:d9:d6:87:c2:e8:e7:46:8c:58:e4:4a:1b:
39:65:a7:1b:6b:0d:0a:cd:3c:76:d8:91:93:ba:7c:
35:9a:71:50:73:ed:76:87:ab:ae:f2:4e:f0:96:f7:
e0:2e:d2:c4:41:30:82:bf:f6:1f:80:40:fb:0e:7d:
a7:c9:d8:69:4c:c8:9f:68:3e:71:b1:97:ea:9d:33:
ea:ee:70:23:7e:85:33:3c:d2:15:17:a9:a1:bc:f9:
1d:30:c6:3b:21:be:c4:66:e3:2f:72:95:ea:c7:30:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E8:FC:2A:B1:7D:F9:9E:C4:80:0D:48:E2:0A:F5:25:8A:5C:F0:E9
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/S-j8KrF9-Z7EgA1I4gr1JYpc8Ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.74.0/24
Signature Algorithm: sha256WithRSAEncryption
86:c0:96:0b:f1:19:dc:a0:9c:71:22:cb:a5:17:5d:6b:8a:f6:
92:b7:cb:00:f2:49:5d:80:69:1c:1e:4a:27:7f:52:41:80:e1:
83:3f:6a:6c:ad:a1:cd:69:6e:88:6c:77:43:7e:c7:69:da:1c:
f9:d4:99:8a:6a:a8:26:0c:56:0b:0d:9d:2a:ab:8a:02:34:47:
72:a2:fc:de:55:39:4a:4b:28:cc:44:6a:ba:9c:7b:18:c7:ac:
b3:b5:c1:94:a1:a7:bb:1f:eb:61:00:d0:45:59:7f:44:71:b9:
2f:ab:55:2a:55:b0:1b:8a:81:3d:b9:35:f9:e9:0c:69:89:75:
63:06:a7:7f:d1:6f:72:4e:75:d5:cc:a0:56:0a:0c:2b:2a:99:
83:37:d3:12:4a:47:0f:50:db:c0:d6:bd:be:ee:d0:03:0a:f7:
9a:56:9f:fe:2d:7e:58:77:61:24:a9:2d:c5:68:61:95:60:3a:
4c:b3:97:af:63:54:15:f5:5e:6c:2f:18:aa:c9:29:55:ed:bd:
50:a3:c9:20:87:04:ed:a6:fa:d3:3a:0a:be:53:33:85:f8:4e:
89:c5:1e:47:7d:d7:86:49:18:ae:73:bc:b8:af:5f:b2:19:76:
c8:1b:ce:2e:d1:7c:6e:a9:95:bc:e6:be:a6:f0:0c:fc:ee:eb:
e0:b3:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:40 2025 by rpki-client