Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/kjnUCIjbYk41yEn-fvwpfS_uNh0.roa
File: kjnUCIjbYk41yEn-fvwpfS_uNh0.roa (raw, json)
Hash identifier: mU3j+Znb893lZUnTlOh6SwTbgmZ2Cz//wF2KYzhGOyU=
Subject key identifier: 92:39:D4:08:88:DB:62:4E:35:C8:49:FE:7E:FC:29:7D:2F:EE:36:1D
Certificate issuer: /CN=7b0978c412dab61efb2db5411b06960c09e17a77
Certificate serial: 01900C70015D822AB9ABE8DF4620C2B3AFE3
Authority key identifier: 7B:09:78:C4:12:DA:B6:1E:FB:2D:B5:41:1B:06:96:0C:09:E1:7A:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ewl4xBLath77LbVBGwaWDAnhenc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/kjnUCIjbYk41yEn-fvwpfS_uNh0.roa
Signing time: Wed 12 Jun 2024 12:33:05 +0000
ROA not before: Wed 12 Jun 2024 12:33:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48710
IP address blocks: 94.125.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:70:01:5d:82:2a:b9:ab:e8:df:46:20:c2:b3:af:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b0978c412dab61efb2db5411b06960c09e17a77
Validity
Not Before: Jun 12 12:33:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9239d40888db624e35c849fe7efc297d2fee361d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:0e:67:e9:b2:05:b4:18:8b:96:91:ec:34:
25:ec:77:9a:82:56:52:71:4b:e5:41:ac:c8:b0:40:
d9:49:5e:30:9b:55:f3:c1:f3:4c:9f:72:b5:f0:b8:
6f:ec:66:82:0c:ea:c5:14:08:d0:a9:a8:8f:49:3f:
f0:f8:db:c1:8a:3a:5e:f7:53:13:d7:97:de:ce:dc:
6f:53:ad:62:ab:0f:17:ae:68:43:29:3a:63:99:fa:
ce:4b:05:b7:02:1e:a9:8c:6e:93:9f:12:a2:97:66:
e4:eb:73:ec:d0:6c:93:f8:78:bc:91:d9:cc:a9:97:
15:70:c8:85:6e:2a:10:43:a8:bc:89:6a:19:f2:4c:
1a:40:6a:d1:d1:ee:27:ae:a9:b4:74:a0:b7:73:5e:
b5:c4:f1:08:08:f7:51:49:47:1f:2e:33:fe:08:41:
c4:b9:f5:c7:e0:38:c3:61:89:9d:73:45:23:32:40:
14:6e:3b:fe:3f:b8:18:22:09:ca:e3:a0:05:47:0f:
d5:3b:58:83:18:91:61:ae:6a:99:57:9c:37:e2:6b:
af:76:26:1a:0d:82:74:aa:01:44:a0:bd:a1:e9:81:
f2:d3:28:32:73:b9:e8:d0:c3:50:c5:4c:48:9a:23:
ec:4f:33:6a:7b:32:f1:41:5a:c8:c9:93:9d:99:0a:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:39:D4:08:88:DB:62:4E:35:C8:49:FE:7E:FC:29:7D:2F:EE:36:1D
X509v3 Authority Key Identifier:
keyid:7B:09:78:C4:12:DA:B6:1E:FB:2D:B5:41:1B:06:96:0C:09:E1:7A:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewl4xBLath77LbVBGwaWDAnhenc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/kjnUCIjbYk41yEn-fvwpfS_uNh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebbeba-1b50-41e2-a8d3-ed466735ab27/1/ewl4xBLath77LbVBGwaWDAnhenc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.136.0/24
Signature Algorithm: sha256WithRSAEncryption
96:80:e4:51:be:52:74:cb:71:9b:65:97:02:3d:a3:5f:f8:b9:
0b:a7:67:3a:8a:e0:dd:1b:c5:2d:e7:db:50:15:8a:61:f4:9c:
d7:4b:63:95:30:b4:23:78:b2:7c:e9:a6:63:13:c6:db:a9:9a:
05:f4:a0:05:34:f8:a4:d0:dd:5b:bb:83:6b:6a:61:fb:22:e6:
ec:a2:b6:52:aa:2f:23:4a:53:5f:5d:be:0d:26:95:72:87:42:
f5:7d:3c:f2:00:a9:8a:1b:58:f2:c7:04:cf:4a:fc:ea:ec:31:
38:6e:2e:6f:53:a9:e0:87:a1:50:ff:f2:25:b5:a5:db:9a:b0:
f8:47:b4:97:f5:ee:75:4d:60:0c:4c:20:db:e7:eb:24:6b:55:
13:4d:4a:77:7c:86:c6:41:9e:8e:b6:bd:13:1d:56:1e:1e:7a:
ab:3e:79:c4:7d:2d:9e:ce:94:b3:59:b2:37:38:a1:98:03:7b:
bb:14:c5:36:cb:6e:0a:42:6b:a1:ad:ad:75:30:ef:02:4b:63:
76:f9:e0:7f:19:c1:a7:65:e8:a6:f1:9c:5f:1e:15:3a:19:f5:
42:5f:de:4e:27:48:03:11:0e:ea:0f:86:77:76:87:8e:99:a1:
cd:3b:b6:8d:2b:e0:cb:6e:05:d8:01:3a:78:42:f8:b6:18:fc:
43:c6:95:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:52 2025 by rpki-client