Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/C1az3rJwjcR-YTlJxXpC5icVqE4.roa
File: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (raw, json)
Hash identifier: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=
Subject key identifier: 0B:56:B3:DE:B2:70:8D:C4:7E:61:39:49:C5:7A:42:E6:27:15:A8:4E
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 01942143AAF829E1D08EF9D0D1DF4113D93D
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/C1az3rJwjcR-YTlJxXpC5icVqE4.roa
Signing time: Wed 01 Jan 2025 09:47:50 +0000
ROA not before: Wed 01 Jan 2025 09:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205020
IP address blocks: 94.142.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:aa:f8:29:e1:d0:8e:f9:d0:d1:df:41:13:d9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Jan 1 09:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b56b3deb2708dc47e613949c57a42e62715a84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d5:df:8c:da:b0:3a:ce:b3:89:18:99:a9:d4:
67:8d:d4:af:a2:17:e0:c1:30:0f:83:37:7c:9e:97:
77:17:90:05:d4:61:36:db:43:e7:c8:57:0e:1e:d8:
2c:96:4f:e5:b0:ca:40:c2:7a:a2:5a:74:93:65:ce:
1c:c4:98:2c:01:4d:9c:2f:f7:b7:ca:e1:bc:1d:16:
8e:9c:22:15:77:ab:e2:d7:ef:e7:c6:e6:19:df:27:
13:de:88:09:24:f7:3f:b1:3e:64:52:8d:d6:ca:a9:
1a:b1:a2:50:24:03:1d:e5:cd:61:bf:57:56:02:69:
55:c9:fd:5b:56:83:19:e9:74:4e:ee:1c:7c:d5:bd:
46:9d:9c:52:f0:2e:29:ce:b4:ea:98:67:61:48:6c:
f1:92:b3:c7:86:90:cf:02:d2:70:e5:a2:88:9f:16:
31:46:de:ac:5b:8e:50:66:5d:df:ea:22:e6:82:f2:
4b:bf:09:18:ae:44:16:bc:da:28:f7:42:7f:8b:a7:
46:e2:28:69:31:0b:8d:76:59:45:9a:aa:75:4d:87:
c0:6b:92:2a:0e:0a:83:00:53:c4:15:8e:b8:9e:dd:
5b:3c:e4:1a:bc:ee:23:69:30:33:c0:46:7a:6f:51:
9d:1b:5d:1e:33:ce:6d:e4:05:cb:4f:93:cc:c2:46:
1f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:56:B3:DE:B2:70:8D:C4:7E:61:39:49:C5:7A:42:E6:27:15:A8:4E
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/C1az3rJwjcR-YTlJxXpC5icVqE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:2a:2b:7f:36:40:95:20:a8:2c:b3:f5:f8:13:02:83:fa:44:
99:7d:41:52:08:81:23:ed:13:f5:44:db:6a:75:1f:8c:b0:3c:
fc:76:82:77:7f:21:f3:c4:5b:23:fb:38:30:00:35:91:d9:d2:
7d:8f:63:95:3a:dd:00:99:1c:53:4c:43:b1:a3:b9:7f:e1:2a:
af:58:28:27:05:3f:75:87:9e:26:24:a4:6f:ff:8d:f7:8f:f7:
6d:e5:2f:a5:84:64:cb:80:32:c5:5f:46:cb:f7:30:da:79:c8:
1d:b8:8c:06:0e:a4:cf:14:3d:01:e8:5a:be:54:75:9c:c8:26:
d2:0c:31:69:45:86:84:e0:e1:ad:cd:62:c9:31:59:43:7f:50:
6c:3b:06:48:75:54:3d:c0:56:53:a2:01:98:24:50:58:37:28:
70:62:e2:39:b5:ae:3b:8b:cb:2f:b1:1c:fb:cd:c0:33:ba:4b:
fc:71:57:6f:fe:ab:c4:dd:02:f7:0b:36:50:07:9f:43:a2:e3:
51:48:65:2e:07:2e:1a:1c:ba:a1:69:52:c9:e4:b5:8c:6b:a7:
02:4d:98:9b:b9:e4:13:6d:14:de:3f:9d:9a:56:23:dd:7a:22:
c8:3c:e5:41:ea:2d:91:25:dc:6b:6a:f2:56:83:3b:4f:c2:e9:
59:d1:15:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:52:37 2025 by rpki-client