Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/jIsX04kImDACCbziQoxfq4aq4gU.roa
File: jIsX04kImDACCbziQoxfq4aq4gU.roa (raw, json)
Hash identifier: 4ptX6Z2UPtHeLRco5RBOeu6rVbRAMMZMSvC0/DtAOkg=
Subject key identifier: 8C:8B:17:D3:89:08:98:30:02:09:BC:E2:42:8C:5F:AB:86:AA:E2:05
Certificate issuer: /CN=e9f5fdabd4eaa622c9389381d22b63ecf5ec4e69
Certificate serial: D15459
Authority key identifier: E9:F5:FD:AB:D4:EA:A6:22:C9:38:93:81:D2:2B:63:EC:F5:EC:4E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6fX9q9TqpiLJOJOB0itj7PXsTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/jIsX04kImDACCbziQoxfq4aq4gU.roa
Signing time: Sat 01 Jan 2022 08:04:23 +0000
ROA not before: Sat 01 Jan 2022 08:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 94.154.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13718617 (0xd15459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9f5fdabd4eaa622c9389381d22b63ecf5ec4e69
Validity
Not Before: Jan 1 08:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c8b17d3890898300209bce2428c5fab86aae205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:e0:9d:db:9b:2e:65:de:41:2b:6e:12:52:
c3:e1:39:64:0e:46:e3:db:ff:8a:95:7c:2f:4f:34:
29:54:96:5f:9f:f2:2d:27:97:77:ae:bd:5e:d7:c8:
b7:5c:07:6e:3a:9b:93:bc:ae:44:6b:b1:a8:fb:51:
e0:aa:b5:4c:48:18:89:75:cc:8c:a4:50:31:60:1e:
26:f6:8e:1b:36:e6:71:5c:3a:97:4d:d3:a8:43:03:
64:7e:1f:39:a3:9d:14:df:82:1e:60:1a:99:8b:d7:
d9:91:67:fc:f2:59:59:53:f9:02:77:a8:90:8e:a0:
73:0f:73:c4:d8:7c:40:59:70:97:f0:08:8c:65:44:
6c:f7:6c:68:ad:ac:9f:19:08:3b:2e:09:22:f6:9e:
d3:dd:08:d9:34:ba:28:09:92:aa:00:59:fb:3e:7d:
08:8d:31:2e:3a:b4:c2:6e:ad:75:16:09:b7:3d:ff:
91:a5:68:9b:5a:ba:5f:a4:b6:98:65:c6:a8:46:d7:
3c:36:5d:ef:3f:74:41:be:4c:28:eb:84:3a:8e:45:
a7:11:1a:d4:e7:21:58:ed:6d:2f:3f:38:05:3e:98:
1d:60:ca:82:11:cd:36:07:6b:2d:5f:b9:ac:aa:9c:
1b:c8:0c:0d:76:c6:d0:ca:7a:ba:f8:7b:04:a3:94:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8B:17:D3:89:08:98:30:02:09:BC:E2:42:8C:5F:AB:86:AA:E2:05
X509v3 Authority Key Identifier:
keyid:E9:F5:FD:AB:D4:EA:A6:22:C9:38:93:81:D2:2B:63:EC:F5:EC:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6fX9q9TqpiLJOJOB0itj7PXsTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/jIsX04kImDACCbziQoxfq4aq4gU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/756d0c-5efb-4b40-ae76-0a37ec2da14b/1/6fX9q9TqpiLJOJOB0itj7PXsTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.116.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:84:00:40:43:a9:1b:44:4f:24:98:b2:6f:52:a9:b0:bc:dd:
21:69:b1:5e:e1:66:d3:eb:37:1c:1d:9f:32:54:72:44:b7:3e:
a9:68:3b:44:c3:d9:d1:45:ae:76:26:f2:37:ae:23:06:b7:04:
26:f7:5d:1f:58:83:97:04:77:2c:70:4f:07:3b:91:e3:f8:27:
be:be:13:59:d2:02:6c:76:90:63:51:60:7e:99:93:6c:b9:87:
a6:b8:fb:48:80:e9:5b:c8:b9:79:af:40:7a:63:28:c6:c3:b0:
fb:8a:6a:4d:b1:2a:f3:67:d8:06:f4:db:c5:0b:0c:f5:b4:bc:
45:df:ed:b8:24:e6:7c:be:41:0b:fe:21:c7:3c:ee:db:bf:52:
9f:21:7e:1b:8b:47:6f:4f:6e:a0:3d:01:6d:17:cf:28:1a:13:
a7:ef:3e:c0:fb:49:35:10:40:a4:6f:56:0e:49:09:5f:7d:44:
4e:0d:07:66:39:42:f5:ed:af:2c:a2:35:06:69:02:ce:44:03:
1d:8f:ad:58:73:4e:21:db:95:f9:00:5e:53:55:f2:23:11:28:
fa:71:46:90:35:0d:90:12:61:2f:69:4a:14:28:fe:60:1b:e1:
58:44:c8:4a:00:51:87:e4:0b:8e:77:2a:e0:38:24:56:80:79:
e3:33:36:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:03 2025 by rpki-client