Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jvEikcZJM5qpaNsK8tPGUjFP2do.roa
File: jvEikcZJM5qpaNsK8tPGUjFP2do.roa (raw, json)
Hash identifier: iJUEXgdreyLiFDQJWmjKx7mfinwOmXASzQYJ3m5UoJg=
Subject key identifier: 8E:F1:22:91:C6:49:33:9A:A9:68:DB:0A:F2:D3:C6:52:31:4F:D9:DA
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB73D0077932A101648B58A359A2EF
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jvEikcZJM5qpaNsK8tPGUjFP2do.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 94.158.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:73:d0:07:79:32:a1:01:64:8b:58:a3:59:a2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ef12291c649339aa968db0af2d3c652314fd9da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:08:36:01:f8:04:44:69:cc:7c:53:12:c8:
cd:5c:8b:a5:bc:1f:95:f5:d4:e9:93:d0:ba:c5:94:
a7:f9:76:67:6d:ee:2c:b8:6a:ed:14:2d:93:df:18:
a3:d2:17:bf:89:a0:dd:fb:ac:2a:ac:2c:7f:7d:5d:
d9:59:55:61:79:f2:9a:1e:41:db:cb:25:ee:2c:84:
47:83:bf:22:7c:3b:6d:7f:cc:50:6c:49:f6:b7:9a:
12:93:14:f6:2d:bc:e9:db:0c:f0:80:aa:71:69:76:
39:03:75:16:75:72:93:5c:3e:ee:4d:2e:4b:35:e5:
e9:37:51:1b:a9:5d:b6:fc:31:33:d9:57:3b:d8:9a:
55:f0:ab:54:af:38:9f:5d:45:c7:ba:c7:2b:ad:d3:
25:6f:e0:87:e5:29:e3:62:4a:78:7d:05:30:f7:73:
da:a7:d4:5b:38:82:de:82:15:d2:83:65:21:37:59:
0c:a8:46:43:3f:93:25:8b:f8:74:37:8f:78:9d:c1:
c7:8f:19:cd:9f:0f:5d:6f:10:d6:f5:3d:dc:32:f0:
2b:1e:1b:95:a7:46:f5:e3:e0:d0:bc:68:6a:67:70:
e8:5f:38:51:07:5f:54:95:b5:f7:c6:1d:07:61:26:
04:18:a7:b8:97:db:67:26:b9:cd:45:d1:64:bc:7a:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F1:22:91:C6:49:33:9A:A9:68:DB:0A:F2:D3:C6:52:31:4F:D9:DA
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jvEikcZJM5qpaNsK8tPGUjFP2do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.21.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:a2:5e:45:5b:c4:db:d5:95:1d:1f:e9:b2:ab:f2:9a:d1:37:
2b:d0:71:19:d7:d6:5d:6f:13:30:fb:63:47:27:ef:6d:2a:4c:
dd:af:59:8e:33:40:30:e2:4e:32:e8:ac:b8:f0:2e:d9:f7:bf:
f7:91:b8:2d:7c:e9:f8:a7:2c:2e:a1:3d:26:dc:35:f7:20:46:
b3:2a:bc:b7:3c:9d:6c:06:ac:25:13:21:ab:e9:79:79:b3:da:
23:b7:a6:99:fd:a9:17:f7:c0:4e:35:b1:59:5b:68:0f:32:22:
e4:1a:b2:25:22:8d:78:d3:de:7c:60:43:1d:ce:ea:bf:0c:c8:
48:ba:8e:a7:db:8f:3e:67:cc:d3:b8:db:52:21:f5:d5:cb:9c:
59:a6:ac:b2:5d:0b:35:5e:05:16:2b:0a:c8:5a:f8:76:c5:06:
5c:7b:a5:62:04:3a:fb:4c:04:a6:ee:36:2f:f4:c3:6c:e5:e9:
47:bb:63:d1:32:ce:fa:47:86:60:3d:d9:a7:cf:b9:88:ef:c0:
0a:85:2b:ab:60:10:9f:c7:0a:c5:a8:a8:30:c4:95:c9:15:fc:
b0:ad:df:db:f0:c1:00:c3:66:fc:40:df:12:94:6b:ed:34:fa:
d1:4b:6d:c3:39:f9:a9:0a:4c:b2:cb:16:a1:0a:83:27:6c:6f:
df:2b:d7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:18 2025 by rpki-client