Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/3-z9kD9OHf1G-zUrur-XeJL2nkk.roa
File: 3-z9kD9OHf1G-zUrur-XeJL2nkk.roa (raw, json)
Hash identifier: 6bklVIiiZNjWd7Rd/rf1SxHAidl6mGe/MbDSDzBTALA=
Subject key identifier: DF:EC:FD:90:3F:4E:1D:FD:46:FB:35:2B:BA:BF:97:78:92:F6:9E:49
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018649558D91352D374ADF2D93BD7E095719
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/3-z9kD9OHf1G-zUrur-XeJL2nkk.roa
Signing time: Mon 13 Feb 2023 05:53:08 +0000
ROA not before: Mon 13 Feb 2023 05:53:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211824
IP address blocks: 94.188.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:55:8d:91:35:2d:37:4a:df:2d:93:bd:7e:09:57:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Feb 13 05:53:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfecfd903f4e1dfd46fb352bbabf977892f69e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:de:02:15:d5:38:88:c8:f9:84:f6:82:dc:4f:
1e:96:68:67:e2:2a:c8:c9:d7:aa:05:c9:ac:56:d7:
85:3f:5f:9a:c3:b5:ef:af:d2:11:41:b6:a5:5b:aa:
0e:9f:52:cd:f1:90:04:4c:9e:15:bc:f6:8c:49:97:
6c:13:10:9e:e2:9e:34:68:fd:d5:4f:ac:67:8a:d3:
b3:6e:2d:99:ba:ba:2d:25:3c:ee:72:e5:ce:d5:c1:
10:29:55:9b:40:f2:6d:6b:5d:72:0a:7d:ca:3f:3b:
0d:ea:e1:2d:41:42:56:4c:e0:eb:20:86:81:f2:cf:
89:f3:09:1c:79:a0:44:cf:e9:60:32:b8:41:2d:e4:
f6:9e:f8:d1:55:48:19:01:63:21:e3:48:ec:61:31:
5a:39:6c:ed:be:fc:b9:29:c0:87:2b:ff:d2:bc:69:
44:27:97:39:0a:f5:3a:d0:a8:9a:97:b6:f7:ed:d7:
4a:b5:db:b5:fa:24:ad:b5:f0:73:64:e0:5f:74:37:
77:c4:d2:52:90:32:21:44:e5:0c:0f:29:47:fd:02:
eb:8c:64:00:5c:e3:d5:7b:bd:42:ad:9e:7f:d5:8a:
8e:cf:b5:8a:c4:82:58:cd:21:69:da:91:8e:3f:74:
b3:42:84:4e:74:87:28:4a:b1:39:ca:f6:4e:9e:55:
5d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EC:FD:90:3F:4E:1D:FD:46:FB:35:2B:BA:BF:97:78:92:F6:9E:49
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/3-z9kD9OHf1G-zUrur-XeJL2nkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.218.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a5:f2:d7:20:68:bd:82:f8:73:4d:44:0e:9d:b8:14:5f:e3:
74:8a:c8:4f:4d:5c:aa:fa:f1:a4:7c:d4:e1:6c:03:9e:57:08:
0a:cf:61:02:a2:86:eb:17:7d:3f:74:64:48:ad:17:e8:bb:90:
3e:70:74:dc:9e:29:2d:e2:91:2e:fd:ce:3c:67:48:2a:28:05:
4f:46:db:ea:98:45:41:98:bb:2d:4f:97:9c:32:71:6c:4a:0b:
8d:55:eb:ca:c8:f6:2e:30:e0:c4:38:41:a2:97:f1:5f:1a:f7:
d8:29:26:74:e0:c6:f4:ac:6d:0f:c0:14:29:5e:35:3e:b0:7c:
b1:97:ba:b3:ab:55:89:4d:21:6e:d9:ae:46:73:4c:16:ba:7b:
c2:c5:b0:67:7f:11:22:3e:f3:0c:3c:a7:06:9f:b6:31:1e:f2:
9a:4e:12:6c:89:93:c5:e7:50:ca:a8:33:62:b1:88:45:0a:aa:
10:4c:76:29:27:91:ad:91:9f:3c:ea:17:04:21:bd:01:aa:f3:
ab:39:bc:d0:44:2c:de:de:4c:23:1a:e6:60:b7:db:49:e5:4c:
b4:12:e0:90:47:45:61:da:17:31:5f:39:f2:c1:c3:36:f0:91:
2a:fa:b9:65:93:fc:b2:e6:3b:5e:08:4f:1b:13:b6:39:2d:4c:
be:64:ec:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:10 2025 by rpki-client