Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b9Ujf-zlGlEqcZc8CNOGt_BGZp4.roa
File: b9Ujf-zlGlEqcZc8CNOGt_BGZp4.roa (raw, json)
Hash identifier: iIeJUAsUIhwnn+lWYS42ahkxNxaorXK6wEISiitsMfs=
Subject key identifier: 6F:D5:23:7F:EC:E5:1A:51:2A:71:97:3C:08:D3:86:B7:F0:46:66:9E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0194274836943FA729B1B924BB1EC8FC2B9C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b9Ujf-zlGlEqcZc8CNOGt_BGZp4.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31082
IP address blocks: 94.125.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:36:94:3f:a7:29:b1:b9:24:bb:1e:c8:fc:2b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd5237fece51a512a71973c08d386b7f046669e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c9:60:87:a8:86:b8:66:21:9a:49:5f:af:45:
ff:b7:5f:04:32:b3:06:ec:de:c9:19:ad:a5:b1:a1:
fe:ea:39:4b:ce:f4:c5:b6:02:79:b5:83:05:1c:b9:
04:60:99:ae:41:89:46:41:f2:c5:aa:d9:8c:9e:a1:
4b:7b:69:a6:72:43:a1:86:98:9f:51:8e:c0:32:e7:
9a:7b:be:5e:7e:3d:9c:01:1b:7c:a2:04:d0:6a:1d:
eb:ae:67:9a:67:20:21:e3:8b:53:6d:07:15:73:a9:
b7:f2:c1:d2:4f:e6:ad:71:ff:ca:a0:51:79:94:70:
84:88:59:92:36:df:de:d5:02:07:c9:65:c0:87:8b:
bf:9b:e3:93:8f:f2:11:cd:9d:65:7a:b3:0c:1b:f1:
cc:9e:ea:a7:7b:d6:5d:51:77:23:74:52:e3:e2:7f:
f8:f8:07:54:49:31:53:c1:17:b5:23:41:15:50:72:
aa:e3:a9:ac:7f:97:5d:95:f0:3d:8e:7b:f1:ff:40:
e5:db:9f:77:33:87:13:d4:d8:26:ec:58:8e:59:24:
24:39:1d:2e:e9:de:f5:e6:7e:70:a1:df:fa:0c:5f:
ed:6b:2a:ee:92:96:e8:1e:46:e4:e0:59:ee:e1:89:
ac:e0:39:56:f0:d7:c7:f5:bf:49:85:74:48:15:f0:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D5:23:7F:EC:E5:1A:51:2A:71:97:3C:08:D3:86:B7:F0:46:66:9E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/b9Ujf-zlGlEqcZc8CNOGt_BGZp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.136.0/24
Signature Algorithm: sha256WithRSAEncryption
78:0e:ab:44:ee:5f:cc:e8:96:ed:71:1d:fd:84:d5:49:63:be:
8d:ef:ad:68:f1:c6:35:37:b8:2f:28:85:37:70:20:0e:2a:fe:
62:cd:84:f0:38:d4:1f:48:d2:e0:40:37:e7:21:09:21:74:84:
f0:bb:41:27:34:a9:63:ad:fa:54:38:29:a6:73:70:7d:f7:c6:
81:d2:4f:0c:01:d6:04:31:4b:06:27:8c:b3:87:f9:d8:85:ff:
65:ca:2b:7a:84:62:d7:d1:16:15:8d:96:a2:23:46:6d:7d:75:
cc:d3:26:ce:c2:49:2f:ea:40:81:eb:ff:ab:d9:49:7b:3b:e4:
77:01:c2:02:e3:5e:72:3a:05:be:60:23:7a:39:9a:96:1a:66:
e8:f5:b4:80:35:a0:0f:71:d8:46:15:e1:be:58:da:99:3a:c3:
6f:82:e3:fb:e6:ee:a7:01:97:9a:59:14:07:08:ad:5e:45:44:
42:30:e8:3e:f0:a2:35:d5:43:73:53:76:84:ed:dc:f6:c9:29:
56:20:58:55:46:16:23:a9:dd:99:89:de:95:bd:e7:eb:9e:21:
f0:c4:99:69:1d:17:e7:07:c4:99:13:c6:04:83:c9:f8:eb:a5:
85:d3:0f:26:9c:a2:60:11:22:69:30:e4:2a:f5:53:1c:33:10:
89:78:2b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:42:02 2025 by rpki-client