Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/2ilYjSsUyg0i-EOl5hfGDwVlKj4.roa
File: 2ilYjSsUyg0i-EOl5hfGDwVlKj4.roa (raw, json)
Hash identifier: p8QjhotvBCdHOmxF54vBU0ccs9eUkA9Pdd1QgMIFymw=
Subject key identifier: DA:29:58:8D:2B:14:CA:0D:22:F8:43:A5:E6:17:C6:0F:05:65:2A:3E
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 019427481439B73A178D2AD92AEC2BCA2D38
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/2ilYjSsUyg0i-EOl5hfGDwVlKj4.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202371
IP address blocks: 94.185.120.0/24 maxlen: 24
94.185.121.0/24 maxlen: 24
94.185.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:14:39:b7:3a:17:8d:2a:d9:2a:ec:2b:ca:2d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da29588d2b14ca0d22f843a5e617c60f05652a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1c:c8:3c:0c:1a:7f:73:1d:a6:b6:45:2a:11:
fc:4b:79:2d:0d:73:99:30:4f:c6:2a:3c:09:a1:15:
5d:6e:5a:f2:70:7d:03:7e:67:f5:57:c8:f2:2f:b0:
44:02:cc:61:c7:59:5b:16:cc:5a:99:25:69:6c:c7:
b5:1b:d5:2a:ee:f1:c9:b5:d9:ee:96:1f:15:ca:fe:
23:db:14:e4:26:86:0a:42:9a:3c:a7:1e:5e:a6:36:
0b:06:4a:27:87:06:f1:2d:c9:bc:7b:68:c6:fa:06:
c2:de:ee:8e:c8:0b:27:07:63:52:2d:fc:e6:2b:8a:
14:8d:12:1d:61:c5:f5:c9:91:58:23:7c:94:53:1d:
ab:26:22:db:3c:c6:4a:0c:45:2a:e6:fd:ef:4d:31:
62:fe:6f:c8:1e:54:2c:40:4f:05:3a:37:6f:c5:da:
ee:a4:9e:10:1e:e1:f8:59:5b:fe:2e:5b:a5:bc:e3:
e2:2d:38:96:21:81:33:62:9c:8a:6d:e8:ac:b4:91:
29:94:29:f0:a6:4a:74:ba:13:90:93:e4:58:57:ce:
f7:7e:d7:54:c2:b6:a5:5c:bb:18:94:3c:82:91:2d:
1b:07:27:cf:25:92:70:e9:ad:57:b9:1b:2b:c7:39:
66:87:9c:15:0d:1b:e9:1f:ad:0d:34:1c:1e:4e:8f:
85:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:29:58:8D:2B:14:CA:0D:22:F8:43:A5:E6:17:C6:0F:05:65:2A:3E
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/2ilYjSsUyg0i-EOl5hfGDwVlKj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.120.0-94.185.122.255
Signature Algorithm: sha256WithRSAEncryption
38:b4:d2:bb:7b:93:d3:7e:ea:9f:b0:1c:89:c3:47:bb:35:4d:
4b:e4:fe:76:77:b8:52:40:e1:a4:7a:a4:18:3d:b1:7c:fc:4c:
e0:ba:ce:93:d6:a6:da:4a:14:30:5c:84:57:c1:35:91:51:60:
b8:ab:81:18:d2:94:47:f3:a7:e7:7a:a1:73:87:1a:c6:d9:d3:
2a:3e:19:65:b6:6d:ce:59:76:fc:5d:98:b6:a9:d8:81:31:d4:
bf:da:d4:b3:89:d9:13:4d:10:fa:63:e8:6c:c9:4a:7e:e6:be:
6e:3e:bb:c7:45:d3:fd:42:83:47:f2:6e:33:73:97:6f:6a:6b:
44:09:dd:f0:18:c1:07:6f:fb:b1:b4:18:66:8f:c1:d2:d0:a9:
d5:9d:b5:78:97:7c:e0:f8:94:8b:14:b2:85:c8:63:d8:65:ac:
f0:bb:cf:ed:f6:d7:a1:e1:29:82:ee:37:d5:a7:b8:f3:88:bb:
0a:d3:c5:d2:d2:cc:7d:0f:40:d1:1e:71:b8:df:54:5a:34:85:
a8:2a:8e:6b:b2:3e:91:69:57:01:95:67:bf:91:be:4d:9c:9a:
98:21:cf:aa:cc:51:61:af:5e:d0:7b:64:6b:a4:55:23:22:df:
df:00:10:00:b2:8d:21:5b:4b:38:4d:1d:6f:06:8f:27:15:f7:
c7:b3:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:23 2025 by rpki-client