Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ijqfOwh-mKxL0IFbe46uAqyqBe4.roa
File: ijqfOwh-mKxL0IFbe46uAqyqBe4.roa (raw, json)
Hash identifier: NhINayUAgUyP+pjnQ3qR8pj7oOBaH36Jng4YmwD8sGM=
Subject key identifier: 8A:3A:9F:3B:08:7E:98:AC:4B:D0:81:5B:7B:8E:AE:02:AC:AA:05:EE
Certificate issuer: /CN=9ed0c4ff4a90073288b97674694142721f5b8435
Certificate serial: 019421B1BA04475D81EA966B03FEEC5EE49F
Authority key identifier: 9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ijqfOwh-mKxL0IFbe46uAqyqBe4.roa
Signing time: Wed 01 Jan 2025 11:48:03 +0000
ROA not before: Wed 01 Jan 2025 11:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 86.106.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ba:04:47:5d:81:ea:96:6b:03:fe:ec:5e:e4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed0c4ff4a90073288b97674694142721f5b8435
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a3a9f3b087e98ac4bd0815b7b8eae02acaa05ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:0a:b3:2f:ed:7d:84:0f:47:1b:fe:5d:e4:
dd:65:b4:96:9e:cf:b7:6f:4b:81:bb:a9:36:61:19:
6e:f5:47:d6:7f:a7:4c:c6:71:0a:e2:8c:34:cc:ef:
20:05:7e:77:11:ea:69:e4:49:1a:cb:99:15:ae:85:
f2:32:21:ca:b7:5d:ed:06:dc:86:cc:d4:fe:c2:b0:
e9:5c:51:be:46:2a:4c:d2:e8:f7:cd:02:0a:4b:f4:
44:ec:e2:73:8c:5a:1f:db:73:ee:2f:9e:01:31:a9:
f8:b4:86:3c:7b:82:a7:69:6f:03:01:a8:9f:89:bd:
14:58:c6:8f:84:d7:28:5e:dd:46:e3:f1:46:e9:e9:
94:3b:77:30:c4:c7:71:b1:0f:6e:23:cb:d7:08:b7:
fa:90:fa:e8:8c:48:07:5f:b1:c1:85:f0:2f:59:3f:
c6:bf:bc:c2:4a:4e:4f:b5:1a:a6:2f:dd:59:98:9b:
cd:b2:28:78:ea:37:b3:dc:f0:98:cc:a1:93:76:3a:
8e:82:83:38:9f:11:51:b4:27:57:5e:62:c0:e9:d9:
4b:55:ea:a2:38:c4:71:a7:da:fa:96:76:0d:8d:91:
39:ec:ce:5c:bb:db:a8:86:b5:8f:23:e4:a5:92:d3:
c0:34:74:94:92:8b:44:50:a6:e2:85:ec:d3:28:fd:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:3A:9F:3B:08:7E:98:AC:4B:D0:81:5B:7B:8E:AE:02:AC:AA:05:EE
X509v3 Authority Key Identifier:
keyid:9E:D0:C4:FF:4A:90:07:32:88:B9:76:74:69:41:42:72:1F:5B:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntDE_0qQBzKIuXZ0aUFCch9bhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ijqfOwh-mKxL0IFbe46uAqyqBe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9a50f1-294b-48e4-beaf-1dcad8e68ed9/1/ntDE_0qQBzKIuXZ0aUFCch9bhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.77.0/24
Signature Algorithm: sha256WithRSAEncryption
00:59:a9:6e:7d:6f:88:0d:c3:f3:93:2a:31:b3:8c:02:04:27:
46:32:a8:c0:b6:69:df:9f:9d:af:cd:e4:e6:72:08:76:b7:be:
45:73:14:04:ff:b6:1a:53:c0:4f:3b:05:eb:6d:3a:e9:35:96:
ab:af:20:46:e3:1a:48:5e:ca:61:fb:38:1a:4e:af:9e:3e:c7:
56:bf:2d:0b:ca:e4:23:3c:26:86:15:18:a6:89:e9:70:e9:4d:
cf:83:5c:23:2c:91:db:00:2d:b0:b2:a5:9d:ab:60:4e:ab:d7:
cd:9d:0c:1b:11:17:0e:18:df:af:20:31:3d:28:0f:8d:d2:71:
28:58:07:66:aa:7a:f8:02:c4:6f:ab:de:e1:e4:f8:df:64:21:
f6:f5:df:b3:55:73:a3:c7:f7:65:38:6d:03:92:be:e4:32:5d:
36:d7:98:20:28:52:3f:38:f2:1f:06:bf:e5:e8:57:b3:79:0a:
81:67:a7:ce:0b:2a:11:d8:89:32:68:c0:f5:c8:75:72:57:cd:
3a:90:36:9f:98:3e:4d:b7:15:30:c1:eb:c7:1e:54:bc:09:10:
e3:01:10:d8:f5:05:c0:2d:a0:a6:df:bb:18:b0:a3:33:4c:45:
70:9f:bc:97:27:17:28:bd:f1:a0:0a:63:37:d4:2b:41:8b:fa:
b4:31:c5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:21 2025 by rpki-client