Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/03R99Xzs4W1Mr7tN3tHJu6ijcD0.roa
File: 03R99Xzs4W1Mr7tN3tHJu6ijcD0.roa (raw, json)
Hash identifier: P1VTK5qRldxq039XoXUOS5064WXmx40PnRaQpd43PNg=
Subject key identifier: D3:74:7D:F5:7C:EC:E1:6D:4C:AF:BB:4D:DE:D1:C9:BB:A8:A3:70:3D
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369964213BF18FB17C3FC9C039733E0
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/03R99Xzs4W1Mr7tN3tHJu6ijcD0.roa
Signing time: Wed 01 Jan 2025 19:48:29 +0000
ROA not before: Wed 01 Jan 2025 19:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47388
IP address blocks: 94.176.42.0/23 maxlen: 24
188.215.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:96:42:13:bf:18:fb:17:c3:fc:9c:03:97:33:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3747df57cece16d4cafbb4dded1c9bba8a3703d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:91:51:63:a2:25:35:63:de:d3:87:c2:b8:
6f:1b:e5:75:82:cf:e4:5f:24:94:a0:8b:a1:d2:69:
ed:24:77:80:7c:43:0e:54:11:fc:90:6b:97:27:97:
d8:72:f0:ca:01:7c:20:68:1a:2f:db:4a:bf:c6:86:
30:c1:d3:63:b3:73:cb:5e:3f:8c:13:db:1c:52:d3:
de:28:49:51:f7:a0:6e:fc:2a:05:d9:af:fe:ec:3d:
9d:eb:ec:b3:25:ed:6b:1d:9a:ca:d6:96:40:04:2c:
4d:03:c8:0a:63:da:82:c8:26:7a:10:af:92:37:39:
17:03:45:b9:03:91:95:52:e9:41:c7:7d:be:1c:26:
06:81:e3:c1:cc:f5:ea:5b:29:ec:3c:c0:63:05:d6:
d2:45:16:73:3d:d7:65:1a:f5:7b:16:f0:64:a9:fc:
59:34:b1:0d:64:5f:99:ac:95:52:ba:be:3b:ab:3c:
9b:29:4c:e1:48:98:86:04:7d:e1:5b:48:0b:88:21:
9a:93:61:e9:0c:a7:97:f0:1f:80:76:1a:ac:3d:a0:
ab:91:63:9c:9e:2f:68:b8:a5:ea:6c:42:8f:57:64:
16:56:e9:5f:4e:53:03:25:84:25:35:32:61:61:6d:
96:67:91:d0:a6:37:54:a4:84:25:27:30:21:0b:4a:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:74:7D:F5:7C:EC:E1:6D:4C:AF:BB:4D:DE:D1:C9:BB:A8:A3:70:3D
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/03R99Xzs4W1Mr7tN3tHJu6ijcD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.42.0/23
188.215.93.0/24
Signature Algorithm: sha256WithRSAEncryption
13:bb:68:87:14:6e:96:d4:7c:29:cc:5e:68:2b:a6:32:a3:6e:
d8:64:02:e8:74:f4:c5:c4:3f:fb:a1:b3:86:7e:81:61:af:df:
ea:7e:3d:12:dc:fb:b3:89:50:d4:14:74:d7:10:5b:56:8c:35:
60:2c:6d:26:f7:b4:85:b7:66:5d:49:0e:a1:86:01:46:17:64:
ee:4f:a9:63:6c:2a:eb:a7:76:1f:48:e7:1b:de:46:33:8b:4c:
fd:47:6c:20:1c:f7:da:a1:1f:9a:fe:33:d9:6f:65:72:35:33:
34:7a:22:b1:89:50:ce:00:b7:74:b1:23:90:19:f9:8e:1a:16:
db:9b:5a:60:7a:b4:91:83:00:20:f9:28:2d:d6:96:1a:42:42:
ec:8f:65:b3:53:da:6a:25:bf:b8:d6:93:2f:1a:6e:d3:8e:71:
d9:06:52:3b:4a:b4:a7:9a:96:ae:b6:b2:e7:d7:d4:86:88:6e:
56:10:50:c4:b8:ae:48:29:f8:a9:a4:40:12:ae:7c:52:a7:4b:
8a:23:06:0a:b1:48:d1:47:fa:09:1b:9b:43:3f:94:c5:7e:ec:
87:d5:50:49:f1:a2:43:46:b3:02:f8:c9:76:6c:d0:24:88:02:
b7:ac:b9:fa:1b:f6:8f:a7:69:76:1c:c9:1b:3f:11:fc:e1:69:
f3:2e:b1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:16 2025 by rpki-client