Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2vJf4U_8iwgvBNVbjj_4IReegcU.roa
File: 2vJf4U_8iwgvBNVbjj_4IReegcU.roa (raw, json)
Hash identifier: HGhhS9Srcx+vboZoSjjatil5fqAsBtgHTqNd0QGU6rI=
Subject key identifier: DA:F2:5F:E1:4F:FC:8B:08:2F:04:D5:5B:8E:3F:F8:21:17:9E:81:C5
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0195D8B22B4D33000858AB74D6181DEACFB9
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2vJf4U_8iwgvBNVbjj_4IReegcU.roa
Signing time: Thu 27 Mar 2025 17:41:49 +0000
ROA not before: Thu 27 Mar 2025 17:41:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39385
IP address blocks: 94.176.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d8:b2:2b:4d:33:00:08:58:ab:74:d6:18:1d:ea:cf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Mar 27 17:41:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=daf25fe14ffc8b082f04d55b8e3ff821179e81c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:38:0b:02:1a:95:f4:47:b1:70:7c:83:eb:62:
08:f8:7c:4b:cb:82:91:c0:22:8a:f9:20:ae:e2:87:
5a:70:27:40:2d:a3:bc:7b:48:1c:a4:80:ff:6c:1a:
6e:85:45:24:b8:8c:c5:2e:f8:c2:f8:08:3e:3c:c4:
d2:79:5d:b0:69:14:45:db:9a:66:51:f9:92:8e:20:
44:ae:12:14:cd:2c:11:06:33:32:66:29:2e:14:8c:
93:fd:b7:06:7c:1d:62:79:0c:f7:30:f5:ab:a6:d8:
4b:a3:38:04:a1:67:ab:27:ff:1b:b2:b2:d4:3b:a8:
7e:cc:97:9e:05:b0:fe:27:2b:df:b1:69:61:fe:cc:
6e:d0:85:84:19:69:0f:f1:e0:e7:9c:0b:a5:31:9e:
e4:00:43:5a:85:4d:f7:be:b0:df:ec:2e:96:7f:3f:
f1:e3:47:ae:87:68:ff:b0:ad:af:cf:bb:73:5a:a3:
71:b9:b8:cc:30:30:e9:12:e0:e8:60:c8:58:29:f8:
e9:8d:30:c0:7c:df:c6:71:b9:62:65:c7:fc:f4:52:
13:c4:4c:88:8a:4d:46:9d:77:92:64:71:da:56:3a:
58:da:10:19:99:14:2c:d7:ed:93:83:97:c2:42:c1:
5f:9d:d3:18:1c:69:90:a4:76:bf:a6:93:04:5f:ec:
49:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F2:5F:E1:4F:FC:8B:08:2F:04:D5:5B:8E:3F:F8:21:17:9E:81:C5
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/2vJf4U_8iwgvBNVbjj_4IReegcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.135.0/24
Signature Algorithm: sha256WithRSAEncryption
94:02:5a:fd:c3:9f:cc:2a:f2:a0:84:d4:64:a4:53:0d:e2:c2:
6e:3d:8c:f8:86:2d:97:fb:d6:aa:a9:31:b3:d6:72:1d:e5:27:
70:cc:28:9a:70:a3:b7:8b:f5:e1:ab:57:f9:59:19:b4:af:bd:
2f:d0:c0:ac:bd:39:e9:1d:55:48:09:d9:71:8c:20:53:7c:77:
0a:93:d3:7c:cf:3a:e4:db:01:cc:12:ca:10:c2:68:93:de:49:
23:f9:51:c7:87:02:6f:99:d8:91:71:5c:d3:80:bf:a5:f3:be:
bb:3c:80:4d:24:82:e9:bd:e7:2b:73:67:e3:ea:95:24:a6:2d:
50:0a:c4:45:61:62:f9:07:34:f5:e2:31:99:75:55:ce:da:7c:
69:4a:4e:82:0c:76:38:0a:23:33:48:be:2d:c9:e8:60:0f:db:
e2:44:19:f7:c8:8b:cf:3d:13:28:c2:d6:43:e8:56:fa:b3:06:
ed:2a:18:de:be:b8:ae:16:b1:4c:44:99:7b:74:a0:a2:af:da:
13:0a:87:7d:3d:e6:ff:6d:4c:79:2e:ae:00:4d:42:d5:d3:d0:
eb:3c:30:e3:44:27:b3:a2:64:71:e0:e9:b2:96:c7:e7:4c:13:
b0:01:0a:94:d7:ed:10:d0:18:1d:cb:14:df:ec:f0:e1:af:c9:
70:9d:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 08:57:41 2025 by rpki-client