
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aZV2dhVQpADM33e8wyj6gx4dQdU.roa
File: aZV2dhVQpADM33e8wyj6gx4dQdU.roa (raw, json)
Hash identifier: XW+Te45xq4SC0ZgC9/Q+rm4egFWvFxq+s0LmPxqfsIQ=
Subject key identifier: 69:95:76:76:15:50:A4:00:CC:DF:77:BC:C3:28:FA:83:1E:1D:41:D5
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 019423698F10C03AFC119764B66C3F3A5679
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aZV2dhVQpADM33e8wyj6gx4dQdU.roa
Signing time: Wed 01 Jan 2025 19:48:27 +0000
ROA not before: Wed 01 Jan 2025 19:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35775
IP address blocks: 94.176.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:8f:10:c0:3a:fc:11:97:64:b6:6c:3f:3a:56:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=699576761550a400ccdf77bcc328fa831e1d41d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:aa:94:e9:25:78:f2:9c:c5:2d:c4:1e:fb:ef:
c3:ae:36:3d:06:aa:ce:69:77:b3:01:bf:94:66:34:
19:92:91:2c:b6:89:f7:2d:73:8b:48:fa:38:62:9a:
59:b7:38:61:b8:c7:70:34:04:eb:1f:ca:a2:97:3f:
8f:cd:49:95:0c:0e:c9:3a:42:e6:c6:6d:ad:5c:b2:
e1:b3:f4:a0:25:96:dc:d6:bf:60:5d:ea:ba:49:2c:
66:39:d3:7c:45:61:1f:a1:db:24:21:fc:c4:8d:73:
18:68:53:ad:c6:f3:a9:e5:d5:91:0a:23:5d:f6:6f:
40:22:12:22:f7:be:49:81:11:20:83:2a:86:6c:4f:
a1:be:91:6f:fc:a4:9f:35:55:f1:fe:40:da:6a:12:
37:7f:26:d9:83:8c:aa:80:19:80:ca:43:3c:4b:7c:
33:1c:3a:9f:eb:10:7e:a0:79:b8:d7:c7:72:53:7c:
ad:71:7c:97:63:02:62:dc:0e:4e:de:06:a6:f5:3f:
b3:06:79:19:f0:3f:db:9b:48:95:24:8f:56:13:2e:
90:8c:b8:c9:d6:79:b7:51:c5:00:10:1f:64:cd:3e:
06:35:28:c0:1f:04:e3:12:90:54:a2:9f:98:35:f4:
be:a5:3f:f7:e3:43:92:3a:48:04:62:e2:c4:61:72:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:95:76:76:15:50:A4:00:CC:DF:77:BC:C3:28:FA:83:1E:1D:41:D5
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/aZV2dhVQpADM33e8wyj6gx4dQdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:06:eb:67:8c:e1:55:a0:1a:14:5c:07:e5:b0:31:e2:41:18:
82:c0:51:e7:e5:18:32:f2:12:a2:61:94:1e:98:13:3a:e6:9b:
02:d9:df:1f:1d:64:47:3b:ab:72:12:57:65:de:9f:b7:0a:a7:
be:60:1b:b7:3a:05:9c:2d:60:74:93:07:16:f3:47:c3:f9:29:
15:de:12:85:fa:55:1e:cd:34:a6:51:bb:90:78:6c:2c:4a:41:
2c:b0:2f:7a:f6:81:de:6e:c5:e0:b3:9f:3e:bf:aa:cc:fc:24:
c1:1f:de:06:73:20:49:5a:a5:b8:97:44:5d:15:b3:7f:b8:59:
27:ec:48:a2:99:e6:bc:98:2f:f7:21:04:6f:a1:b5:0c:77:a8:
eb:16:d4:5f:3c:3f:72:c2:44:94:de:34:17:33:24:c8:55:01:
76:cf:cd:6d:81:e5:cf:46:d6:47:d9:81:c8:09:99:c6:e0:58:
4b:b8:cc:54:10:7f:a2:c2:98:64:6d:60:13:de:50:60:89:67:
c1:46:6a:b0:db:2f:cf:46:47:b9:74:80:b7:b3:a9:74:f7:d3:
60:99:1f:aa:51:d8:66:e1:91:dc:e0:19:ee:b5:58:8b:2e:42:
05:34:94:76:80:51:74:4a:c4:ed:1f:8f:4b:42:b0:4e:2c:dd:
27:78:18:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:13 2025 by rpki-client