Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/hZBu7FQZVkKtWXL58gH8ufcnrgg.roa
File: hZBu7FQZVkKtWXL58gH8ufcnrgg.roa (raw, json)
Hash identifier: R2fcFnCqnbmbHv/RiPE81tSq/ElozG/l/Ezav5iqgYw=
Subject key identifier: 85:90:6E:EC:54:19:56:42:AD:59:72:F9:F2:01:FC:B9:F7:27:AE:08
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 019567D66A66034799AB0E915945AFAD0C22
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/hZBu7FQZVkKtWXL58gH8ufcnrgg.roa
Signing time: Wed 05 Mar 2025 19:44:19 +0000
ROA not before: Wed 05 Mar 2025 19:44:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396356
IP address blocks: 94.131.19.0/24 maxlen: 24
185.39.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:d6:6a:66:03:47:99:ab:0e:91:59:45:af:ad:0c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Mar 5 19:44:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85906eec54195642ad5972f9f201fcb9f727ae08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:02:36:a9:db:4a:6d:7a:48:65:7c:64:64:
74:09:b0:0c:f0:df:16:3d:37:72:fd:02:27:7d:9c:
73:9a:46:0f:59:09:3e:ea:15:8e:f2:76:69:84:15:
06:0b:5a:4f:8a:b3:53:53:18:5c:95:d2:3e:67:b9:
24:1e:68:a4:8b:e8:fb:dd:05:95:5d:ad:3e:48:b6:
9c:ea:f0:68:2d:53:ad:09:50:e2:df:9a:a6:83:01:
87:ff:05:6f:8d:01:9b:8b:34:8b:fd:b1:23:45:a7:
01:7c:17:4c:65:95:7a:f0:1b:d2:3b:c1:0a:37:30:
f9:a9:f4:ac:cb:a8:07:c2:43:22:41:fd:87:ba:57:
89:b7:09:f4:78:d0:0a:ac:31:c9:1b:c2:18:35:a0:
03:8f:bb:4a:70:77:0f:a1:43:05:ad:f4:5b:66:f3:
74:0a:59:cb:b7:52:b2:c5:55:ac:bd:8f:8d:f7:68:
cc:f7:e9:76:46:10:56:0a:47:d6:be:08:17:b4:66:
52:5c:62:22:d2:f7:5f:1d:12:a0:98:63:fc:54:e9:
8f:a7:fa:2a:aa:61:26:00:8a:78:0d:e9:61:1f:4f:
5a:0b:c6:51:5c:d7:a9:dc:01:84:4c:f2:fa:76:f6:
39:18:02:94:a7:23:3b:40:0f:61:48:73:1f:5a:d0:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:90:6E:EC:54:19:56:42:AD:59:72:F9:F2:01:FC:B9:F7:27:AE:08
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/hZBu7FQZVkKtWXL58gH8ufcnrgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.19.0/24
185.39.31.0/24
Signature Algorithm: sha256WithRSAEncryption
88:94:76:b1:7f:6b:b8:c2:88:8d:7c:02:89:b9:07:8a:37:01:
76:17:fa:39:4b:f5:1d:3a:cc:4c:ed:25:b6:af:10:e9:9c:49:
48:72:f4:61:a6:03:31:32:de:b7:3b:43:b8:07:97:5b:62:d2:
d2:3a:30:81:b5:3e:cb:64:dd:66:01:06:f7:f4:f4:91:83:7c:
fd:2a:75:f6:28:d6:ff:dc:a5:2b:cd:94:e4:6e:ea:53:31:40:
c6:ab:e9:e0:59:32:b9:82:ef:d9:bc:76:6d:ac:e3:bf:04:f4:
83:24:d6:3f:f2:09:1e:35:a3:13:c9:30:b1:ce:59:0a:7d:20:
31:e9:17:e1:88:a6:3a:b9:40:4a:61:72:6a:16:02:57:e0:61:
dd:b3:fb:5c:6f:6d:29:7e:55:d0:1c:bc:f0:a2:cd:cd:da:a3:
d8:10:45:88:c6:69:92:37:13:0b:04:21:a0:1f:30:f6:f0:03:
46:e6:1e:2c:6c:d3:ef:cf:7e:61:69:36:9d:56:22:4d:38:0e:
78:1e:76:03:bc:af:5f:72:64:b7:00:77:c1:53:79:f7:c9:4a:
08:ae:30:fa:1b:84:8e:93:8f:c4:52:92:7b:3c:4d:4a:da:22:
0c:62:ac:f6:88:3b:bf:79:69:c9:a1:1e:8f:61:4e:5f:fc:9f:
34:c4:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:04:35 2025 by rpki-client