Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/u7eVzy3nZcY96z3a3SxDjvtd-n8.roa
File: u7eVzy3nZcY96z3a3SxDjvtd-n8.roa (raw, json)
Hash identifier: xNoG9r1C894TrzFOQ9s2ttLTrtgtpstx0HfZc5TMdn8=
Subject key identifier: BB:B7:95:CF:2D:E7:65:C6:3D:EB:3D:DA:DD:2C:43:8E:FB:5D:FA:7F
Certificate issuer: /CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Certificate serial: 01857227CB55A71EFF5B18B5253F3E368D0B
Authority key identifier: C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/u7eVzy3nZcY96z3a3SxDjvtd-n8.roa
Signing time: Mon 02 Jan 2023 11:04:48 +0000
ROA not before: Mon 02 Jan 2023 11:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48532
IP address blocks: 94.247.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:cb:55:a7:1e:ff:5b:18:b5:25:3f:3e:36:8d:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8f6f5dec09bc7a1203045699ba058295d38e346
Validity
Not Before: Jan 2 11:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbb795cf2de765c63deb3ddadd2c438efb5dfa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:88:8d:7b:24:ad:5c:8e:81:b6:af:29:7f:4c:
54:79:11:9a:e8:f9:78:77:4b:eb:4c:c1:7b:7b:13:
9c:6a:46:d7:34:78:a6:73:52:53:8d:14:67:7b:4d:
e4:71:a9:5b:11:8f:23:47:06:9d:c5:aa:6f:5b:89:
59:76:d8:e2:99:b8:25:33:45:47:03:68:ec:77:66:
35:a5:ed:82:26:1b:3e:5c:b3:5b:f2:12:3b:b8:df:
99:99:b9:a9:8c:27:a2:b7:50:a5:61:a6:44:62:8a:
2a:ed:14:62:7e:34:69:12:ed:b8:19:98:c3:9a:63:
e2:b7:dc:1e:09:25:0a:77:d1:a3:45:7a:9a:a8:d8:
26:a7:a8:44:da:b3:75:f4:0c:43:06:3f:ff:81:78:
df:0f:76:96:44:7f:55:e4:1f:42:12:44:61:32:9a:
85:2b:67:29:83:c6:11:6d:12:e7:b6:2b:1e:57:63:
73:da:28:06:0d:bb:d2:d2:b0:c2:04:3e:ae:5e:95:
93:b8:b0:db:82:d3:ff:89:7b:60:3c:e5:f4:68:23:
f5:c2:d4:1f:60:51:29:62:1d:77:bf:50:f6:72:0b:
81:ac:21:48:bf:43:75:08:3c:77:63:36:92:a7:05:
a1:ea:fc:24:9f:47:b6:de:30:05:87:05:71:4c:a5:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B7:95:CF:2D:E7:65:C6:3D:EB:3D:DA:DD:2C:43:8E:FB:5D:FA:7F
X509v3 Authority Key Identifier:
keyid:C8:F6:F5:DE:C0:9B:C7:A1:20:30:45:69:9B:A0:58:29:5D:38:E3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPb13sCbx6EgMEVpm6BYKV0440Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/u7eVzy3nZcY96z3a3SxDjvtd-n8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/48cb86-2750-4d6a-8a71-1be525576863/1/yPb13sCbx6EgMEVpm6BYKV0440Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.240.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:53:5b:fa:91:ee:f3:1d:a2:0e:a9:60:d1:42:65:66:ee:ff:
b0:34:41:46:af:a4:c5:e6:b0:5a:f2:2d:e9:70:f7:b2:0a:24:
74:ac:3d:ff:2a:d3:bb:99:16:89:2e:f9:f1:ea:2f:65:cf:43:
be:d9:09:d2:52:e5:62:1e:87:3f:e5:e1:3a:9a:bc:5f:7c:28:
97:48:6f:18:1c:2b:24:2c:13:3c:b8:39:33:0c:c7:4b:25:3e:
55:4e:21:71:d6:db:00:3e:bd:1a:af:2e:c7:32:20:66:f9:ac:
83:a4:88:86:de:eb:ae:fe:cb:99:a5:6d:6e:d6:1e:79:dc:8a:
4a:21:02:89:8a:e0:b0:05:3f:76:83:74:78:62:aa:ff:a4:09:
38:8b:f0:cb:29:8b:de:cc:1c:e5:50:fd:a3:7f:d4:65:21:a8:
8f:9e:71:ab:3b:ba:0f:af:ac:ff:31:96:ff:8d:fd:66:89:be:
0a:a9:c7:66:fc:09:26:39:ae:42:c8:9e:33:3b:c9:e7:90:4b:
a3:dc:ce:36:f0:64:46:4a:79:fe:01:fd:59:6f:65:ee:6a:be:
84:44:45:55:27:c6:eb:ed:4d:b0:7b:dd:1e:5d:5c:7d:0c:bd:
6f:1b:d2:c5:5b:f9:13:e1:fe:81:ee:aa:55:f4:0e:91:68:0c:
16:d0:4a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:37:20 2025 by rpki-client