Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/_mlHYvNOqlWn3kV4X-JxKfP06uI.roa
File: _mlHYvNOqlWn3kV4X-JxKfP06uI.roa (raw, json)
Hash identifier: nSc6Enn4OnvgwO+jJT800LzQF9tqpEFUJwGLWJoDG80=
Subject key identifier: FE:69:47:62:F3:4E:AA:55:A7:DE:45:78:5F:E2:71:29:F3:F4:EA:E2
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 0194228E2008C0438CF5D8B703BE8DDB5199
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/_mlHYvNOqlWn3kV4X-JxKfP06uI.roa
Signing time: Wed 01 Jan 2025 15:48:47 +0000
ROA not before: Wed 01 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14315
IP address blocks: 94.139.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:20:08:c0:43:8c:f5:d8:b7:03:be:8d:db:51:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe694762f34eaa55a7de45785fe27129f3f4eae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:cf:60:52:b8:87:ed:fc:34:b2:89:69:43:
67:e5:6f:3e:6a:1e:3c:41:be:bd:d2:ac:fb:04:0b:
8f:ba:a4:fe:23:d5:00:33:76:d4:f4:a7:ca:a6:26:
c2:c0:04:8c:fe:bd:91:49:c9:68:12:4e:f8:7d:d7:
dc:e2:00:58:a5:9e:74:26:4a:9e:1c:b0:9a:ff:da:
f2:04:78:6a:7d:19:b0:cf:c9:4d:58:0c:76:b7:a2:
67:e1:80:53:bd:27:e2:95:c6:5c:77:73:f9:b2:00:
c9:50:08:7a:f6:f5:42:e6:5c:83:24:57:9b:72:5d:
df:1c:a6:7e:a8:24:4c:38:40:cd:f7:1b:88:95:a4:
88:6d:f4:1e:ff:a5:cc:8d:c5:66:8f:6c:13:1d:92:
ac:bf:31:a2:0f:c5:e3:89:04:6b:4b:e0:b3:85:2e:
e3:9e:b3:7c:88:76:5e:53:d3:3a:0f:aa:a3:cc:3a:
dc:4a:06:76:2b:11:71:2d:a8:3b:1c:17:d9:86:45:
35:35:a8:04:bf:98:0d:04:57:5d:52:16:82:10:07:
24:91:bf:62:59:f4:50:84:a2:83:2b:1b:b8:79:54:
84:83:cd:b7:f0:98:9b:98:82:26:a6:cc:7a:ce:2e:
bc:94:61:44:ec:49:2b:5a:d2:90:88:4a:3b:3b:fe:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:69:47:62:F3:4E:AA:55:A7:DE:45:78:5F:E2:71:29:F3:F4:EA:E2
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/_mlHYvNOqlWn3kV4X-JxKfP06uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.32.0/24
Signature Algorithm: sha256WithRSAEncryption
27:8f:f4:ae:05:0d:03:ee:0a:26:28:c8:58:d0:dc:d2:5e:86:
23:3c:a6:6e:db:56:4c:25:8c:96:fb:b1:fc:60:2a:0d:f6:8b:
62:72:ae:e9:f2:cb:f1:cc:e1:59:84:8a:f2:3b:ba:94:ed:08:
c6:1c:85:5d:3d:62:87:01:00:88:c1:7a:52:c8:87:ba:c8:38:
ba:da:3b:16:6d:d6:a3:67:d6:27:6f:c5:e9:4f:c5:f6:00:a3:
a3:ab:58:da:eb:00:e3:9f:bf:a6:c2:31:86:71:06:ef:7c:d0:
be:83:77:3b:1d:3a:2b:ef:6a:c7:7e:e6:5f:24:f2:36:1d:6b:
70:ac:9a:1a:56:93:73:bc:b0:0b:fe:c5:70:d0:d0:a6:d4:05:
5d:ca:84:7a:0f:da:bc:59:6c:72:35:fb:bb:2a:13:4c:97:7a:
c5:00:ad:85:a5:0c:b5:ae:7e:c5:9a:9a:c0:3a:b7:d8:84:77:
9b:4d:3d:97:8e:db:ca:6d:8f:57:01:c0:b3:86:39:f2:09:e4:
f7:15:cc:d9:0a:8d:98:b1:4a:b6:c1:3e:f6:4f:0a:6c:77:d8:
73:ff:9d:dc:ac:eb:7c:9a:e8:9c:7f:00:ae:45:90:c9:c4:d8:
97:ed:2a:56:84:9d:93:30:82:d8:8e:ee:78:66:e5:92:cb:7d:
61:ac:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:30:38 2025 by rpki-client