Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/XfXS8ijvqtsMHkla-Me1RcI7IwA.roa
File: XfXS8ijvqtsMHkla-Me1RcI7IwA.roa (raw, json)
Hash identifier: 2RtkbeEIEVw4twW1PRZ/J8F/rTi3ZGd/QdB8lfuZFqE=
Subject key identifier: 5D:F5:D2:F2:28:EF:AA:DB:0C:1E:49:5A:F8:C7:B5:45:C2:3B:23:00
Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial: 01941FFA1E173C63E0BAD3A80135135F98CC
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/XfXS8ijvqtsMHkla-Me1RcI7IwA.roa
Signing time: Wed 01 Jan 2025 03:47:52 +0000
ROA not before: Wed 01 Jan 2025 03:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 46071
IP address blocks: 94.207.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:1e:17:3c:63:e0:ba:d3:a8:01:35:13:5f:98:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
Validity
Not Before: Jan 1 03:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5df5d2f228efaadb0c1e495af8c7b545c23b2300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:10:cf:5d:1a:f9:bb:c6:86:80:22:63:92:
3c:b2:89:4a:11:4b:b8:98:6b:87:56:2f:c0:69:64:
a0:37:cd:f8:69:ed:13:5f:e3:4a:0f:cd:6c:56:50:
96:3a:5d:85:ea:66:87:24:4d:c9:e1:d3:99:0f:93:
af:c9:9e:00:af:55:c1:29:80:9d:6b:a5:13:22:62:
ea:67:95:0a:16:34:c8:fb:25:02:f1:8a:68:77:f5:
c7:43:97:76:bb:ac:d4:6e:e5:3a:c7:f1:da:c5:a2:
2b:a2:4e:3f:11:94:a1:b9:8e:6c:12:fd:d3:b6:fc:
ff:63:3a:56:74:bc:55:85:83:05:28:30:38:91:b8:
04:71:21:48:dd:40:4a:77:26:b5:17:37:7b:2f:67:
61:88:eb:6e:92:f0:99:b4:bb:c2:49:a9:04:cc:67:
a5:ec:6c:58:0c:2f:bb:67:17:05:d1:9a:00:cc:61:
90:ed:c1:b1:fa:05:cd:a3:31:f9:06:ec:17:2a:55:
02:1d:c9:24:a7:4b:79:a4:0f:7d:67:43:fc:87:9f:
93:f3:71:86:17:21:b0:83:47:dc:ea:c0:6b:c5:24:
fc:de:69:d6:f8:6e:51:9f:7f:7c:d3:06:d5:e2:b2:
9c:29:c4:ea:d3:17:da:0c:07:5d:56:cc:f5:b1:ac:
8b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F5:D2:F2:28:EF:AA:DB:0C:1E:49:5A:F8:C7:B5:45:C2:3B:23:00
X509v3 Authority Key Identifier:
keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/XfXS8ijvqtsMHkla-Me1RcI7IwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:f9:8f:35:f9:0d:8d:47:61:7d:19:f1:54:bf:86:69:ba:bb:
dc:5d:31:f0:37:6a:ab:b3:f0:92:38:b2:b7:2e:54:4d:f6:3b:
e3:46:4c:62:52:f7:db:01:a7:e5:14:f3:18:0a:5e:70:d7:37:
5b:2a:fe:4b:38:b8:c9:9d:74:b6:2f:8a:2d:df:9f:0f:f6:5d:
93:97:0a:14:4f:83:80:f6:b2:ec:1b:6c:9b:b6:f3:05:cc:6c:
4e:00:ef:c8:53:01:aa:28:fd:cf:53:d0:3d:a9:ac:b2:81:fc:
a6:d5:40:e1:55:3f:44:5e:63:1d:fa:de:ca:0f:db:51:4c:f2:
13:50:76:b4:96:b9:43:b2:d5:f9:36:02:0c:ab:80:5d:ea:12:
61:d1:88:27:54:ca:23:3a:63:8b:7c:c7:75:3c:29:cc:b6:ee:
70:ad:3d:6a:60:69:e5:36:ec:5c:ea:35:21:2b:45:40:02:ff:
c6:c8:6f:a9:27:98:4e:a2:94:bf:39:38:cb:a8:bd:de:c2:cd:
d3:c2:a0:e6:fd:ed:0f:e9:19:19:1d:55:2d:07:cd:1e:21:2d:
95:3a:12:6b:5a:15:ce:4d:bb:2c:0e:89:73:c5:66:2d:70:ad:
b8:6c:5e:7c:ab:49:e2:75:40:b4:bd:5f:60:8a:bf:0f:ec:55:
10:5c:78:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:00 2025 by rpki-client