Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/9BLDEYYfsffNxOST_G3WnWk3RLA.roa
File: 9BLDEYYfsffNxOST_G3WnWk3RLA.roa (raw, json)
Hash identifier: MbxghGhOd7fIdjWxFjFEtI5ZuPSJHWi+9N5XupuxNmk=
Subject key identifier: F4:12:C3:11:86:1F:B1:F7:CD:C4:E4:93:FC:6D:D6:9D:69:37:44:B0
Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial: 019423D6A3395A3FF411497CEBD83FBA5BAB
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/9BLDEYYfsffNxOST_G3WnWk3RLA.roa
Signing time: Wed 01 Jan 2025 21:47:36 +0000
ROA not before: Wed 01 Jan 2025 21:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212144
IP address blocks: 94.154.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a3:39:5a:3f:f4:11:49:7c:eb:d8:3f:ba:5b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Validity
Not Before: Jan 1 21:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f412c311861fb1f7cdc4e493fc6dd69d693744b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:1e:52:f1:19:7b:b4:e5:f0:9a:7e:a4:31:
ef:18:12:df:14:1f:ed:1d:e4:d5:ce:4f:83:44:ed:
19:ae:5e:c1:31:b2:64:f5:34:db:c8:1f:b1:3a:e7:
85:99:a8:06:bd:b0:85:e0:78:ac:b4:d5:3f:26:4e:
50:2c:04:fb:83:d2:2d:1d:92:ad:71:c6:c1:cb:57:
d2:8a:f4:c7:fb:eb:72:80:6e:67:82:24:93:bd:44:
e8:5b:78:1b:77:08:47:b6:91:01:06:74:6e:19:6b:
49:fa:49:d7:32:b1:7c:45:e2:7a:6f:93:5f:d7:e1:
4f:f5:7a:68:e5:63:fe:35:68:ab:99:12:04:7b:51:
01:8d:f2:23:96:c3:7c:8c:bf:9a:55:62:41:c8:bc:
a3:e1:79:ec:39:01:29:f5:86:14:e8:1b:26:f2:fc:
44:5a:34:39:f3:10:95:14:eb:80:c2:bb:3e:ed:50:
36:d0:85:03:21:42:a6:19:34:b6:05:57:b1:c7:6c:
33:d9:02:14:6d:71:ef:b2:7c:74:ac:da:fb:e7:a2:
34:3a:cd:b3:d0:b5:65:47:28:e1:db:37:7c:8d:09:
db:de:f0:14:8c:7d:45:dc:f9:dc:04:43:d6:a1:ae:
52:63:98:e1:f7:a0:f5:e5:43:fe:2e:66:ee:7a:5a:
d2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:12:C3:11:86:1F:B1:F7:CD:C4:E4:93:FC:6D:D6:9D:69:37:44:B0
X509v3 Authority Key Identifier:
keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/9BLDEYYfsffNxOST_G3WnWk3RLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.118.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f3:6c:0f:b4:b2:cf:1b:42:58:c6:49:53:d6:04:7d:b0:b9:
e2:b4:12:c5:2f:f9:05:48:5e:49:17:c8:31:9a:0f:71:75:1a:
c0:18:fd:20:a3:75:fc:f5:bf:ff:b4:e1:80:6c:bf:f2:60:1b:
32:99:9f:fe:77:53:86:c7:2a:96:34:7e:d0:28:d0:62:a8:db:
80:8d:02:09:2a:9b:d0:c3:29:86:83:67:51:9c:ae:5d:b8:aa:
e0:60:75:bd:f9:32:7d:5e:92:e0:ef:90:80:02:a1:3f:2b:9e:
31:71:bc:85:bd:6c:31:6e:e6:53:b4:2b:bb:98:c3:63:c2:58:
6c:92:09:f4:7d:93:46:fb:1c:ee:91:30:41:a3:3d:6e:30:1c:
5e:62:55:47:77:f0:af:f6:ce:81:6b:7a:0e:c5:8a:9e:52:e3:
cd:47:b3:e5:39:92:c5:ff:fb:26:93:d1:7b:1e:56:6a:19:fc:
bd:59:50:01:ee:96:b6:33:a7:fe:c5:3f:d9:f8:3d:e1:ea:ca:
fc:c7:c8:c7:b8:fd:11:b8:0f:03:fc:77:6b:7c:07:f6:89:14:
1f:82:29:38:12:c6:15:3d:0a:03:17:27:04:22:11:37:e7:2f:
b8:a7:04:2c:98:c8:c3:c3:24:2e:c3:57:c8:b4:9d:de:db:d3:
f8:ff:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:34:29 2025 by rpki-client