Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa
File: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (raw, json)
Hash identifier: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=
Subject key identifier: 58:27:B5:39:77:76:7C:08:89:CF:66:C6:44:B6:36:74:73:22:54:0B
Certificate issuer: /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial: 01941FFA6FF7B7960ABBB1CE495EE2F4288C
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa
Signing time: Wed 01 Jan 2025 03:48:13 +0000
ROA not before: Wed 01 Jan 2025 03:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210719
IP address blocks: 94.103.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6f:f7:b7:96:0a:bb:b1:ce:49:5e:e2:f4:28:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5827b53977767c0889cf66c644b636747322540b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:dc:e7:94:5d:e8:44:50:28:70:56:13:eb:
51:b6:14:9d:16:3b:a2:ba:ec:82:fe:dd:73:4a:bd:
1c:71:80:56:8e:c6:7e:e2:f7:e3:16:d5:72:26:81:
f7:2d:dc:17:67:8b:99:f1:99:37:59:e8:da:dc:5d:
c0:7a:54:f5:07:c5:7d:c9:c7:7f:30:63:d3:ff:82:
51:c7:e4:93:50:18:40:23:b3:4f:c4:65:b5:45:81:
3e:0a:81:06:d5:d5:33:c2:bd:5b:ad:b5:81:f6:db:
69:a7:f7:ce:cd:b1:ed:65:5b:7a:0f:31:f2:1e:1f:
5a:86:c2:3c:fc:20:dc:b9:48:37:55:ed:63:30:ab:
0f:34:92:f7:38:9d:a4:bf:f5:d0:b0:c4:7d:46:45:
f7:6b:69:fb:a4:05:b4:b7:a5:f0:95:c0:09:09:df:
b8:16:36:9a:ea:88:79:9e:81:a8:62:c0:8a:bc:d7:
bc:fd:2d:da:7b:36:e4:f0:a3:81:7f:93:92:c5:8b:
60:fb:20:e0:4d:cb:e7:a0:8d:aa:2b:f6:2c:f4:81:
a3:a8:43:60:4e:61:e8:6f:95:d3:36:0a:e0:f6:8c:
d1:68:78:95:b8:30:3e:35:45:00:ba:3d:28:5a:54:
d9:e5:1f:37:14:08:6b:c5:ec:68:5f:92:70:54:dd:
18:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:B5:39:77:76:7C:08:89:CF:66:C6:44:B6:36:74:73:22:54:0B
X509v3 Authority Key Identifier:
keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.181.0/24
Signature Algorithm: sha256WithRSAEncryption
32:90:77:99:a2:45:ba:81:e1:2d:7f:98:27:45:3a:b5:66:75:
29:18:98:39:80:65:47:f3:63:05:ab:dc:f2:0b:69:2f:f5:fc:
33:5d:a7:cd:f4:da:d8:d8:c5:3c:3c:03:d3:bf:b0:e7:51:57:
bc:31:bb:05:c8:f5:de:00:04:e4:09:30:e7:11:96:04:28:bd:
3e:1b:d9:86:23:ed:4a:6a:80:4a:15:2b:66:e3:77:f6:ee:3f:
d3:8f:f4:97:9f:e0:cc:f1:d9:37:1f:90:94:7b:c1:73:d4:51:
a5:65:04:23:67:00:c6:3c:0f:d8:dc:32:42:75:32:24:b2:c6:
5b:94:07:04:96:0e:81:e7:c1:f6:94:83:44:20:b8:cb:8a:85:
8b:80:1e:d5:fb:69:f0:49:8c:a4:1c:b7:1b:1d:f0:02:fc:17:
ad:e0:16:a3:87:89:49:ae:7c:25:39:8f:e7:23:ac:e1:bb:74:
64:98:42:f4:00:3d:c1:0b:b1:34:0a:bf:0d:7a:a5:18:86:f4:
94:f5:b2:ce:6f:17:c0:78:83:a6:ec:35:b6:64:4d:80:53:fa:
1c:b5:df:7e:56:59:c4:b4:49:8e:f9:46:54:9b:7b:9d:8f:68:
ec:af:2c:83:7b:f6:65:de:3d:65:42:83:30:ca:02:35:45:9f:
a7:08:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:47 2025 by rpki-client