Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/sDyZ3Xj-hCthaQT1bC4ebEDw6Cw.roa
File: sDyZ3Xj-hCthaQT1bC4ebEDw6Cw.roa (raw, json)
Hash identifier: 9qVV6BnkMsCgOT7Yjd89yQugOb6f7ecV9tYVpl6mbKI=
Subject key identifier: B0:3C:99:DD:78:FE:84:2B:61:69:04:F5:6C:2E:1E:6C:40:F0:E8:2C
Certificate issuer: /CN=aaa5b6ec96e7cb62488ed512dafc547e3e333461
Certificate serial: 36F9D89F
Authority key identifier: AA:A5:B6:EC:96:E7:CB:62:48:8E:D5:12:DA:FC:54:7E:3E:33:34:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqW27Jbny2JIjtUS2vxUfj4zNGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/sDyZ3Xj-hCthaQT1bC4ebEDw6Cw.roa
Signing time: Sat 01 Jan 2022 11:59:02 +0000
ROA not before: Sat 01 Jan 2022 11:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48083
IP address blocks: 94.127.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922343583 (0x36f9d89f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa5b6ec96e7cb62488ed512dafc547e3e333461
Validity
Not Before: Jan 1 11:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b03c99dd78fe842b616904f56c2e1e6c40f0e82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:6c:58:3a:cc:d7:9b:49:69:bf:91:65:c8:c7:
ec:dc:68:52:e4:e6:18:72:85:1f:87:f9:4b:ef:1a:
ea:fa:59:ca:ec:85:64:8c:e2:61:9b:50:d4:f7:cf:
6e:4b:50:86:54:f5:b9:25:3b:85:b4:46:a3:98:42:
e6:56:8a:50:1d:ca:a7:49:68:15:94:0c:14:93:7d:
00:ae:eb:69:de:0a:ec:be:a8:4b:a0:62:8c:a6:bb:
48:3a:d0:d3:a0:40:d8:cd:52:78:f9:d2:3a:1f:ff:
34:d1:75:4b:b6:b0:91:b8:8b:ad:6f:ff:ef:2c:f1:
e8:f4:89:c2:c5:65:91:24:9e:52:34:ab:d7:fe:0b:
fe:88:81:a2:05:a8:c0:03:bf:50:7d:9e:d6:a0:bd:
a1:24:e8:27:0e:52:e0:cc:b7:ea:12:57:14:d8:f7:
de:0d:d6:85:4b:9e:1d:fc:91:ea:bd:52:06:ae:fd:
4d:c0:76:77:4d:0f:d1:02:d6:90:f4:55:ec:03:50:
b3:e5:3b:c4:0b:c0:db:13:c6:42:84:b8:f0:2c:62:
c2:98:b8:2a:3a:23:a1:3c:ac:29:0f:c6:81:63:d1:
10:ae:5d:e8:12:98:de:05:3f:73:65:0d:e1:a5:41:
f8:0c:43:ae:5e:dc:e6:54:2d:85:73:f6:15:7b:92:
cf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3C:99:DD:78:FE:84:2B:61:69:04:F5:6C:2E:1E:6C:40:F0:E8:2C
X509v3 Authority Key Identifier:
keyid:AA:A5:B6:EC:96:E7:CB:62:48:8E:D5:12:DA:FC:54:7E:3E:33:34:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqW27Jbny2JIjtUS2vxUfj4zNGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/sDyZ3Xj-hCthaQT1bC4ebEDw6Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7d00d1-aa30-46c4-af57-39bf891c19be/1/qqW27Jbny2JIjtUS2vxUfj4zNGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.96.0/21
Signature Algorithm: sha256WithRSAEncryption
85:ec:9b:87:f1:4f:78:c3:f0:25:9b:d2:05:e3:79:01:30:25:
7e:db:78:da:29:7d:ab:98:17:8f:4d:c9:04:27:27:cd:d3:40:
b4:ff:3b:cd:2d:71:e8:20:8f:1f:48:12:ea:5b:e0:ff:e0:fa:
81:7b:33:19:a4:a9:bf:65:77:5e:7e:50:aa:0b:27:01:a7:a9:
24:56:ae:c5:53:b6:09:d1:e7:51:bb:c8:0d:99:5d:96:34:04:
0e:b0:be:29:05:e8:43:f1:86:c8:17:e6:dc:97:82:6c:49:2e:
e9:d2:19:c4:0f:38:01:38:59:1a:1f:74:42:fa:b9:49:e0:bc:
32:83:8d:ce:a8:c1:8a:8a:79:f2:b7:31:60:1e:3b:a3:d5:3c:
20:d6:d9:0f:1f:9a:83:72:e9:5c:7b:81:86:17:62:62:ff:96:
ef:5a:16:70:9f:79:02:53:2b:91:3e:95:30:4f:6d:ac:be:2c:
b9:94:a6:10:bb:b1:cc:dd:78:72:66:b6:07:b0:3c:b3:2e:27:
6b:df:03:9b:05:c6:e2:c0:0b:31:9d:32:94:78:a1:59:18:5b:
76:c9:ef:94:5c:7b:43:a9:d3:65:a5:e4:2e:17:bc:cf:37:30:
8f:1a:9b:8d:e8:14:1f:12:2d:9a:09:d0:f6:1d:e1:f3:8b:9a:
9a:c4:ae:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:25:45 2025 by rpki-client