Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/0_n_Kh0HgvB-PnF2lnaArO6TLjg.roa
File: 0_n_Kh0HgvB-PnF2lnaArO6TLjg.roa (raw, json)
Hash identifier: BODqjfcXyKxw18Ary49S3XIRdqudbp1YKu/+eJLT4nU=
Subject key identifier: D3:F9:FF:2A:1D:07:82:F0:7E:3E:71:76:96:76:80:AC:EE:93:2E:38
Certificate issuer: /CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Certificate serial: 01122CBD
Authority key identifier: 46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/0_n_Kh0HgvB-PnF2lnaArO6TLjg.roa
Signing time: Sat 15 Jan 2022 07:04:53 +0000
ROA not before: Sat 15 Jan 2022 07:04:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 94.124.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17968317 (0x1122cbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Validity
Not Before: Jan 15 07:04:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3f9ff2a1d0782f07e3e7176967680acee932e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f9:00:de:28:e6:d9:3e:02:c5:21:7e:24:17:
70:13:ff:aa:b4:5a:7f:20:17:a4:cc:76:c7:87:2a:
28:22:a5:21:e6:df:97:97:38:60:9b:b0:92:bd:5c:
80:6e:29:b8:ed:4d:f4:8e:3c:f8:c3:19:1d:4c:ac:
a8:99:5a:98:14:e2:27:85:a4:65:22:e6:d9:76:20:
b7:60:0b:af:1b:b0:0a:5e:7c:15:1c:78:74:69:4c:
e8:08:59:6a:6f:4c:ad:6a:7c:ce:45:fb:97:de:61:
5e:b7:45:cf:fe:3e:e0:08:fd:2a:e1:9a:7f:36:d1:
96:b6:d4:20:6f:c0:11:58:4b:aa:36:00:b6:f5:1d:
19:70:d7:47:82:99:b0:af:fd:ef:d4:01:fc:aa:02:
5a:8e:0e:23:42:18:a2:9f:1c:14:a6:72:05:67:61:
a3:ce:58:53:d6:8d:ff:c1:33:0b:5d:a4:ab:57:0c:
de:d9:6c:0c:72:f0:4f:31:9b:1a:0f:b0:a1:f8:7b:
93:8e:fe:2a:15:36:28:20:d8:53:63:bd:c5:6c:90:
50:fc:df:71:4b:3b:63:bb:32:33:e3:f7:ce:9a:42:
d8:70:5e:e0:6e:44:3e:86:91:2d:e6:23:a9:c1:ed:
a7:c9:d2:5a:af:78:63:c1:b1:ce:57:54:4c:34:65:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F9:FF:2A:1D:07:82:F0:7E:3E:71:76:96:76:80:AC:EE:93:2E:38
X509v3 Authority Key Identifier:
keyid:46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/0_n_Kh0HgvB-PnF2lnaArO6TLjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/Rt0l2fFcInyjX4ouKw0aiaktjWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.72.0/24
Signature Algorithm: sha256WithRSAEncryption
75:44:44:de:d4:dc:14:56:0a:44:cc:e9:c8:c2:6d:a6:02:31:
b5:50:31:f7:0d:0f:86:d3:58:25:38:51:aa:57:56:93:52:53:
52:82:89:0b:89:c4:7c:3c:e5:d1:55:48:ae:b0:1d:79:08:54:
5b:85:ba:2f:1d:80:f6:82:cc:29:6b:1b:94:bd:cf:03:d4:60:
e4:38:f5:d8:ac:05:b0:e0:3d:66:ce:c8:7b:98:a7:c9:3d:c8:
d3:53:c6:10:bc:06:d6:8c:d4:6f:3e:1f:b5:b1:ac:53:c7:60:
33:26:90:2e:25:7e:b6:26:fd:84:01:b8:13:f6:f2:27:34:3f:
1b:66:b0:63:06:d9:6d:38:e0:96:90:4d:19:f5:4b:81:18:b8:
35:14:1d:52:0f:16:86:d3:55:9e:fd:6f:cf:d8:b1:e5:ca:f0:
0c:0a:37:23:35:2f:2c:fc:62:88:f3:5f:55:81:af:da:6a:41:
5e:54:6a:3f:2f:5d:45:56:0e:aa:cd:00:5a:dd:95:f8:83:25:
21:71:22:a1:d5:70:c3:f6:64:98:ad:57:13:84:12:48:af:99:
90:c8:ad:fb:9c:f3:35:07:66:9b:13:93:43:b8:34:8c:e1:ad:
b3:2c:44:e1:7a:a3:01:d3:3e:35:1c:cc:ed:ac:0c:dd:02:9f:
78:32:a0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:12 2025 by rpki-client