Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/9A8gdmtuqfU9wYmKBShtKPJ6e2A.roa
File: 9A8gdmtuqfU9wYmKBShtKPJ6e2A.roa (raw, json)
Hash identifier: t7PuG6qK4ppWWgmsXL5AoeV48X7u41q4TusIUmLIQr8=
Subject key identifier: F4:0F:20:76:6B:6E:A9:F5:3D:C1:89:8A:05:28:6D:28:F2:7A:7B:60
Certificate issuer: /CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Certificate serial: 0184C4E8C7556664C76EA35675D6451602DE
Authority key identifier: 46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/9A8gdmtuqfU9wYmKBShtKPJ6e2A.roa
Signing time: Tue 29 Nov 2022 19:41:40 +0000
ROA not before: Tue 29 Nov 2022 19:41:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 94.124.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c4:e8:c7:55:66:64:c7:6e:a3:56:75:d6:45:16:02:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Validity
Not Before: Nov 29 19:41:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f40f20766b6ea9f53dc1898a05286d28f27a7b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:b4:ec:5d:86:5e:75:f3:89:1f:d6:8d:5c:
68:7b:d8:99:00:33:6f:d9:f5:32:80:97:0c:07:95:
a6:6f:f4:18:a2:76:bc:b4:4d:f7:b7:b4:5a:11:8e:
ea:74:a9:17:c2:e0:31:94:25:0a:2a:a5:13:5e:a2:
be:40:4a:a8:b1:1a:0c:13:55:5f:a4:69:d0:9a:bc:
74:33:af:0f:72:e6:7b:8f:2e:8f:61:a1:06:0c:24:
83:7c:b8:62:5d:2c:08:11:6b:f2:f9:4d:b3:57:f7:
55:ca:61:39:f8:4d:d5:de:56:52:c3:39:a2:a5:0c:
52:49:b6:cb:37:d4:dc:9e:0a:dd:1b:9e:2f:28:d2:
39:c8:9f:c1:70:24:03:9b:16:d7:ba:a5:ac:31:35:
57:7e:54:85:e3:4a:2b:fe:ad:6f:94:58:a8:df:8b:
54:7b:68:d8:74:7f:2d:aa:28:6b:4c:a9:e1:09:39:
35:0f:21:f5:20:98:57:87:fb:22:69:62:06:5f:8c:
4f:58:13:aa:cc:dd:38:37:93:2e:f4:28:9f:e7:ce:
64:97:a7:07:e0:59:cd:85:bc:71:0e:59:57:d9:50:
46:e3:c2:15:60:5b:9c:97:da:95:d6:47:22:cf:c5:
a7:64:7a:c3:27:d1:6a:ad:bd:f8:c1:e0:d7:e1:7f:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0F:20:76:6B:6E:A9:F5:3D:C1:89:8A:05:28:6D:28:F2:7A:7B:60
X509v3 Authority Key Identifier:
keyid:46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/9A8gdmtuqfU9wYmKBShtKPJ6e2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/Rt0l2fFcInyjX4ouKw0aiaktjWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.72.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9a:32:86:97:31:5a:6a:ea:87:de:51:ee:b4:aa:8b:ab:03:
61:5f:c1:59:e2:b6:db:fb:e0:e9:a1:a3:08:1d:63:84:bb:02:
e3:bc:60:d8:e9:99:cf:4d:d0:2d:58:9e:66:c8:af:76:b4:a9:
cd:cf:b4:6b:15:11:a8:fb:51:c1:6b:d1:eb:1e:5e:a9:4e:87:
85:65:c9:f8:71:d6:a2:19:86:8f:4d:4f:e6:d1:ef:8c:19:a5:
b5:32:cc:80:a9:dd:d9:fc:91:bc:f0:59:81:5b:2f:66:8f:11:
8f:a8:6f:68:db:ea:14:2d:27:6e:04:43:a1:93:28:52:14:40:
9c:50:98:55:28:33:c6:bd:2f:44:72:89:d5:d7:5e:7e:c1:d7:
a9:ff:6c:51:db:a1:0a:d3:a6:11:f3:09:b4:19:84:32:63:ea:
76:1d:28:d5:8e:89:a4:ee:f5:91:22:eb:92:7d:a1:e2:81:f8:
30:26:ae:a5:76:0b:23:98:ef:eb:1f:07:25:34:7a:3a:15:b6:
5a:04:11:92:1d:34:b1:03:2d:21:67:89:17:50:45:04:47:62:
b9:8e:a3:05:de:3d:d0:70:c3:8b:95:00:5c:17:0d:6c:1f:96:
b0:01:32:a7:ee:58:79:a9:44:4a:27:e8:bf:5d:72:be:b4:b0:
9a:ea:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:38:00 2025 by rpki-client