Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/WvFgJd8yg4rSqrM0SQVECorG-dk.roa
File: WvFgJd8yg4rSqrM0SQVECorG-dk.roa (raw, json)
Hash identifier: MK3zQysDa/G0ka0AnclPQNyZ14o0UVF7k+A2mmfkJoQ=
Subject key identifier: 5A:F1:60:25:DF:32:83:8A:D2:AA:B3:34:49:05:44:0A:8A:C6:F9:D9
Certificate issuer: /CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Certificate serial: 018582892338C07C29631EDD3C07E763C162
Authority key identifier: 46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/WvFgJd8yg4rSqrM0SQVECorG-dk.roa
Signing time: Thu 05 Jan 2023 15:25:03 +0000
ROA not before: Thu 05 Jan 2023 15:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 94.124.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:82:89:23:38:c0:7c:29:63:1e:dd:3c:07:e7:63:c1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46dd25d9f15c227ca35f8a2e2b0d1a89a92d8d62
Validity
Not Before: Jan 5 15:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5af16025df32838ad2aab3344905440a8ac6f9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:c5:13:41:94:ab:7c:25:49:a8:e1:a1:00:
b8:99:13:c3:e3:e9:e0:fe:49:f0:37:92:5f:5f:12:
13:f3:43:5f:c7:60:ca:b4:a5:0e:c3:c5:83:dc:63:
d7:aa:52:d0:2d:40:ca:bb:b3:99:ec:ae:51:87:e3:
34:87:f3:bd:35:4f:04:84:97:c9:e6:47:e1:ec:64:
4a:d4:22:6c:10:67:61:30:c8:cf:94:81:d0:c4:c4:
95:33:8b:72:d4:07:f4:91:9d:c0:51:41:2e:a6:bf:
b0:70:c6:3c:0b:fa:c3:aa:f1:d4:3d:2c:00:0c:7b:
4a:b8:01:e8:04:93:9e:43:84:c0:04:92:a3:07:cd:
54:d7:58:fa:b5:31:4a:48:08:10:f9:d5:20:98:f3:
86:ed:b4:f4:13:60:04:e3:4d:96:f0:63:54:a6:27:
1e:1b:f6:3e:b4:0b:ba:c8:60:71:f7:58:b9:79:3b:
fa:cb:94:02:61:81:f0:02:59:06:62:f6:cd:0b:1e:
11:13:c8:54:41:b8:d5:ad:c4:cd:dd:19:8a:6e:12:
76:29:85:16:8c:48:46:80:39:e7:0b:67:44:92:ba:
7a:57:34:d4:b6:4f:ae:47:6a:35:1d:b9:56:0d:42:
1a:b8:38:7a:e3:ac:61:f2:81:6d:cb:f1:82:72:9d:
26:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F1:60:25:DF:32:83:8A:D2:AA:B3:34:49:05:44:0A:8A:C6:F9:D9
X509v3 Authority Key Identifier:
keyid:46:DD:25:D9:F1:5C:22:7C:A3:5F:8A:2E:2B:0D:1A:89:A9:2D:8D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rt0l2fFcInyjX4ouKw0aiaktjWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/WvFgJd8yg4rSqrM0SQVECorG-dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37d01f-4a9d-456c-aca9-d852433364b3/1/Rt0l2fFcInyjX4ouKw0aiaktjWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.72.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f5:1f:08:cf:8e:e5:27:66:83:8f:42:5c:07:e6:bb:c2:69:
2c:c2:f1:7e:0e:7b:cd:44:df:21:10:1e:07:2d:70:04:a0:d2:
25:e5:ac:3d:37:53:ea:0e:d8:ec:84:28:fc:e2:4a:1f:f8:94:
42:b3:d8:42:e4:06:0a:00:12:d3:fd:27:7a:22:f2:11:a8:d6:
1c:d0:ab:49:6f:26:ef:ef:f0:e0:53:64:00:16:34:b5:e1:51:
8b:6e:d1:41:eb:93:22:60:d4:ca:06:a8:13:18:64:76:b2:f8:
7b:b2:2b:40:91:a3:03:71:50:e9:a9:66:b5:3e:c6:f5:e5:77:
ac:2b:5f:ab:83:a7:2f:d8:de:ea:30:b9:34:1e:7f:ff:c4:63:
59:eb:8d:88:e4:7b:9f:66:93:a9:65:f4:8d:2f:cf:6a:cc:af:
34:7e:65:4a:c0:f6:24:fb:d9:3d:95:aa:2e:6a:a8:e2:c0:ce:
9b:26:a0:58:2e:b4:85:a7:b5:c9:d9:d2:4d:ba:a7:4e:68:f3:
21:cd:81:5d:1c:4c:c2:55:8c:a1:b0:02:db:57:53:3e:be:75:
e0:40:8a:c1:0b:bd:40:6b:9e:e9:00:9c:03:bc:53:ea:f7:d8:
02:b2:a2:93:93:1b:32:8c:23:dd:27:f8:3c:89:33:8e:77:ae:
8b:7e:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:30:33 2025 by rpki-client