Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/fKVs2lzJco8yky1RgsvfRpsERwg.roa
File: fKVs2lzJco8yky1RgsvfRpsERwg.roa (raw, json)
Hash identifier: RSt0/ulmpZFZg4SLAM6kZKlm2sOebMgPJyz/oV0nMGg=
Subject key identifier: 7C:A5:6C:DA:5C:C9:72:8F:32:93:2D:51:82:CB:DF:46:9B:04:47:08
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 01942444918CAC5C16D2B036203FC434286A
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/fKVs2lzJco8yky1RgsvfRpsERwg.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202472
IP address blocks: 94.240.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:91:8c:ac:5c:16:d2:b0:36:20:3f:c4:34:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ca56cda5cc9728f32932d5182cbdf469b044708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:da:bb:fd:3f:a8:e8:0f:e4:d7:1a:93:7e:
2d:fa:e4:d5:ee:53:aa:2f:8e:6a:73:50:6e:26:ed:
0f:5d:0d:65:94:32:6e:bb:19:c6:2d:b0:2c:51:3a:
25:94:56:1a:a2:c4:e6:35:6e:a8:f9:49:16:4e:63:
fc:ad:e4:4f:71:66:40:75:cf:65:f8:67:90:50:d8:
49:3a:f9:30:18:ce:b2:10:0f:eb:4f:32:b4:b1:21:
97:45:67:51:78:ff:2e:0f:37:9f:84:6c:26:18:c1:
d4:37:0a:ff:71:66:ad:0b:ec:2c:ed:f1:ef:9b:43:
cf:1a:24:65:83:50:c9:39:c1:0d:be:ed:f9:a0:25:
e0:1b:83:be:01:26:71:28:8f:aa:c0:1d:26:5c:79:
9e:91:58:bb:9d:36:b1:f9:62:3b:2d:0b:8c:d0:ad:
c0:92:f7:d5:47:bc:b6:6a:f5:f4:eb:e3:e4:12:69:
92:08:6c:03:86:2d:1b:19:e3:23:a0:53:e4:5e:ea:
d2:ed:76:08:57:f2:1f:89:de:96:2b:4b:89:3e:cb:
00:60:87:96:71:50:ac:48:cf:66:f6:e0:e7:92:f6:
5f:e6:4a:56:89:8f:ca:9f:2b:d2:d1:a2:25:36:13:
6b:68:00:8a:7f:9d:c3:14:63:19:80:b9:d1:db:1f:
e9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A5:6C:DA:5C:C9:72:8F:32:93:2D:51:82:CB:DF:46:9B:04:47:08
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/fKVs2lzJco8yky1RgsvfRpsERwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.25.0/24
Signature Algorithm: sha256WithRSAEncryption
33:b5:8a:a0:8f:cd:9c:ee:9b:0e:5f:5a:8e:4a:d6:36:53:c1:
88:b6:df:ba:db:12:3a:3f:3f:ff:bc:76:23:a3:92:4d:52:16:
f6:83:d5:56:08:33:3f:55:db:f4:ac:16:01:df:fc:18:63:5d:
1e:67:82:fd:a6:91:41:11:b1:4c:77:20:74:f4:1e:af:70:83:
6a:29:f0:e4:9e:8d:fb:e8:7f:66:bd:e1:87:a9:06:02:a0:e8:
ba:b6:80:88:6d:11:7a:d5:54:4d:51:7c:81:06:9a:fa:40:75:
01:5c:79:4f:19:f0:9f:f7:8b:85:5a:91:27:57:3f:87:70:9b:
d5:df:d2:19:67:3e:cb:d1:41:af:d0:ca:ca:10:f2:2c:a0:f3:
0e:1b:4a:ee:e8:aa:8e:11:20:42:a6:46:d1:d5:1d:b9:c2:19:
d7:9a:36:a4:be:69:6e:ad:ab:15:37:b7:e2:8a:1a:4a:5b:79:
a4:a1:df:18:bd:96:5e:16:3f:c3:43:ed:aa:7a:52:11:d5:b8:
5b:3a:5f:fb:95:ed:12:db:3d:7d:c0:d8:0e:68:4a:72:23:be:
8b:ff:10:f6:79:59:15:30:4e:54:b0:57:d9:df:34:b7:d9:15:
d3:fa:7e:c6:6a:29:18:2e:ee:49:12:83:ff:19:f8:45:92:58:
e1:5e:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:46 2025 by rpki-client