Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/rOy5uy_NTIjdgXXxIju3UL-TKY4.roa
File: rOy5uy_NTIjdgXXxIju3UL-TKY4.roa (raw, json)
Hash identifier: ShPP3cFWgf+p1Ts/WZ7cZBJeKVFu0VhveaoD9AjxE14=
Subject key identifier: AC:EC:B9:BB:2F:CD:4C:88:DD:81:75:F1:22:3B:B7:50:BF:93:29:8E
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 019424448F8B9C4D8089CCF4A367A645FA4D
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/rOy5uy_NTIjdgXXxIju3UL-TKY4.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200094
IP address blocks: 94.240.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8f:8b:9c:4d:80:89:cc:f4:a3:67:a6:45:fa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acecb9bb2fcd4c88dd8175f1223bb750bf93298e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:68:f8:06:d6:2f:e7:48:17:a1:00:74:86:
59:d3:0e:4f:9f:a1:a2:73:34:99:b2:f1:8b:13:4f:
55:e8:96:70:81:b5:c2:ed:99:98:54:cd:bf:9c:2d:
ed:37:4f:75:39:0f:32:2f:39:d1:e7:da:3c:7f:eb:
f2:a0:9e:9e:31:cd:62:58:2d:db:70:b3:05:10:02:
a8:8b:3d:34:17:3c:ca:a7:e5:fe:ea:34:86:7c:08:
0f:a1:42:0d:88:a8:9b:61:f7:47:b7:c1:65:b0:fb:
5b:80:d9:e8:49:f4:7a:a9:6a:b8:61:4e:28:5c:0f:
5f:f5:bf:aa:30:ad:74:82:cb:85:46:39:3b:41:be:
b8:af:a2:10:2b:5f:c5:46:3b:dc:39:a9:66:3f:14:
9e:50:19:bf:fc:fe:25:43:c6:49:ee:d4:68:31:81:
1f:d7:6b:e8:c3:86:b5:1d:25:e6:bc:ed:24:03:59:
0f:60:4e:08:0d:67:29:55:0c:5e:ee:fd:f6:26:c8:
9f:e9:de:3b:26:51:e3:e2:3d:7f:85:8e:90:4b:3e:
94:5d:75:75:b7:5f:d2:e4:8d:7f:b8:a5:58:3e:e3:
32:82:a5:9c:06:56:f3:64:f7:57:33:d8:f0:9a:8c:
78:0a:d4:26:14:d2:6c:1d:92:f7:0a:ae:95:1f:9c:
ac:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:EC:B9:BB:2F:CD:4C:88:DD:81:75:F1:22:3B:B7:50:BF:93:29:8E
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/rOy5uy_NTIjdgXXxIju3UL-TKY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:98:5c:9c:cb:c6:18:b0:ae:67:fe:7d:c7:92:89:bb:24:7d:
f9:ff:c3:4f:2c:20:b4:a8:98:e6:24:ee:0e:ab:58:71:7b:30:
a3:26:0c:b5:8b:34:30:79:9b:16:88:22:4c:31:6c:c1:88:df:
c0:43:f6:d9:69:80:fd:73:6f:42:92:94:fc:c2:32:98:6c:59:
8b:b6:d1:32:99:ad:59:b2:65:e8:08:38:94:61:86:9b:3a:02:
9d:a8:61:b7:15:08:f8:9d:cb:98:86:0f:b2:84:c8:87:0c:33:
57:c4:45:7c:d9:1f:25:2a:64:d8:c0:3f:e2:0b:2f:c2:dd:32:
02:83:d8:5b:c2:d3:57:10:13:2c:ac:4a:f3:9d:a5:f3:42:1c:
20:d3:22:bc:dd:98:51:54:23:b6:4d:d9:c7:23:bb:5b:95:2d:
29:b3:4b:09:25:55:90:26:72:72:38:8b:fd:0a:41:60:53:91:
c7:37:a2:e2:95:6c:0c:f3:98:b7:00:fb:0c:7d:a6:61:34:2c:
34:7e:a7:1d:77:a9:18:25:f1:73:e7:5e:70:3e:09:8f:2a:29:
6d:96:95:17:ba:20:a7:3e:54:74:63:5a:23:3c:dc:e0:8c:9a:
c4:d8:8c:00:bc:31:84:ea:3b:5c:33:58:38:c2:8f:3b:f9:a9:
f5:e5:a8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:25 2025 by rpki-client