Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/rXS1K7Um9WZQhdL_pbCDxS05vkA.roa
File: rXS1K7Um9WZQhdL_pbCDxS05vkA.roa (raw, json)
Hash identifier: JDbaf4eeF90iYvl7zjz4IRy8XGcU1TR3foiTLk3m76g=
Subject key identifier: AD:74:B5:2B:B5:26:F5:66:50:85:D2:FF:A5:B0:83:C5:2D:39:BE:40
Certificate issuer: /CN=34d4debf87f67cbb442373817e7d62f758a59acd
Certificate serial: C4F6AF
Authority key identifier: 34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/rXS1K7Um9WZQhdL_pbCDxS05vkA.roa
Signing time: Mon 25 Apr 2022 18:02:10 +0000
ROA not before: Mon 25 Apr 2022 18:02:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 94.143.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12908207 (0xc4f6af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d4debf87f67cbb442373817e7d62f758a59acd
Validity
Not Before: Apr 25 18:02:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad74b52bb526f5665085d2ffa5b083c52d39be40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:ee:29:ca:32:cb:ac:f0:8d:25:a9:7a:ba:
c4:12:a8:49:ec:45:5e:cb:f2:c3:7c:46:b4:3c:0f:
2f:81:b5:b6:d7:d6:32:1e:ef:74:a8:44:42:74:1b:
8d:a2:e3:e1:c3:3e:05:ba:1d:3a:24:a9:21:d2:09:
fe:85:51:fe:8c:ae:ed:6e:24:d4:8a:f1:7c:b4:93:
12:ed:d0:2c:13:fd:2c:08:5c:77:24:ff:99:3e:34:
46:75:f0:4a:9f:7b:42:e1:a2:5c:0b:e7:dd:bb:52:
39:ae:8f:3a:eb:17:d0:cd:7f:d5:d9:ca:a4:57:f4:
83:e7:4e:39:b4:30:72:f3:71:6d:e1:94:94:6f:b4:
1f:74:57:72:9c:03:2f:8b:36:aa:8e:86:e1:ff:bf:
e9:a9:49:97:a5:30:ae:ca:a3:0e:cd:a4:ff:b3:ad:
c3:5c:f2:f3:5a:16:05:bf:06:1a:2c:fe:ba:0b:98:
2b:67:f9:03:ff:08:b3:a8:42:22:9e:98:16:d0:3b:
8c:f1:59:29:2c:d2:ce:c3:73:d2:62:8e:7e:d6:4f:
80:52:f6:49:5a:06:40:a9:b1:c8:5c:b7:9e:16:03:
2b:e3:97:84:59:27:cf:be:50:62:93:78:bf:41:22:
ce:f3:91:4d:4e:99:f9:73:f0:de:83:ae:79:98:63:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:74:B5:2B:B5:26:F5:66:50:85:D2:FF:A5:B0:83:C5:2D:39:BE:40
X509v3 Authority Key Identifier:
keyid:34:D4:DE:BF:87:F6:7C:BB:44:23:73:81:7E:7D:62:F7:58:A5:9A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNTev4f2fLtEI3OBfn1i91ilms0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/rXS1K7Um9WZQhdL_pbCDxS05vkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a78a69-c8b8-4c62-8989-bba31f39511a/1/NNTev4f2fLtEI3OBfn1i91ilms0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.224.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5d:c1:d3:59:f2:dd:6e:5a:52:cf:08:90:75:ec:e1:4d:77:
39:2f:33:99:ec:33:7a:52:a1:55:9c:29:0d:b1:11:6e:76:02:
21:61:85:35:ed:cf:b6:8f:97:92:64:f2:e0:1b:19:db:6d:85:
94:cc:0a:3c:84:67:9f:44:cc:a4:9e:b0:92:20:de:42:40:e1:
b2:27:a4:b6:5a:7e:9c:6e:85:a1:77:44:74:87:25:ef:1d:96:
42:7d:8d:ca:fc:c3:e1:29:8b:a2:d4:7d:ef:73:d2:37:e6:43:
74:99:2e:17:d1:e0:1c:3e:48:98:91:bd:bb:34:28:15:f2:64:
c5:d8:8c:1a:f4:89:f5:e2:b2:ac:ba:9b:2a:4b:e6:d1:91:73:
5a:09:8d:6d:93:4f:4d:18:35:ad:fa:5a:d4:b9:67:36:fd:a5:
30:be:7a:61:b5:04:9a:64:1b:d5:d9:79:44:6f:84:dd:c8:1c:
e1:2d:47:4b:84:9e:97:ec:d0:28:a7:3c:d2:49:a0:21:db:f8:
51:9b:6d:f8:be:d1:31:56:b3:98:27:c2:fb:4c:79:60:1e:68:
c7:e3:0c:47:11:0a:40:df:96:5c:30:1e:8d:88:9e:26:81:35:
9e:c2:fe:b8:70:bc:ae:5a:a6:e9:ea:2e:45:8f:56:36:c5:02:
3f:02:c2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:11:55 2025 by rpki-client