Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/j1UaPJ3EBEZxzWogTM0rgo7tdY4.roa
File: j1UaPJ3EBEZxzWogTM0rgo7tdY4.roa (raw, json)
Hash identifier: XxoD8YtBHET0g0Ic215DrNY+Pf9QaksQy9+bj1K3jqc=
Subject key identifier: 8F:55:1A:3C:9D:C4:04:46:71:CD:6A:20:4C:CD:2B:82:8E:ED:75:8E
Certificate issuer: /CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
Certificate serial: 018571B0E619A32C851F12E0BACD34C9B17A
Authority key identifier: B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/j1UaPJ3EBEZxzWogTM0rgo7tdY4.roa
Signing time: Mon 02 Jan 2023 08:54:56 +0000
ROA not before: Mon 02 Jan 2023 08:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 94.154.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:e6:19:a3:2c:85:1f:12:e0:ba:cd:34:c9:b1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0cc4a043d3f45f3feabf7ec0620637f461ae7f8
Validity
Not Before: Jan 2 08:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f551a3c9dc4044671cd6a204ccd2b828eed758e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:02:d1:27:ff:70:6b:b3:c7:b4:e4:82:90:50:
98:60:d1:c8:25:59:7f:83:81:f0:8f:50:10:9c:dc:
ad:73:44:61:76:6e:0c:db:6f:e7:e9:4b:48:1d:1f:
9b:42:2d:12:ad:94:0f:dc:74:e0:b7:d9:62:7b:73:
7d:08:25:01:15:6b:c9:e0:05:e1:f5:94:9c:fc:aa:
94:d0:44:a9:22:d5:a1:2f:2a:08:4e:6d:a5:13:68:
19:83:1d:e3:2e:48:ec:6f:b2:9e:a3:bb:07:2a:ea:
43:8d:4e:ee:1d:aa:19:08:f1:9a:90:b0:4d:8c:1d:
1c:bd:b0:6b:15:e6:8c:07:7e:32:2f:07:50:9c:e3:
88:22:2b:11:f7:53:77:06:01:66:ac:5d:3a:1f:e0:
8c:b2:b4:67:a8:d0:56:85:4c:07:4a:ce:cd:96:4d:
d8:d7:bf:72:7e:3c:bc:e9:f8:40:06:9e:e4:73:91:
fd:37:e4:0a:ee:15:d8:11:65:0c:06:b1:c3:39:5b:
6e:f2:77:30:1c:b0:75:84:6f:55:a3:d9:cc:0b:c8:
5f:c4:1e:b1:40:44:64:1e:c5:65:91:ea:80:73:52:
c0:5d:c1:83:66:a9:35:fb:bf:a5:cc:c6:b3:96:84:
d6:2b:b4:38:e6:57:c1:0c:73:f7:f7:0b:93:03:4d:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:55:1A:3C:9D:C4:04:46:71:CD:6A:20:4C:CD:2B:82:8E:ED:75:8E
X509v3 Authority Key Identifier:
keyid:B0:CC:4A:04:3D:3F:45:F3:FE:AB:F7:EC:06:20:63:7F:46:1A:E7:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/j1UaPJ3EBEZxzWogTM0rgo7tdY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/81db49-fb83-4219-9f89-619d31b554b3/1/sMxKBD0_RfP-q_fsBiBjf0Ya5_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.113.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a6:90:35:b5:a8:d2:56:3b:5f:14:2a:83:86:88:e1:98:25:
b3:e0:2f:41:6a:82:e8:bb:ab:a3:b3:ca:db:dc:58:72:ae:d3:
fd:18:d0:c6:b1:62:33:a2:ca:85:d0:63:8e:88:b8:77:d2:cb:
71:e4:2b:83:7c:11:d1:8f:81:04:09:28:d1:54:5e:73:97:e7:
ca:a0:28:5f:28:78:9d:a4:33:b3:fe:88:f9:6c:1a:73:d2:70:
20:b2:83:e8:2d:ca:5e:b2:e5:3c:b8:7b:b5:b7:3a:ab:e5:70:
be:2e:d1:12:bb:30:34:98:56:aa:3a:20:e0:e7:19:e3:4f:a4:
fe:4d:08:92:c4:4b:c6:9d:2e:ac:ad:ba:11:22:1e:86:45:80:
64:a2:f4:07:bf:4a:d0:d5:6d:3a:3b:0d:a2:9b:03:8b:49:cb:
df:be:89:be:09:1d:62:93:3b:6f:df:2b:58:c5:8a:5d:a9:30:
3c:91:0c:ca:3a:2e:09:14:27:cb:f9:84:80:80:25:41:51:9f:
27:9e:8b:db:93:68:32:6f:0a:ff:25:77:15:64:97:3b:7a:c9:
01:7c:eb:86:08:04:52:f5:b4:c1:40:55:19:14:fc:89:40:d2:
8c:47:31:4a:86:70:b5:56:5d:a9:18:90:a9:dd:9b:5e:f0:2d:
13:81:45:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:21:40 2025 by rpki-client