Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/AvN828iiRV3-eQ2nvQTTlCpY0ts.roa
File: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (raw, json)
Hash identifier: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=
Subject key identifier: 02:F3:7C:DB:C8:A2:45:5D:FE:79:0D:A7:BD:04:D3:94:2A:58:D2:DB
Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Certificate serial: 019422FC3471FD1E26F1126D3ACAFC4FEAF7
Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/AvN828iiRV3-eQ2nvQTTlCpY0ts.roa
Signing time: Wed 01 Jan 2025 17:49:01 +0000
ROA not before: Wed 01 Jan 2025 17:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 10753
IP address blocks: 94.136.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:34:71:fd:1e:26:f1:12:6d:3a:ca:fc:4f:ea:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02f37cdbc8a2455dfe790da7bd04d3942a58d2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:70:37:d1:b4:53:29:3e:07:8f:7b:c8:ff:
a2:f1:81:83:00:bf:3a:d0:b4:fa:56:fb:16:74:4e:
78:0a:6b:fb:b4:16:ab:49:09:c4:ba:f5:f1:6d:72:
2c:db:80:e7:35:98:b1:00:8e:5f:57:d4:4b:9d:da:
17:92:ac:c2:85:86:5c:47:3c:82:0b:d0:aa:22:9d:
ab:84:82:c3:22:a8:08:4e:bc:73:21:1f:f2:21:60:
15:7d:7d:a5:69:67:90:63:02:48:df:57:01:23:7d:
29:2b:58:db:a4:aa:8f:f3:9f:24:22:96:54:0d:d9:
f2:7c:02:5a:b7:d6:b7:0e:6c:ab:a7:65:8f:39:a6:
a7:88:5a:17:44:a3:f5:5b:e6:06:35:8d:b8:45:90:
51:94:4e:6b:4d:15:89:f4:2c:98:c8:7a:1b:27:ae:
d6:ac:34:89:4d:1e:29:36:01:5c:db:21:72:0d:34:
0f:4f:78:f8:10:ad:a8:2a:d9:f9:bb:af:ad:9a:1a:
c3:65:70:45:ec:75:12:17:79:9c:dd:6f:52:a6:3b:
14:11:ca:68:8a:10:76:4b:78:16:67:2e:6d:a3:ca:
b4:a5:1b:b9:7a:1a:5c:6a:d2:c1:a9:8c:22:26:aa:
cb:3d:1c:5c:45:57:63:9c:9f:c5:fb:a1:bd:34:1d:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F3:7C:DB:C8:A2:45:5D:FE:79:0D:A7:BD:04:D3:94:2A:58:D2:DB
X509v3 Authority Key Identifier:
keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/AvN828iiRV3-eQ2nvQTTlCpY0ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.136.116.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:c6:cd:93:9c:d0:9a:01:f7:53:63:dd:a7:ae:67:b6:cb:55:
8e:e9:ac:9a:73:b5:df:26:f2:d5:17:db:ba:e0:98:34:92:0c:
5d:17:ff:b4:47:9f:78:1d:d2:bc:46:96:5b:43:1b:5c:af:c8:
78:ba:c6:d5:11:c5:8e:45:da:70:d4:39:92:e9:ca:48:f7:2a:
54:a0:3e:d2:c9:67:b9:b2:3b:bf:5b:fc:1b:4a:ee:ee:6e:29:
0d:35:5a:8c:95:c1:c0:44:64:8f:03:5e:3f:bb:35:13:17:7a:
d4:a7:de:29:c8:e1:26:42:27:cf:5e:68:9d:cc:02:59:99:bd:
38:81:4f:df:ad:16:e2:02:78:d2:67:5b:0c:ea:8b:b0:32:fe:
d0:3d:bb:4f:da:ea:b5:73:da:90:eb:ab:54:37:22:41:aa:09:
ce:42:25:d2:80:aa:2d:f6:57:70:4b:83:19:64:47:41:83:ef:
ab:e1:6e:f8:ff:07:03:bf:4b:37:6e:f4:52:20:1b:0d:ec:84:
d9:22:d6:f1:05:1b:47:74:72:cb:ca:1c:50:bb:d5:40:42:cd:
05:8f:e8:4a:3a:c4:28:f7:dd:ea:3e:85:92:29:11:c4:89:e9:
6f:e0:0e:2e:5b:02:69:b0:38:c5:b2:ba:47:52:9a:c3:e1:f4:
25:27:65:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:25:01 2025 by rpki-client