Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/O5OtqUEvG1YnFmn6UgeNJ1oZP-c.roa
File: O5OtqUEvG1YnFmn6UgeNJ1oZP-c.roa (raw, json)
Hash identifier: VRxwcyE4UrZz6xLqGqdVz8PVGg0wcs0oMtm/DmMYz1M=
Subject key identifier: 3B:93:AD:A9:41:2F:1B:56:27:16:69:FA:52:07:8D:27:5A:19:3F:E7
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D764B74FFDD3FDAEAB32BF6627831F
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/O5OtqUEvG1YnFmn6UgeNJ1oZP-c.roa
Signing time: Wed 01 Jan 2025 21:48:26 +0000
ROA not before: Wed 01 Jan 2025 21:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61361
IP address blocks: 94.247.47.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:64:b7:4f:fd:d3:fd:ae:ab:32:bf:66:27:83:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b93ada9412f1b56271669fa52078d275a193fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2c:12:69:6c:3a:c4:c8:27:22:2b:4a:eb:bc:
65:b0:cb:2f:d5:33:f8:5c:f5:77:f9:00:0c:6e:53:
6f:9f:09:9b:64:55:8f:ca:cb:d2:50:01:44:79:9a:
3a:b6:52:78:df:d4:f6:97:3f:75:6b:73:cb:37:60:
19:a5:2b:30:6c:12:fc:95:dd:29:a2:54:ad:9b:3c:
8e:3d:f8:96:69:a8:c5:bd:29:76:96:07:6a:7d:c3:
ee:54:d3:d4:63:70:5f:d1:2f:8e:ca:c7:f3:6d:5e:
a3:48:08:43:b7:14:01:7f:f6:d5:a0:07:66:b1:46:
f9:cc:08:e3:2f:18:8a:fc:ca:41:5a:29:66:65:96:
d4:ae:4b:2e:b8:97:d5:ab:00:55:1e:97:af:5e:8e:
6c:9b:42:75:d0:40:6e:6d:4b:94:ad:5e:eb:c1:21:
7c:79:ae:2c:22:b8:32:89:2a:3b:76:41:62:c9:d2:
ba:25:08:3b:76:b1:5e:da:dc:94:60:44:49:a6:54:
8e:c2:d5:dc:a6:a6:d8:31:ce:73:b9:69:7e:b2:2a:
c2:99:e6:a9:ce:1a:95:e6:ec:2f:54:f8:ca:b1:f8:
e9:de:c6:8e:53:f0:64:60:da:b7:e0:b1:19:a5:98:
dc:ed:fa:e5:7c:5c:98:70:87:71:d9:58:92:27:f6:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:93:AD:A9:41:2F:1B:56:27:16:69:FA:52:07:8D:27:5A:19:3F:E7
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/O5OtqUEvG1YnFmn6UgeNJ1oZP-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.47.0/24
Signature Algorithm: sha256WithRSAEncryption
34:4a:eb:52:99:9a:a0:1f:e8:01:d1:16:83:46:a9:d0:d6:d8:
ac:85:63:3c:1e:62:c0:25:a3:e6:30:9d:9a:d1:a9:98:15:67:
06:1f:6d:8a:6c:23:51:45:b2:46:de:39:9f:59:55:25:66:65:
e1:7a:cc:40:33:1c:05:30:a0:ef:c0:7f:83:63:b6:bf:5e:b6:
d9:d8:68:a7:61:e9:71:8a:63:1d:5e:1b:d8:76:11:7d:b6:bf:
be:c7:03:8d:e3:f8:a4:29:ad:f8:53:d2:cc:08:39:ff:33:02:
52:b7:f0:e2:13:b0:2d:d8:ac:63:a1:63:28:f4:1c:02:1e:f6:
b6:d3:59:d9:b6:b3:bd:cd:fe:ed:6b:2a:d6:81:2f:c2:42:6c:
6a:2d:a1:87:00:69:20:73:f6:25:de:0d:af:03:fb:3d:6a:f5:
6b:27:dc:f8:dd:37:50:30:00:b1:9b:be:0a:00:2f:24:93:81:
18:2d:3d:2b:fe:80:29:3f:06:9f:55:43:7c:e2:a9:05:1b:fc:
0b:7e:22:64:37:38:d8:3c:8b:29:d3:05:7b:19:99:46:9d:48:
c3:b5:d2:27:22:d6:54:31:70:b1:b8:68:b5:83:f2:b2:87:61:
04:bd:71:d4:5d:9b:ba:35:db:5b:28:a5:c2:ba:58:01:5b:3e:
65:00:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:11 2025 by rpki-client