Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa
File: CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa (raw, json)
Hash identifier: LgF/Ta729VSsHPxynFr9+mRLhRpy51NkOyQe2/JSJU4=
Subject key identifier: 08:9C:E3:76:3B:EF:E0:51:A1:34:97:4B:B4:B5:D6:CC:31:B6:AB:13
Certificate issuer: /CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Certificate serial: 019426D9A163AC17F85D795C1AFBB98527BB
Authority key identifier: CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207706
IP address blocks: 94.154.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a1:63:ac:17:f8:5d:79:5c:1a:fb:b9:85:27:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb9f19cc1ad78745a5dab31d634057e29abfed8c
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=089ce3763befe051a134974bb4b5d6cc31b6ab13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:0e:bb:d1:ba:df:5a:4f:c1:ef:99:84:eb:
3b:89:50:87:8e:36:7f:b5:8c:f3:b2:99:3c:c2:52:
dd:30:7a:45:cd:23:7d:9f:f7:81:ce:30:f3:69:c0:
d4:0a:9f:17:79:85:2b:28:9c:f2:1d:b5:59:a1:17:
7b:df:cd:80:ac:98:4c:c1:60:fc:6c:a8:ca:a4:8c:
00:b7:9a:b1:96:e4:35:02:a3:51:89:eb:1c:a8:a4:
b1:f6:92:47:59:dc:60:5e:32:b5:97:1e:db:49:b2:
c5:ef:f3:24:be:af:22:53:d7:4a:bd:b2:32:41:fe:
25:75:7d:c2:a1:65:62:da:b1:58:09:df:9b:6b:4d:
ca:b3:2f:fa:01:67:d5:b1:c9:ec:46:8a:e3:99:0b:
0a:6c:17:52:4d:95:41:04:67:e8:8e:c3:84:92:45:
82:a4:38:da:0d:bf:d7:4b:9a:eb:60:d5:be:61:9f:
5c:1b:d2:01:32:97:8c:19:f4:02:ab:06:7f:74:c1:
9d:47:22:1e:48:3a:75:83:97:b2:cd:72:15:08:f6:
a0:70:6c:99:a9:86:50:12:96:dc:56:1b:e9:d8:1b:
fa:59:58:8f:95:92:5d:4e:a1:d9:fd:79:60:45:d7:
e3:cf:f7:98:2f:2d:95:53:d8:62:52:f3:f0:0c:5a:
16:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9C:E3:76:3B:EF:E0:51:A1:34:97:4B:B4:B5:D6:CC:31:B6:AB:13
X509v3 Authority Key Identifier:
keyid:CB:9F:19:CC:1A:D7:87:45:A5:DA:B3:1D:63:40:57:E2:9A:BF:ED:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/CJzjdjvv4FGhNJdLtLXWzDG2qxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af1d49-d0e4-4d68-8dee-dd69a4ee1350/1/y58ZzBrXh0Wl2rMdY0BX4pq_7Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a2:a8:05:e9:a8:be:e1:d3:db:c3:de:09:3a:ed:88:8d:b3:
d2:38:68:bb:5c:48:c3:ac:66:59:31:ed:19:bc:ec:9c:fb:13:
01:ea:27:35:e3:f7:48:64:39:cc:ff:da:80:33:6f:cc:aa:d3:
37:8d:c1:d1:8c:eb:0d:56:a5:c8:d5:a7:2e:61:18:bd:82:62:
1e:1f:ca:cb:d8:2d:58:d8:85:b6:bb:d2:6a:d6:db:0d:17:3b:
1c:2c:66:d7:f6:11:72:9e:20:39:e6:34:7e:ae:56:17:f2:3a:
8a:3c:cf:ad:bd:36:73:5b:34:b6:9f:c3:60:ee:bd:8c:d8:6c:
a2:58:7a:5e:76:30:1f:93:c0:cc:c1:8a:24:15:b0:ab:0b:69:
e4:2b:df:ed:d4:12:78:27:a0:c7:a7:87:7e:7b:6a:8d:cc:96:
d4:d4:50:ed:ad:0f:ba:06:5f:b0:72:3c:56:9a:0a:f4:a4:ba:
12:02:c3:fd:8b:6e:aa:c7:06:5e:23:8a:f9:b5:98:0b:21:2b:
10:10:d0:14:69:39:b6:43:49:be:39:5a:56:68:48:6c:f9:40:
2c:23:da:93:d4:b2:16:62:8e:6e:fd:15:45:77:43:7c:5a:70:
0c:f3:39:eb:e6:ff:08:d0:02:0d:15:d2:ed:80:83:42:bb:f8:
89:7c:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:40 2025 by rpki-client