Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/acfcd6-68e7-4106-a7cb-45a90978449a/1/0-a0vl4QMEaW8XU3CalTAV9CxsQ.roa
File: 0-a0vl4QMEaW8XU3CalTAV9CxsQ.roa (raw, json)
Hash identifier: jVrW40breor81XDyyxPWxAyiZ9bXxrs4mDAZFi7hXdg=
Subject key identifier: D3:E6:B4:BE:5E:10:30:46:96:F1:75:37:09:A9:53:01:5F:42:C6:C4
Certificate issuer: /CN=494f60bfc6c02a49e18161fc8cc48f62783c24d9
Certificate serial: 018964C05EEB92CDAEAC1E1E0E3F98F956F5
Authority key identifier: 49:4F:60:BF:C6:C0:2A:49:E1:81:61:FC:8C:C4:8F:62:78:3C:24:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU9gv8bAKknhgWH8jMSPYng8JNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/acfcd6-68e7-4106-a7cb-45a90978449a/1/0-a0vl4QMEaW8XU3CalTAV9CxsQ.roa
Signing time: Mon 17 Jul 2023 16:47:56 +0000
ROA not before: Mon 17 Jul 2023 16:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 94.103.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:5e:eb:92:cd:ae:ac:1e:1e:0e:3f:98:f9:56:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494f60bfc6c02a49e18161fc8cc48f62783c24d9
Validity
Not Before: Jul 17 16:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3e6b4be5e10304696f1753709a953015f42c6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:1a:22:4a:5d:9c:4c:76:86:f8:53:9f:4b:
ca:54:e8:77:37:dd:7f:81:9d:84:4c:79:49:7c:2e:
2d:bf:98:ea:a6:2c:a2:a6:5c:ef:57:c0:c5:af:44:
c6:18:18:a5:bf:df:bd:c8:36:62:ff:a3:18:13:57:
87:bf:4c:0f:a3:db:a5:4e:d1:60:5b:1e:6c:82:14:
47:40:ce:80:75:a8:bf:6b:d1:0e:cc:68:bd:a5:38:
96:28:b0:b1:07:70:c2:fc:b6:30:d3:2b:a3:77:de:
bd:6b:e5:73:f6:76:d8:9c:b5:6a:64:22:8c:63:42:
7c:c7:c1:f9:21:19:14:18:47:4d:33:a8:59:e9:b1:
91:f6:c3:d4:ec:5a:30:02:55:9f:d8:52:3f:e5:6d:
1f:7b:ed:a9:f5:5d:df:88:35:0d:22:e9:55:72:02:
e9:b0:64:45:9f:8b:c6:41:06:43:67:17:49:61:f9:
c8:f3:bf:26:92:dd:d9:27:31:0b:f9:2d:17:74:af:
25:b1:04:59:ab:1b:11:d5:4c:60:4d:59:60:68:27:
f2:24:0d:bd:ba:60:4f:b4:20:c3:a8:01:7e:29:1d:
07:9b:4b:99:41:87:a7:92:75:93:c3:7d:74:97:ea:
4d:7e:2d:ab:72:0d:5b:78:0c:4d:66:e3:6a:82:ed:
42:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E6:B4:BE:5E:10:30:46:96:F1:75:37:09:A9:53:01:5F:42:C6:C4
X509v3 Authority Key Identifier:
keyid:49:4F:60:BF:C6:C0:2A:49:E1:81:61:FC:8C:C4:8F:62:78:3C:24:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU9gv8bAKknhgWH8jMSPYng8JNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/acfcd6-68e7-4106-a7cb-45a90978449a/1/0-a0vl4QMEaW8XU3CalTAV9CxsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/acfcd6-68e7-4106-a7cb-45a90978449a/1/SU9gv8bAKknhgWH8jMSPYng8JNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.179.0/24
Signature Algorithm: sha256WithRSAEncryption
44:86:1f:00:b9:23:ef:6c:57:56:73:32:b5:4f:05:aa:a0:bd:
f5:a9:a0:d5:bf:dc:10:1f:41:a3:99:0c:14:57:cd:e8:86:e4:
36:07:45:68:c1:12:0b:18:e9:97:3e:c7:60:37:de:79:86:d7:
3b:49:50:0d:d7:50:db:75:5d:9e:81:73:39:ea:57:87:2f:32:
6a:a0:d9:dd:1b:7b:dd:7b:a5:fe:0a:46:06:81:85:b2:cc:c4:
70:43:34:25:ce:bf:70:e2:10:d2:b7:31:07:26:83:61:1a:cb:
a7:f3:2d:72:c9:e7:13:e2:25:9c:f3:32:c4:e3:4b:31:54:93:
e3:78:bc:2a:d5:9d:bc:ff:a2:1d:61:2f:37:c7:50:0d:6f:60:
6c:55:ce:cb:99:4a:b9:d1:85:8c:30:d8:59:04:41:ac:50:da:
56:6b:32:f6:d3:21:f4:81:cd:0c:6c:97:b8:79:80:8c:34:3b:
36:66:59:13:85:1f:cb:c2:06:dc:81:d7:a3:1a:37:39:a8:46:
6c:fe:20:53:83:ad:7c:67:fe:5c:74:9b:df:2a:28:a2:2f:a3:
bf:0e:d8:c7:07:3a:e7:ca:de:b9:d7:a8:53:fd:c7:9f:51:df:
f7:f2:d8:8f:f4:62:31:8a:db:ec:d7:4f:fe:d0:fa:31:b4:5a:
3c:03:b5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:45:49 2025 by rpki-client