Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/Jp4IVfZZvR140mpjjYUAjVaz7Cs.roa
File: Jp4IVfZZvR140mpjjYUAjVaz7Cs.roa (raw, json)
Hash identifier: TRNrGcoS0P0g8aTGKzRQhfTFQgo2xZB+wmmf+MX45Rg=
Subject key identifier: 26:9E:08:55:F6:59:BD:1D:78:D2:6A:63:8D:85:00:8D:56:B3:EC:2B
Certificate issuer: /CN=336b69e2dd29bbe48946c4d58ac60eb23dff95c5
Certificate serial: 018CC5012829481A8D881EEFF09FEEFB3E54
Authority key identifier: 33:6B:69:E2:DD:29:BB:E4:89:46:C4:D5:8A:C6:0E:B2:3D:FF:95:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2tp4t0pu-SJRsTVisYOsj3_lcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/Jp4IVfZZvR140mpjjYUAjVaz7Cs.roa
Signing time: Mon 01 Jan 2024 12:30:36 +0000
ROA not before: Mon 01 Jan 2024 12:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 94.124.96.0/22 maxlen: 32
2a06:a780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:28:29:48:1a:8d:88:1e:ef:f0:9f:ee:fb:3e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336b69e2dd29bbe48946c4d58ac60eb23dff95c5
Validity
Not Before: Jan 1 12:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=269e0855f659bd1d78d26a638d85008d56b3ec2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:4a:ac:ea:a1:97:37:9e:00:56:48:5a:e2:
4a:de:0b:c4:4a:67:84:a4:2c:6b:9b:15:e7:61:ca:
d7:34:04:ad:e0:63:09:bb:5e:18:89:4e:bf:37:06:
75:d8:46:24:28:62:3b:c9:d5:45:8d:0c:e3:2d:75:
1d:de:23:b8:f4:98:1a:5f:df:76:79:1f:ef:fe:6a:
27:87:25:de:2a:f2:23:67:82:b5:22:2b:8d:a5:20:
78:2b:87:c9:78:a1:e9:e5:67:9e:9b:38:a8:ad:3b:
1d:d7:84:3d:64:a6:96:13:5b:b1:dd:63:69:3f:6e:
24:49:81:30:d9:a2:4c:65:95:98:ef:5d:32:f0:d2:
ff:44:18:c2:9b:f0:2e:21:5e:f6:e6:7b:49:af:3f:
68:16:b2:0d:ee:82:71:72:a3:04:57:83:4c:42:8d:
f0:5a:54:10:07:c5:a3:e8:91:e4:e3:f7:59:36:a1:
cb:26:66:19:69:52:5e:92:b5:be:e7:b6:ae:30:7f:
b1:fd:a2:83:4b:49:71:0a:7f:36:11:20:f5:ef:5a:
7f:90:e1:cf:dc:32:64:59:ba:1a:51:0f:43:51:0b:
1a:cc:bb:67:45:a2:cc:c6:16:f1:57:ba:8a:70:3e:
9d:8d:ce:3b:db:1e:b8:e7:39:97:3a:f6:9b:41:12:
92:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9E:08:55:F6:59:BD:1D:78:D2:6A:63:8D:85:00:8D:56:B3:EC:2B
X509v3 Authority Key Identifier:
keyid:33:6B:69:E2:DD:29:BB:E4:89:46:C4:D5:8A:C6:0E:B2:3D:FF:95:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2tp4t0pu-SJRsTVisYOsj3_lcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/Jp4IVfZZvR140mpjjYUAjVaz7Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/M2tp4t0pu-SJRsTVisYOsj3_lcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.96.0/22
IPv6:
2a06:a780::/29
Signature Algorithm: sha256WithRSAEncryption
14:86:a3:ba:59:6b:48:44:af:b6:dc:96:fc:76:1a:1b:bb:36:
47:57:7c:ab:3e:56:87:59:01:66:92:5c:37:e4:1c:9a:b3:45:
fb:42:8c:7e:40:08:7a:33:33:3d:09:fd:7d:eb:31:f7:17:c6:
85:2d:60:3d:09:5c:de:5f:ad:30:47:6a:17:dc:df:1e:f6:fa:
b4:33:cc:61:26:26:af:b9:54:85:2d:7c:e7:45:cc:ec:bc:60:
cc:c8:64:21:3f:10:0f:f8:ba:3e:fa:a8:9e:13:99:7c:72:ef:
89:a9:b8:49:c9:3c:10:06:5a:13:7b:ac:eb:c5:3e:6c:a0:07:
f4:52:a8:f1:44:00:51:d9:53:ff:dd:79:4a:33:10:48:b0:0b:
06:ab:09:b7:3b:37:36:76:e8:ee:7a:f0:af:39:97:8f:5e:34:
9f:c4:b3:79:f4:71:b1:ec:67:5b:a8:35:b4:38:04:fb:b2:86:
85:36:11:29:43:2a:e0:8d:43:76:eb:8a:f1:24:2e:64:cb:94:
6b:50:a7:40:25:78:fa:76:c3:6c:90:1e:02:36:3a:4c:d1:bb:
59:aa:11:95:87:82:12:95:39:19:d0:e5:cb:4f:81:56:92:89:
c0:5c:d5:32:4c:6b:5c:b0:1f:33:f7:aa:e6:84:83:79:7f:04:
c6:be:5f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:28:41 2025 by rpki-client