Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/8s1U0KmUYb897VvjMdVaiCCBr8Y.roa
File: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (raw, json)
Hash identifier: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=
Subject key identifier: F2:CD:54:D0:A9:94:61:BF:3D:ED:5B:E3:31:D5:5A:88:20:81:AF:C6
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 019425219E0A148D33D8F1528E60CA57DBC8
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/8s1U0KmUYb897VvjMdVaiCCBr8Y.roa
Signing time: Thu 02 Jan 2025 03:49:07 +0000
ROA not before: Thu 02 Jan 2025 03:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213277
IP address blocks: 94.46.24.0/24 maxlen: 24
2a00:1651::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:9e:0a:14:8d:33:d8:f1:52:8e:60:ca:57:db:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jan 2 03:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2cd54d0a99461bf3ded5be331d55a882081afc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:02:95:d3:02:a2:9f:31:2c:2f:2c:40:72:
31:04:06:f9:2f:39:07:15:0d:77:50:3d:ed:82:a0:
0b:30:9a:c1:83:34:09:36:86:9c:f9:fa:60:6f:95:
35:81:66:18:b9:b4:28:20:43:1d:fc:32:70:8d:4c:
4e:b2:47:40:5c:e8:bc:fd:0d:68:5e:15:6b:3c:eb:
78:f9:68:48:44:11:e4:ac:e7:56:1d:d2:d6:bc:03:
85:b2:67:5a:d3:b6:9a:e4:43:c2:7d:28:5b:09:92:
39:de:f3:54:e5:f9:9f:b0:0c:a9:94:3a:43:da:bf:
6e:80:5a:3b:71:2b:d9:3b:b6:67:82:34:7e:7c:9d:
8d:b4:c9:0c:c0:1a:ac:72:51:99:98:ed:97:cc:b0:
98:c8:bb:72:3e:b5:a5:67:2e:ae:96:54:11:cf:5a:
d2:84:fa:c8:7e:5d:dc:39:c4:7e:17:fe:5c:df:95:
e8:71:52:5b:dd:32:9e:e1:77:d9:30:65:a6:20:a1:
73:ff:9e:37:1a:4d:d4:9b:01:12:d0:8c:88:29:50:
59:84:06:c4:ba:74:78:98:59:bb:40:1d:cf:2e:75:
86:65:a1:3e:f8:4b:35:da:12:23:d3:93:1c:71:76:
d6:93:f9:e9:44:f1:e1:57:d3:7c:ec:8f:28:c7:a3:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CD:54:D0:A9:94:61:BF:3D:ED:5B:E3:31:D5:5A:88:20:81:AF:C6
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/8s1U0KmUYb897VvjMdVaiCCBr8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.24.0/24
IPv6:
2a00:1651::/33
Signature Algorithm: sha256WithRSAEncryption
12:13:44:9d:7d:86:18:df:ee:9a:ab:ba:ac:e0:6e:ec:fb:3c:
6b:27:dd:2b:7b:31:c8:f2:8b:a8:11:a8:4e:cf:ba:ce:16:15:
35:73:a1:5e:67:d1:44:04:ab:11:7e:30:3f:83:5f:5f:e1:ae:
85:5e:80:f5:57:f8:c5:45:21:5a:3d:ac:e9:44:44:2e:3a:81:
5e:62:1f:e9:99:19:45:ec:b0:b2:4a:76:7b:12:bb:06:7c:45:
dd:8c:a5:bb:a9:fb:5a:c9:c8:90:1a:55:d5:f3:0f:34:cb:7f:
d4:24:16:4a:08:90:6e:be:59:1f:e8:e5:98:e1:79:5e:fc:c9:
84:92:c1:54:7f:c7:4d:02:e7:8a:15:69:e1:6a:3b:d9:31:ab:
9e:3e:05:21:ac:ca:2e:67:a7:20:96:d4:78:8b:eb:01:ad:6c:
87:bb:fe:07:99:b5:4f:f4:ea:a5:1d:86:92:b8:da:01:09:62:
7b:79:6f:7d:0f:94:24:eb:86:47:86:35:f9:69:5c:8f:bb:f7:
ad:4a:57:2d:ae:16:05:b6:9e:c6:68:91:27:35:fa:a3:24:d9:
cb:75:00:6e:01:55:6e:7a:05:13:e7:f0:5e:1e:96:c1:c6:2c:
6b:1a:dd:75:13:40:5f:84:df:0f:e0:f2:53:cc:9c:70:15:3a:
89:7f:6a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:06:00 2025 by rpki-client