Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/iuLcyiXwQZziv0_sjmYUg4rd8tE.roa
File: iuLcyiXwQZziv0_sjmYUg4rd8tE.roa (raw, json)
Hash identifier: c4d3W96+VIXlmXnFxDKOg/1aO9O5nzlh/nR7jb3brKA=
Subject key identifier: 8A:E2:DC:CA:25:F0:41:9C:E2:BF:4F:EC:8E:66:14:83:8A:DD:F2:D1
Certificate issuer: /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial: 4480131C
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/iuLcyiXwQZziv0_sjmYUg4rd8tE.roa
Signing time: Sat 01 Jan 2022 16:06:43 +0000
ROA not before: Sat 01 Jan 2022 16:06:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213277
IP address blocks: 94.46.24.0/24 maxlen: 24
2a00:1651::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1149244188 (0x4480131c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
Validity
Not Before: Jan 1 16:06:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8ae2dcca25f0419ce2bf4fec8e6614838addf2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2f:aa:35:b3:cc:1a:b0:f1:61:f5:69:6b:2e:
74:ca:ee:90:4d:ce:bd:29:ce:99:c4:b0:e0:63:b3:
1d:a8:29:ae:72:0c:ae:bb:9b:b9:20:1a:98:f2:59:
a7:45:0d:a6:4c:3a:b0:91:73:66:90:2d:b1:81:75:
e0:a9:89:f5:ad:a1:f1:06:3b:2d:f9:95:62:9d:ba:
3e:c6:f1:03:77:52:ff:f7:f9:63:95:e2:6e:d8:cf:
f8:57:a3:01:8e:f1:ac:f2:38:76:1d:84:83:c4:82:
e9:47:5a:93:6d:f4:9d:6f:53:2e:33:03:59:1c:58:
a3:ec:26:fb:cd:84:cb:c4:ee:76:5f:cf:cf:0d:a5:
3f:bb:b7:d2:fb:3b:62:f0:4c:63:a8:c9:a4:a2:dc:
9f:4e:51:c1:dc:37:17:8a:0d:e3:2e:c5:1b:a5:01:
f9:82:7c:d4:a3:8d:3f:1a:9f:52:8e:ab:ba:22:81:
3c:3d:0d:dd:84:19:89:22:80:1e:85:22:84:16:3f:
49:52:a5:33:af:35:db:cb:fb:03:22:e2:04:8b:b9:
36:6d:8b:3e:61:97:ff:69:ea:1a:85:2a:c6:51:2a:
2a:d4:51:e6:69:2e:da:12:17:8b:df:b6:c1:63:bd:
0f:15:cf:48:55:bb:fb:bd:1c:09:b7:b8:77:06:35:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:DC:CA:25:F0:41:9C:E2:BF:4F:EC:8E:66:14:83:8A:DD:F2:D1
X509v3 Authority Key Identifier:
keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/iuLcyiXwQZziv0_sjmYUg4rd8tE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.46.24.0/24
IPv6:
2a00:1651::/33
Signature Algorithm: sha256WithRSAEncryption
6c:6a:84:6b:9d:f8:e5:72:e6:12:dc:74:fc:fc:4f:97:71:f0:
77:7e:76:e0:88:09:a6:81:95:8c:84:f1:ac:f1:71:1b:0f:98:
27:0b:26:e6:e3:2a:bb:30:2d:32:67:3c:d1:18:db:18:52:03:
5f:80:61:3b:4e:1f:f5:cf:f2:f2:96:8b:fe:96:ab:bc:3f:5e:
7c:0b:ec:2c:ac:57:91:f1:7d:81:57:0c:48:54:76:76:62:3b:
dc:6d:e2:96:38:8e:88:f6:2a:2f:cf:01:41:e8:8d:3c:ad:ae:
58:c7:6b:20:f2:c5:d9:a7:0d:18:51:99:2e:ed:66:a5:fb:30:
03:b9:93:2c:f7:4b:2e:1b:ba:6d:9d:ff:04:c5:68:ab:65:43:
f7:89:da:a7:ef:00:d0:37:d4:dd:eb:16:74:5a:34:6b:89:9a:
b2:b8:bd:c8:4e:c0:83:df:36:a0:78:de:e9:7f:03:90:2f:d7:
19:35:75:50:23:ed:e5:8a:04:8b:b5:67:0b:57:fd:65:1b:2f:
cf:03:3f:de:47:9a:f4:a9:0b:43:51:b6:05:25:98:a5:24:72:
56:3d:3d:d9:99:93:34:38:87:a0:49:44:d7:56:b4:50:84:e0:
9e:fb:12:a5:c0:e4:7d:3a:71:75:00:98:c3:cb:dd:a5:d2:18:
85:70:3b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:22:22 2025 by rpki-client