Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/F9Sdnlm5x7A4GepqoQznuefYhcI.roa
File: F9Sdnlm5x7A4GepqoQznuefYhcI.roa (raw, json)
Hash identifier: ukcwnramj5Cl8n/p3VC2veTHS+ZvOG6EqU4SmD/Rk9U=
Subject key identifier: 17:D4:9D:9E:59:B9:C7:B0:38:19:EA:6A:A1:0C:E7:B9:E7:D8:85:C2
Certificate issuer: /CN=cb77f3aad154c7e5fa6524dab6d218855d17adf7
Certificate serial: 035B3BD5
Authority key identifier: CB:77:F3:AA:D1:54:C7:E5:FA:65:24:DA:B6:D2:18:85:5D:17:AD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y3fzqtFUx-X6ZSTattIYhV0Xrfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/F9Sdnlm5x7A4GepqoQznuefYhcI.roa
Signing time: Fri 11 Mar 2022 07:38:08 +0000
ROA not before: Fri 11 Mar 2022 07:38:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212144
IP address blocks: 94.154.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56310741 (0x35b3bd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb77f3aad154c7e5fa6524dab6d218855d17adf7
Validity
Not Before: Mar 11 07:38:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17d49d9e59b9c7b03819ea6aa10ce7b9e7d885c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:b0:48:e8:65:1f:42:e2:bc:91:b4:31:24:
0c:b2:0b:58:9c:29:ea:e7:72:8a:6a:85:71:91:87:
d1:0b:ae:58:c1:89:a6:0b:11:25:e0:78:d0:73:3b:
bb:9d:f3:19:7e:17:b3:62:aa:c6:9c:23:d9:1a:3e:
5d:4c:65:84:be:45:d7:ea:91:81:66:04:95:14:fa:
3d:e0:59:c5:b5:ea:d7:b1:d1:7d:f8:31:58:b8:e0:
df:77:79:5c:ce:84:3d:e3:76:83:15:0c:8b:1b:8c:
b7:0d:9f:40:11:3c:22:c1:07:94:bc:d5:cf:b6:89:
f3:c2:cc:37:d0:97:aa:d1:0e:9d:91:40:c3:62:6e:
ba:c2:f6:1f:c5:66:c3:57:c5:9b:6c:bc:7f:58:b3:
01:5a:21:3a:77:12:c3:a3:88:14:30:54:6f:8f:24:
28:9a:21:45:15:e4:5b:d9:37:0e:2d:1d:fc:c8:cb:
bb:49:7e:09:75:c9:63:70:52:0d:9d:78:c4:88:6a:
c8:c1:56:85:50:81:41:0b:2d:f0:ca:b5:e7:3e:02:
b6:09:07:84:88:20:3a:1a:4e:cb:6d:8d:6b:51:99:
b8:47:55:aa:84:b9:38:9f:23:f1:25:1e:cc:01:c4:
df:0b:d0:91:86:48:38:33:e2:8c:73:12:2e:e9:86:
4c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D4:9D:9E:59:B9:C7:B0:38:19:EA:6A:A1:0C:E7:B9:E7:D8:85:C2
X509v3 Authority Key Identifier:
keyid:CB:77:F3:AA:D1:54:C7:E5:FA:65:24:DA:B6:D2:18:85:5D:17:AD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y3fzqtFUx-X6ZSTattIYhV0Xrfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/F9Sdnlm5x7A4GepqoQznuefYhcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/2709b0-f269-46be-afde-d56b36bdfc97/1/y3fzqtFUx-X6ZSTattIYhV0Xrfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.118.0/24
Signature Algorithm: sha256WithRSAEncryption
05:40:ad:10:3c:1f:b2:7c:8a:78:78:ac:1a:26:1c:f3:65:d1:
81:54:3f:c7:75:8d:0f:05:f5:c8:c4:86:c4:c5:50:f9:96:8a:
28:dd:46:fb:e2:a2:e4:08:0a:60:eb:de:da:d9:70:bb:f1:87:
1a:9c:af:2e:73:ed:be:85:be:da:b6:37:b4:43:d3:a1:94:1d:
5f:a7:27:ae:fa:7e:6e:09:2f:b9:95:38:7e:7b:bf:32:7b:f0:
da:17:4b:20:ce:4e:88:47:d5:3e:c6:56:90:f6:64:e0:14:24:
5f:ac:ca:fd:3d:26:78:cc:8e:2a:0b:77:be:56:65:78:82:80:
08:b6:c8:66:f2:db:c2:68:52:91:dd:06:bb:40:ad:84:4a:52:
17:1a:e0:8a:06:d1:5a:a2:f1:13:4e:f0:47:b6:20:17:c6:a0:
f8:11:93:67:54:56:87:4c:d6:92:69:0a:f0:c2:cb:d5:51:64:
e9:34:83:2d:4f:84:80:0f:16:d4:22:7c:8b:2b:d6:51:09:f7:
f7:3b:f9:9f:49:a1:e1:fd:8b:87:d9:82:01:38:13:eb:4f:ea:
b9:03:23:f4:9e:e0:b7:0f:e7:09:86:10:22:2f:7d:53:b5:04:
48:18:39:a9:00:be:ba:55:96:90:7d:50:7d:4b:89:39:10:3a:
c3:b6:bc:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:23:54 2025 by rpki-client