Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/hztSFe2fWRlmTU4tssnBu-y0WeI.roa
File: hztSFe2fWRlmTU4tssnBu-y0WeI.roa (raw, json)
Hash identifier: k2WLaKga1DftX/wOd3XsZqhZBsK4rGShhnxmdanGvCQ=
Subject key identifier: 87:3B:52:15:ED:9F:59:19:66:4D:4E:2D:B2:C9:C1:BB:EC:B4:59:E2
Certificate issuer: /CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Certificate serial: 019424B378D8AD8154E7A711D55139F2B1E9
Authority key identifier: EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/hztSFe2fWRlmTU4tssnBu-y0WeI.roa
Signing time: Thu 02 Jan 2025 01:48:49 +0000
ROA not before: Thu 02 Jan 2025 01:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42351
IP address blocks: 94.101.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:78:d8:ad:81:54:e7:a7:11:d5:51:39:f2:b1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecc4cf37241ced1467c918aa276d388b0a82ed5
Validity
Not Before: Jan 2 01:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=873b5215ed9f5919664d4e2db2c9c1bbecb459e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:94:0e:48:97:15:0f:36:49:4f:ea:12:49:b5:
3f:ef:c9:61:c2:42:08:f3:be:45:8a:7a:ac:9a:01:
45:b5:75:a8:a9:08:8b:e8:16:bb:95:13:cb:85:3f:
aa:aa:de:28:2e:0a:65:26:66:a8:1c:2e:3b:30:ea:
8c:82:ea:0a:ca:5d:7d:cd:ac:de:03:d3:4a:f6:5b:
9f:ab:79:de:f0:52:9f:3a:32:67:d7:37:50:ca:e2:
65:f7:6a:97:8b:fd:22:19:eb:f6:de:62:0e:7b:0a:
dd:f8:5e:b1:d1:98:01:dd:85:88:9e:8d:6c:11:b0:
52:25:2a:56:6d:b4:a6:43:48:c6:44:65:4e:87:b1:
f9:89:22:97:2c:d0:49:be:aa:5d:98:eb:9f:a8:ff:
1b:59:7d:56:83:2b:aa:17:c2:cf:80:fc:33:21:6b:
90:e1:1f:b9:01:8c:ca:39:5a:26:9f:34:1d:a2:ad:
b7:e7:b3:c9:d1:67:a6:a5:fd:c7:cc:ef:00:a0:01:
0a:01:c4:fa:ca:84:ad:ab:ee:d3:f8:2c:c6:9e:73:
7b:20:78:84:1d:6d:fe:ee:83:b5:84:67:52:a1:f8:
eb:c0:b7:a9:18:b3:8e:06:30:60:e7:d6:b3:b0:49:
bf:b7:24:0a:0a:6d:18:d5:f7:45:16:4b:67:7f:ff:
0c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3B:52:15:ED:9F:59:19:66:4D:4E:2D:B2:C9:C1:BB:EC:B4:59:E2
X509v3 Authority Key Identifier:
keyid:EE:CC:4C:F3:72:41:CE:D1:46:7C:91:8A:A2:76:D3:88:B0:A8:2E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sxM83JBztFGfJGKonbTiLCoLtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/hztSFe2fWRlmTU4tssnBu-y0WeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cf7d93-a076-49ff-9baf-5a37af43904c/1/7sxM83JBztFGfJGKonbTiLCoLtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.101.200.0/21
Signature Algorithm: sha256WithRSAEncryption
75:52:66:ec:da:72:b3:e0:27:55:d7:9e:03:62:ec:6f:4f:54:
12:53:9d:58:70:29:b0:e9:64:4e:39:f4:be:ad:76:75:a3:1d:
66:2d:1a:a5:3f:d3:e0:af:ae:43:b2:69:c2:b1:66:f8:8b:bd:
7c:12:21:bb:24:7c:b1:76:02:30:9f:ad:01:88:cc:f6:fa:99:
46:78:e0:cd:18:63:17:5b:10:c7:b5:89:f0:58:f4:d3:d4:de:
51:4c:ed:e5:e9:57:4d:96:87:67:ce:57:28:5a:27:19:ed:dc:
93:16:9e:8b:28:74:0c:a6:9e:41:cf:e9:e0:74:12:b6:f3:cd:
6c:8a:a1:0b:4c:23:4b:72:01:0e:51:90:53:d8:b8:77:9e:88:
50:a7:5e:95:ad:5d:72:f7:14:c4:12:49:2a:9a:82:29:d9:d9:
31:85:85:62:58:2e:5c:aa:72:ba:ee:97:55:23:9a:29:eb:5f:
cf:1b:c8:71:34:da:6a:23:a0:5b:72:7f:25:7a:d0:24:7f:ad:
e4:7a:65:11:ed:2a:ae:f6:fc:ab:29:78:1f:5a:ed:2e:6a:72:
80:50:a2:52:42:1c:8e:20:6c:09:3a:42:36:94:07:77:17:6a:
c7:4f:7c:8d:10:29:1b:58:e7:80:c7:e9:3d:f5:e6:29:85:05:
1e:5f:d5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:37:12 2025 by rpki-client