Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/jdCs0ZL0SC55THdB8buccPHazLk.roa
File: jdCs0ZL0SC55THdB8buccPHazLk.roa (raw, json)
Hash identifier: Ysfj2YuY8qZacfJ0Pia1kl0dqiNsbRo1lLBBPEofGfg=
Subject key identifier: 8D:D0:AC:D1:92:F4:48:2E:79:4C:77:41:F1:BB:9C:70:F1:DA:CC:B9
Certificate issuer: /CN=c50491092130dedd8466ffd5cc510576c894df6e
Certificate serial: 01942368CE97AD2C87A34DF5F19CF0C1AE8A
Authority key identifier: C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/jdCs0ZL0SC55THdB8buccPHazLk.roa
Signing time: Wed 01 Jan 2025 19:47:38 +0000
ROA not before: Wed 01 Jan 2025 19:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204455
IP address blocks: 94.154.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ce:97:ad:2c:87:a3:4d:f5:f1:9c:f0:c1:ae:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50491092130dedd8466ffd5cc510576c894df6e
Validity
Not Before: Jan 1 19:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8dd0acd192f4482e794c7741f1bb9c70f1daccb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:db:96:21:08:60:5c:e6:9d:8c:12:d3:cd:
88:0b:de:51:60:82:31:7b:c2:f0:c2:30:4a:83:0e:
79:6f:df:e2:15:7c:b3:47:d9:6d:b7:34:71:1b:8f:
ea:85:25:31:40:90:c6:20:c8:5f:09:68:f0:70:5d:
90:cf:9f:6a:09:44:a5:ce:00:56:71:6f:c9:47:d1:
6c:27:97:82:7c:7e:91:c7:65:9b:4c:2c:e7:b6:8c:
bb:bf:da:5f:3b:20:08:de:f0:37:74:22:8a:aa:40:
19:21:2a:1e:b3:19:52:ed:cd:6d:f9:85:79:6a:fa:
16:f7:ef:fc:7a:50:7f:b7:6a:4f:98:63:20:10:fa:
f9:08:dd:6c:0a:09:fd:c3:22:eb:4a:e5:08:e7:c2:
61:1b:9b:9b:7c:c4:39:1d:19:b0:87:c1:86:72:cf:
60:d8:3e:01:5b:32:da:fa:0b:74:6a:31:40:68:c7:
45:f6:5d:f0:b7:63:26:39:60:42:31:06:c8:fa:87:
98:49:1e:c4:e6:50:21:b2:50:2d:da:69:39:93:c0:
d0:54:8d:b0:ac:16:16:00:35:dd:1e:5c:c6:98:00:
c1:d0:d3:45:ac:db:4f:1f:c0:56:fe:97:ec:5b:12:
f5:e2:60:4e:d6:f4:a9:24:54:7d:21:5b:18:f1:cc:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D0:AC:D1:92:F4:48:2E:79:4C:77:41:F1:BB:9C:70:F1:DA:CC:B9
X509v3 Authority Key Identifier:
keyid:C5:04:91:09:21:30:DE:DD:84:66:FF:D5:CC:51:05:76:C8:94:DF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQSRCSEw3t2EZv_VzFEFdsiU324.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/jdCs0ZL0SC55THdB8buccPHazLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d7a26c-c373-4e6d-9fd8-bf191d9a2c9c/1/xQSRCSEw3t2EZv_VzFEFdsiU324.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f7:6d:6b:d7:2e:2c:b1:58:55:17:21:78:6e:63:4f:b1:5a:
a1:1c:53:6e:f4:0b:17:9f:2f:da:86:12:c7:a9:03:04:d8:9a:
08:1e:3e:0d:b3:39:72:2e:e9:e8:14:e2:64:51:24:15:19:56:
01:a4:08:c9:47:4f:13:3f:26:9b:80:71:51:b5:59:39:fb:39:
59:1b:62:bc:7d:cd:0a:5b:b7:3e:e7:fd:47:05:56:0f:98:b8:
ce:7f:58:20:3b:aa:b0:34:1c:a6:53:c7:26:8e:44:18:f2:17:
d2:31:f5:a3:9b:fa:5c:6d:5c:7f:4c:a6:a1:6b:cc:d8:94:9a:
40:f1:3c:64:78:5d:3b:73:b4:a1:81:cd:54:0e:db:a1:f0:c9:
3d:95:76:0d:c2:5b:70:3b:2c:82:15:47:e8:6f:db:51:2e:c1:
38:dd:8a:6e:19:a0:7b:9f:65:4c:52:c1:44:f4:62:a9:e1:9c:
96:a6:e9:4d:32:f0:5d:f1:ba:79:ac:38:8a:5a:31:5d:0b:ea:
e1:07:f6:59:2a:68:da:dd:4b:e5:7f:25:05:84:fa:bf:2f:36:
13:db:cc:76:71:c6:d5:19:56:14:ff:b4:87:d0:88:dc:e3:c5:
0e:fc:36:12:e8:14:45:3d:43:61:36:ac:97:fa:34:d1:6a:fe:
0f:10:4a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:23 2025 by rpki-client on console.sobornost.net