Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/IPDWq2JXklmZilVzAW_qJFHve_M.roa
File: IPDWq2JXklmZilVzAW_qJFHve_M.roa (raw, json)
Hash identifier: 8qLID3yci9mCWiyOl1eMby2l1Aaax7OKoB39T8J6xu0=
Subject key identifier: 20:F0:D6:AB:62:57:92:59:99:8A:55:73:01:6F:EA:24:51:EF:7B:F3
Certificate issuer: /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial: 019421B1A1F4BFB5B7422AF7354B938B5E89
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/IPDWq2JXklmZilVzAW_qJFHve_M.roa
Signing time: Wed 01 Jan 2025 11:47:56 +0000
ROA not before: Wed 01 Jan 2025 11:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48191
IP address blocks: 94.198.72.0/21 maxlen: 21
94.230.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a1:f4:bf:b5:b7:42:2a:f7:35:4b:93:8b:5e:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
Validity
Not Before: Jan 1 11:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20f0d6ab62579259998a5573016fea2451ef7bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:17:e7:81:0c:d5:a3:b5:d7:98:6b:71:c0:
b1:88:54:84:92:aa:0e:44:38:c3:62:7e:af:4f:80:
c8:a0:d6:ee:8d:d2:e8:8d:51:85:e0:33:0d:fc:ee:
58:9f:aa:4b:6c:73:14:3e:43:6e:17:94:53:21:7c:
e1:83:a4:11:76:d6:4e:69:28:df:40:34:a4:90:f6:
6a:79:b0:9a:8e:6e:6d:99:b8:43:58:1b:32:db:01:
5f:41:c8:5d:3f:1d:14:ed:6c:6e:a2:ad:ba:94:15:
ae:ac:6b:d7:62:75:f1:f4:d9:e5:48:be:73:d0:35:
30:a8:30:82:96:4c:eb:13:01:06:2e:a5:07:45:38:
a6:33:4e:eb:49:b9:f0:cd:c1:bd:2e:ef:bc:c9:e2:
f6:59:16:36:c7:b2:77:a3:9e:41:29:c1:23:10:5f:
4f:dd:89:8a:bb:13:78:0d:a9:1e:f4:55:52:65:78:
ee:4a:43:85:fb:17:a1:c2:01:8f:cc:db:bb:c3:dd:
53:1f:31:37:a1:cb:67:08:4e:82:d2:97:1e:97:a8:
c3:82:cd:0b:3d:fb:20:fc:c8:20:10:86:70:2b:b5:
af:8b:0e:00:5d:0f:3a:0b:11:2b:0e:5d:2b:38:e5:
9e:d2:0f:2a:72:ed:50:f3:3e:bc:a5:91:e9:07:ea:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F0:D6:AB:62:57:92:59:99:8A:55:73:01:6F:EA:24:51:EF:7B:F3
X509v3 Authority Key Identifier:
keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/IPDWq2JXklmZilVzAW_qJFHve_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.198.72.0/21
94.230.72.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:8b:88:20:c1:40:e9:cb:bc:9d:8d:3a:fa:a6:5d:78:e9:b4:
90:96:08:aa:2d:19:3e:06:fb:8c:01:eb:08:04:81:2b:a5:4e:
ba:08:92:57:3c:a9:2a:7b:58:13:5e:a3:6b:45:7f:14:60:d6:
85:d5:0f:bd:b4:4a:94:5a:4e:af:86:76:c4:7d:04:d7:c4:ae:
54:a0:55:e9:a1:9b:b4:bf:e4:c1:63:c9:c1:7a:f4:e4:2c:37:
5b:78:4b:8d:72:49:f4:1c:3d:0d:fa:1d:de:4b:55:38:c8:6f:
72:ce:88:c8:e4:87:dd:81:c3:d4:79:9f:ae:35:ed:6a:40:ea:
e8:c0:0f:b6:74:28:ff:d5:c0:4d:ea:9d:31:ca:8a:69:53:66:
fd:7a:57:fc:97:61:aa:2e:ac:61:d7:51:21:da:06:65:51:d1:
1c:56:f3:fe:1c:5c:e8:f6:dd:2e:d0:82:2f:4a:0f:dc:82:8f:
e2:d8:23:f9:01:08:59:3c:04:64:a8:79:66:6d:a8:93:cf:7f:
09:4c:03:e1:a3:39:81:9c:9c:44:14:6d:16:d4:a2:09:47:79:
f8:c4:87:b2:13:50:42:29:65:20:94:a3:a9:25:b4:84:66:84:
82:2f:59:27:9d:64:3a:2d:f7:03:5a:2d:98:71:75:40:1c:63:
55:7f:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:30 2025 by rpki-client on console.sobornost.net