Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/ilgJzPlnOrxRT1H5Se_Pk5ZaQus.roa
File: ilgJzPlnOrxRT1H5Se_Pk5ZaQus.roa (raw, json)
Hash identifier: gddSmfXzSE+zRRvDg91L+kslc2bkb/L55bQHlq1eFfU=
Subject key identifier: 8A:58:09:CC:F9:67:3A:BC:51:4F:51:F9:49:EF:CF:93:96:5A:42:EB
Certificate issuer: /CN=336b69e2dd29bbe48946c4d58ac60eb23dff95c5
Certificate serial: 0B402022
Authority key identifier: 33:6B:69:E2:DD:29:BB:E4:89:46:C4:D5:8A:C6:0E:B2:3D:FF:95:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2tp4t0pu-SJRsTVisYOsj3_lcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/ilgJzPlnOrxRT1H5Se_Pk5ZaQus.roa
Signing time: Sat 01 Jan 2022 06:53:46 +0000
ROA not before: Sat 01 Jan 2022 06:53:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28022
IP address blocks: 94.124.96.0/22 maxlen: 24
2a06:a780::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 188751906 (0xb402022)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336b69e2dd29bbe48946c4d58ac60eb23dff95c5
Validity
Not Before: Jan 1 06:53:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a5809ccf9673abc514f51f949efcf93965a42eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:82:11:3f:48:17:f9:fb:07:43:80:98:98:
b0:95:d7:52:ba:5a:e8:9a:74:d1:a7:4b:48:f5:7f:
96:ef:63:28:18:ab:f0:1c:ae:63:5d:8d:74:bd:49:
96:2d:b9:29:22:4d:9d:66:6a:05:21:49:da:39:5b:
1b:7f:a1:1b:b6:c7:31:cf:17:e7:3e:d0:6f:63:76:
14:56:7a:54:1e:2f:db:e7:dc:29:d5:47:bc:7d:4b:
b4:15:bb:0e:83:35:88:74:37:bc:e0:34:0d:c3:ba:
42:fc:90:73:78:6e:14:81:b5:41:e9:0e:04:d2:44:
3c:d5:a7:ec:74:78:de:05:3f:3c:cf:4b:17:4c:40:
9e:e7:8a:8e:47:a1:2a:5f:89:eb:50:7d:f4:95:20:
c6:46:5c:63:23:4b:b2:40:38:9e:8c:81:96:bd:b5:
74:1e:e2:a9:a7:f7:78:55:37:56:40:30:e0:1d:0b:
32:55:9b:4b:7c:3a:9f:9b:b9:05:02:08:fb:67:64:
5a:fb:a1:3f:9a:5f:1b:4d:1d:b6:01:4e:5d:6c:81:
cc:ba:c8:04:c0:1b:51:94:f4:58:b4:8a:1c:71:97:
bf:16:92:aa:f1:b6:6c:14:ae:11:1f:8f:4c:37:1b:
5e:f2:19:06:13:d1:83:93:f4:0d:42:7e:4e:0a:29:
14:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:58:09:CC:F9:67:3A:BC:51:4F:51:F9:49:EF:CF:93:96:5A:42:EB
X509v3 Authority Key Identifier:
keyid:33:6B:69:E2:DD:29:BB:E4:89:46:C4:D5:8A:C6:0E:B2:3D:FF:95:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2tp4t0pu-SJRsTVisYOsj3_lcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/ilgJzPlnOrxRT1H5Se_Pk5ZaQus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7f41f1-05aa-4cae-b091-2b156fdf7243/1/M2tp4t0pu-SJRsTVisYOsj3_lcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.96.0/22
IPv6:
2a06:a780::/29
Signature Algorithm: sha256WithRSAEncryption
27:ae:24:70:eb:68:da:86:58:cb:db:91:bb:7f:67:47:73:b3:
e2:37:ec:34:f0:94:62:73:e1:23:c6:cf:e4:29:db:aa:6e:62:
8d:3b:04:5b:29:0e:d4:f7:4e:b4:2a:0e:b7:12:af:1f:76:c0:
13:95:a0:69:54:95:72:54:8d:13:48:a7:41:10:78:16:74:85:
16:ad:75:2b:99:05:e7:88:f1:1c:4b:5c:8e:22:2b:f1:3d:fe:
04:b8:df:44:e2:0b:76:10:b0:95:2f:7d:ad:9b:1f:b1:ba:ce:
75:90:8a:76:ea:ff:6b:30:1b:3e:0e:a4:a4:96:f6:15:0b:7a:
03:f3:8f:8e:12:92:01:fb:d3:53:89:78:09:d0:c4:18:59:2f:
5a:58:e8:56:68:ad:70:00:fc:1b:b8:a2:2d:91:f5:69:4b:32:
45:f0:93:1c:e9:73:d4:63:d4:5a:e9:6b:68:59:73:9a:e2:24:
a8:9e:37:86:d3:75:c2:be:25:42:48:91:39:46:b6:92:6d:ea:
da:df:35:2a:1d:d9:eb:99:b0:99:54:f1:ea:74:b6:76:21:2a:
72:0a:6e:2d:87:68:96:27:b2:a8:89:e7:03:95:cb:5c:b5:83:
b9:d1:d6:f7:13:01:2f:57:c4:5d:ae:2a:ee:92:30:ec:cf:ba:
d9:77:53:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:52:57 2025 by rpki-client