Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa
File: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (raw, json)
Hash identifier: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=
Subject key identifier: D1:47:93:E6:FF:64:02:88:38:57:2F:FD:77:A4:FE:2F:7F:2E:07:64
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01941FFA49D0C6A9629D5BE322C02448C00A
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35831
IP address blocks: 84.207.248.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:49:d0:c6:a9:62:9d:5b:e3:22:c0:24:48:c0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d14793e6ff64028838572ffd77a4fe2f7f2e0764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2f:5d:ba:48:9a:48:10:e4:33:ab:1c:de:09:
e8:62:ec:52:91:ab:a1:0c:0a:dd:84:12:45:ad:a4:
e5:cd:dc:ce:4e:a4:93:f4:83:6f:31:04:72:71:27:
ee:0b:c5:79:77:e4:74:0e:87:ff:e1:4e:b5:10:2a:
1f:e0:ac:ab:18:fe:f9:ad:84:12:0f:3d:05:c9:8e:
55:18:8a:7b:db:24:1d:9d:0c:3d:ed:b1:e0:7b:78:
92:0a:84:18:fc:4a:78:e5:49:58:17:f9:4c:29:c6:
91:59:41:9d:45:fa:e5:31:b0:8c:47:98:28:ef:47:
c8:5d:e1:44:28:14:d4:e6:b0:38:2f:33:73:21:3b:
eb:7d:0c:49:c0:59:c2:87:9a:9a:13:23:d3:93:0b:
dd:dd:85:ea:06:05:e7:1f:22:f1:df:ba:7f:2a:e5:
0c:07:ad:9e:63:53:64:d6:25:fa:64:8a:ce:6b:b2:
0d:2b:35:18:3f:b7:41:54:a5:77:13:c0:56:56:58:
4b:17:7b:70:e6:1c:8a:7e:f8:e0:c4:d1:6e:2c:ee:
27:85:22:48:5d:b1:15:a4:51:1f:b0:03:16:fc:b6:
34:dd:ab:23:12:f6:34:67:71:12:23:a9:09:b1:66:
d0:0e:f9:11:65:b9:c5:05:c5:ba:41:0e:3e:29:0c:
89:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:47:93:E6:FF:64:02:88:38:57:2F:FD:77:A4:FE:2F:7F:2E:07:64
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.207.248.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:d0:15:8e:44:b2:0e:17:4a:f8:a8:e3:b6:5a:5e:f6:a9:59:
11:fe:06:52:ad:0b:33:8f:68:ca:cb:ca:86:0b:e9:45:81:b3:
b1:e8:09:8d:98:f9:08:27:4e:e9:47:cf:2e:e5:d3:8c:18:4a:
4c:9c:33:da:4e:b4:33:a4:43:d1:2d:09:22:2b:47:52:9c:5a:
d6:39:fe:c2:cc:da:da:3b:ab:da:1e:59:58:28:4f:a9:d0:99:
5a:6d:b5:d6:5a:1f:1a:54:4a:50:13:7d:3a:5c:e9:38:42:eb:
93:b1:ac:0c:dc:8e:ad:7e:d8:19:23:d5:30:03:3a:14:47:c9:
44:ec:24:a8:7e:f0:d7:fc:2e:b5:01:d0:e4:38:03:84:50:f0:
ac:c5:8b:30:68:bd:35:48:b1:27:d2:28:9d:ce:64:0f:e2:28:
ff:4e:7a:87:c2:c0:58:27:b3:10:30:6d:2e:79:58:b8:ae:c9:
f9:6c:2e:35:b1:32:72:46:a1:48:72:29:83:50:6d:f7:4e:58:
72:b3:f4:49:bd:5e:ab:29:55:23:aa:92:24:e8:0d:aa:e1:1f:
2f:45:50:69:be:e7:22:7f:84:56:71:33:e9:d1:dd:b8:48:68:
0c:55:ff:53:a4:e2:07:db:63:c4:86:b7:47:1b:fd:43:51:29:
72:66:56:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 23:42:12 2025 by rpki-client