Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/3BBuPaGFviQQ2MH2fS3r9TpYEzQ.roa
File: 3BBuPaGFviQQ2MH2fS3r9TpYEzQ.roa (raw, json)
Hash identifier: SIQeoiQ/zOGxsz1VgCEAvwJlr7lWYjQFmolQzlcKZkE=
Subject key identifier: DC:10:6E:3D:A1:85:BE:24:10:D8:C1:F6:7D:2D:EB:F5:3A:58:13:34
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E8408BA291D3265A384CEC3EBAC418
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/3BBuPaGFviQQ2MH2fS3r9TpYEzQ.roa
Signing time: Mon 02 Jan 2023 14:35:01 +0000
ROA not before: Mon 02 Jan 2023 14:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212197
IP address blocks: 94.100.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:40:8b:a2:91:d3:26:5a:38:4c:ec:3e:ba:c4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc106e3da185be2410d8c1f67d2debf53a581334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:06:89:ac:27:dd:29:a9:65:11:88:25:ae:
7a:83:e1:b0:cf:ac:46:21:fa:e1:bf:3d:d1:25:73:
67:e3:2b:f5:ec:f7:6c:3b:e1:4e:79:fc:e1:69:2b:
11:fc:9d:fe:5c:b3:63:b0:e1:9f:ab:2d:a4:27:f6:
67:db:12:d7:bf:67:02:b1:ae:e8:f1:e0:17:8b:77:
f8:0a:5b:ec:37:37:54:ad:b5:19:99:45:6d:ae:e0:
d2:11:e0:fc:c4:f1:8f:75:70:93:45:a1:29:17:1a:
83:d0:8b:8f:b4:e3:33:1f:81:d3:68:00:93:9e:44:
f4:85:8e:8d:2e:6c:37:ec:89:7e:1b:b3:51:73:34:
d2:ea:0d:8d:be:38:cd:1b:5e:87:e0:33:9f:b3:ca:
49:74:c5:24:a1:a7:1e:a2:7b:f6:49:d0:a8:f2:67:
78:cb:9b:2a:69:ea:c2:ad:18:08:cf:c6:2d:4e:6f:
7c:3a:9a:c3:28:c1:9d:7e:93:b5:f8:28:b7:84:24:
6f:bf:2d:41:4c:34:3b:34:65:b5:41:32:32:d0:22:
85:33:2d:8e:56:3b:3b:a1:f0:2b:cb:a8:27:58:ea:
b2:dd:dd:9a:6b:4a:cd:24:aa:30:4d:26:ae:6f:a9:
bc:32:f3:99:84:5a:c9:7e:94:38:91:2c:14:67:2e:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:10:6E:3D:A1:85:BE:24:10:D8:C1:F6:7D:2D:EB:F5:3A:58:13:34
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/3BBuPaGFviQQ2MH2fS3r9TpYEzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.5.0/24
Signature Algorithm: sha256WithRSAEncryption
45:8e:e6:29:77:ce:87:80:b1:b8:27:45:f7:d7:20:1d:40:84:
56:27:0a:8f:3a:a6:fe:ac:4d:ed:d1:c2:1f:b9:0a:33:b9:0f:
67:7d:09:75:f7:3a:58:86:03:c7:c1:b1:bb:a9:1c:4a:2d:a1:
01:a6:83:3b:7d:a0:aa:72:72:c5:ad:8d:fb:c9:be:39:a2:ac:
73:43:30:8b:57:0a:24:44:72:65:2a:fc:ae:1e:61:dc:8e:fe:
83:90:6d:83:65:cb:dc:8d:cd:9b:7b:3a:c2:d9:65:52:09:8f:
3b:e1:fb:27:27:74:1e:88:8a:83:99:fd:d1:a7:0b:f5:72:43:
3a:59:59:43:47:a0:c9:ba:7b:6c:97:4a:cb:72:d0:0e:c0:23:
59:86:2b:77:c4:64:ab:37:99:36:60:02:93:92:ff:12:7d:4d:
73:9b:a8:1e:fa:2b:60:22:0e:b6:42:04:ab:13:d2:03:69:b0:
a7:f5:0b:e7:f3:60:0c:61:9b:ce:d4:ce:0c:23:b4:15:8d:92:
ae:18:8c:22:e7:fc:96:c2:35:1b:33:2e:9a:00:f9:fa:a8:8a:
8c:87:0a:35:5b:83:5b:c1:ad:2c:4b:2b:59:84:ac:cd:41:d7:
33:4e:b0:38:5d:ab:bd:e6:1f:ff:66:b3:38:c4:a6:95:0c:be:
83:7e:7c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:03:35 2025 by rpki-client