Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/IN5AVHB1V9hpN4aIZjW0kfX4dpw.roa
File: IN5AVHB1V9hpN4aIZjW0kfX4dpw.roa (raw, json)
Hash identifier: fqknqVwA3ho/+VlhFWW64+w4ur4rDJniRUnzXflm3Bo=
Subject key identifier: 20:DE:40:54:70:75:57:D8:69:37:86:88:66:35:B4:91:F5:F8:76:9C
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E8363A9FA7E1EC00FD4113539A0F98
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/IN5AVHB1V9hpN4aIZjW0kfX4dpw.roa
Signing time: Mon 02 Jan 2023 14:34:58 +0000
ROA not before: Mon 02 Jan 2023 14:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48496
IP address blocks: 94.100.2.0/24 maxlen: 24
94.100.6.0/24 maxlen: 24
94.100.15.0/24 maxlen: 24
94.100.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:36:3a:9f:a7:e1:ec:00:fd:41:13:53:9a:0f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20de4054707557d8693786886635b491f5f8769c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:f8:13:ac:9c:b7:42:81:d9:3f:39:cc:c3:
5c:84:72:b9:c7:a4:49:b4:72:0a:da:50:43:79:3b:
c7:ee:a0:48:1a:02:aa:8b:e9:8a:66:56:04:35:99:
fc:55:a1:00:8d:5d:5a:e5:cb:53:bf:ab:5e:03:5b:
c0:c5:e8:af:9a:be:1d:e8:35:ba:34:43:2d:ad:db:
a1:1c:52:d2:09:99:2e:3f:dc:06:3f:67:00:67:84:
47:a0:ab:3d:bd:dc:45:f0:bf:44:41:3c:a2:f1:9b:
cc:ee:5a:ac:d3:2f:11:91:7d:72:3c:e0:22:81:fb:
15:7c:2b:14:1a:19:c3:90:ef:0f:43:41:28:28:4a:
7b:0a:a0:bd:36:e8:06:21:c3:d5:27:6c:ba:d7:35:
db:fa:37:2c:7e:05:5a:a6:a5:93:2a:a3:b7:31:1f:
81:6a:c1:40:82:06:ec:a1:08:62:df:77:8d:87:56:
69:ce:87:59:ca:fe:c8:af:c4:5b:07:f7:93:e2:5d:
fc:34:ce:12:4f:36:02:c7:96:b2:81:1d:a6:16:51:
24:ef:67:56:7a:7c:c2:5b:25:98:94:52:8f:c1:3e:
38:93:f1:cd:46:a2:c6:7e:bd:21:b5:f9:b5:ef:76:
24:f2:f7:6a:86:df:c1:07:76:e5:9d:40:49:73:a6:
b2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DE:40:54:70:75:57:D8:69:37:86:88:66:35:B4:91:F5:F8:76:9C
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/IN5AVHB1V9hpN4aIZjW0kfX4dpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.2.0/24
94.100.6.0/24
94.100.13.0/24
94.100.15.0/24
Signature Algorithm: sha256WithRSAEncryption
08:6e:49:97:bd:29:28:cb:1a:57:04:28:4b:66:26:7f:37:1a:
8f:20:c0:61:9e:cb:dc:af:f5:b4:fe:e9:40:f9:2d:d3:03:2f:
e2:42:59:be:97:ea:41:d4:5e:c0:a9:5a:36:3e:15:b8:3d:e1:
fa:de:93:52:51:42:88:ed:8f:56:04:6e:d3:05:e8:cf:67:c6:
ea:d3:6a:c6:c5:07:08:a5:e9:3d:d2:16:bf:f2:4c:c2:c4:cb:
3d:9c:b4:6f:6a:c8:7f:5b:77:ea:52:de:48:ba:2a:54:02:48:
89:9c:d8:eb:e9:b8:99:5b:22:48:99:44:46:5a:89:6d:ac:b6:
9f:0c:56:b2:18:38:9c:25:ba:53:f0:8a:de:dc:a7:db:d8:83:
ab:f9:b5:32:97:4c:c1:53:43:17:35:9e:f0:a8:34:3d:54:09:
3e:69:a3:6a:8a:4e:11:b5:91:bb:7d:38:e5:01:19:16:5a:53:
c6:2c:02:9e:7e:fa:0a:da:8a:2b:28:6d:05:6c:41:32:10:6f:
b5:4a:98:8b:fe:01:09:97:4e:92:05:ba:33:03:15:ac:20:9a:
53:17:c8:8a:82:00:08:0e:9f:5c:b2:d0:c1:c3:7f:08:0a:d3:
45:60:30:b2:7f:ec:d7:a6:da:ef:8a:a5:91:3f:20:e4:b5:56:
62:b3:33:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:48:35 2025 by rpki-client