Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/fYkLyTrWkPYKdn7G-oFD3HI8Oqs.roa
File: fYkLyTrWkPYKdn7G-oFD3HI8Oqs.roa (raw, json)
Hash identifier: sVR0cmPAE9mla5lZDHWHG9KaxvGH0geT/h/pJvsebfM=
Subject key identifier: 7D:89:0B:C9:3A:D6:90:F6:0A:76:7E:C6:FA:81:43:DC:72:3C:3A:AB
Certificate issuer: /CN=133897fc7a963f14215d58e1824144ab19fd5810
Certificate serial: 018572E82CAA47D27448D82E6768157D9E5F
Authority key identifier: 13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/fYkLyTrWkPYKdn7G-oFD3HI8Oqs.roa
Signing time: Mon 02 Jan 2023 14:34:56 +0000
ROA not before: Mon 02 Jan 2023 14:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34073
IP address blocks: 94.100.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:2c:aa:47:d2:74:48:d8:2e:67:68:15:7d:9e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=133897fc7a963f14215d58e1824144ab19fd5810
Validity
Not Before: Jan 2 14:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d890bc93ad690f60a767ec6fa8143dc723c3aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fc:f5:05:bd:e2:93:47:75:72:7b:83:5f:15:
7e:ed:66:86:5f:b4:44:f6:d4:df:86:17:7b:9d:32:
43:ee:d1:cb:9f:f5:a5:07:50:dd:f5:ae:bb:f7:a2:
89:30:6c:69:4f:f0:d2:61:c4:31:fc:ce:44:2c:8e:
f9:0b:e1:7d:d5:7a:7d:6b:55:2b:01:30:00:29:e7:
86:0d:5e:9a:1b:65:58:ad:7f:fe:a1:2f:e4:c7:88:
be:0a:21:94:67:64:1b:29:58:6f:7b:d5:47:ca:07:
e9:bc:00:fa:c9:64:64:01:c9:8c:af:12:29:00:83:
74:79:36:6e:d1:b3:e3:1a:a9:ad:dd:7b:44:a5:40:
7d:f5:87:2a:0a:a6:a8:28:58:80:bf:71:d6:79:af:
56:e2:37:f2:74:05:14:24:57:77:13:3f:6f:0b:ad:
ec:0f:69:03:37:c6:7b:d6:b9:ba:80:a1:6b:23:5c:
49:0c:a0:5c:a9:b2:f2:e8:4a:db:83:c6:0f:f4:2a:
de:95:96:76:ac:52:a5:e0:34:fc:91:65:1e:98:84:
e5:91:6b:33:71:81:fd:3b:ca:4d:31:9b:51:02:87:
8d:dd:50:16:30:4b:72:15:1c:cc:3f:35:cb:66:fe:
e0:f1:f4:25:58:f2:c1:6e:2f:f1:c9:19:a5:f8:62:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:89:0B:C9:3A:D6:90:F6:0A:76:7E:C6:FA:81:43:DC:72:3C:3A:AB
X509v3 Authority Key Identifier:
keyid:13:38:97:FC:7A:96:3F:14:21:5D:58:E1:82:41:44:AB:19:FD:58:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EziX_HqWPxQhXVjhgkFEqxn9WBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/fYkLyTrWkPYKdn7G-oFD3HI8Oqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/8be4af-62be-4180-bec9-f2b87f38b9dd/1/EziX_HqWPxQhXVjhgkFEqxn9WBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.10.0/24
Signature Algorithm: sha256WithRSAEncryption
81:27:41:ef:f4:85:c1:2a:71:0a:52:77:0f:88:96:4b:89:52:
7a:87:f1:94:16:1a:f5:a3:e1:d1:9a:dc:d5:e6:0e:33:b0:e4:
ce:79:41:a0:23:f0:98:26:40:3c:b0:07:0e:d6:95:51:38:ee:
f7:2d:08:ea:ba:3b:e8:e6:72:80:a5:cd:c0:1c:61:1f:07:0d:
48:3a:dd:2d:71:8b:8b:7c:c8:da:ad:a2:6b:95:37:5f:25:57:
ac:62:1a:ae:6a:43:55:eb:81:84:4c:ae:88:94:ba:4c:ff:bd:
91:a7:72:b0:26:ff:64:d9:cc:7a:36:2a:1a:b3:c4:15:8f:f4:
85:05:d4:45:f3:28:2e:f5:d7:07:0c:3c:c5:e1:ff:29:ea:8f:
35:fc:fc:0e:ee:a6:e2:87:ff:7e:0c:9d:ca:f8:87:8a:89:fd:
98:f8:d2:82:df:4c:81:83:78:87:1f:f6:e7:28:22:fd:a4:e5:
3e:17:3e:d3:d8:2e:86:12:03:17:04:34:c7:e3:6c:8c:48:5b:
6f:18:e5:91:2d:da:f8:16:c0:7b:69:78:40:d9:33:6d:ce:2a:
c8:28:a3:33:cd:1d:74:3f:fb:78:ca:52:d1:59:b8:70:25:bb:
dc:4f:5f:88:e9:9d:25:0a:27:96:2f:bd:77:81:ff:ff:95:ec:
f2:69:c8:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6CyqR9J0SNguZ2gVfZ5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzg5N2ZjN2E5NjNmMTQyMTVkNThlMTgyNDE0NGFiMTlm
ZDU4MTAwHhcNMjMwMTAyMTQzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDg5MGJjOTNhZDY5MGY2MGE3NjdlYzZmYTgxNDNkYzcyM2MzYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/z1Bb3ik0d1cnuDXxV+7WaGX7RE
9tTfhhd7nTJD7tHLn/WlB1Dd9a6796KJMGxpT/DSYcQx/M5ELI75C+F91Xp9a1Ur
ATAAKeeGDV6aG2VYrX/+oS/kx4i+CiGUZ2QbKVhve9VHygfpvAD6yWRkAcmMrxIp
AIN0eTZu0bPjGqmt3XtEpUB99YcqCqaoKFiAv3HWea9W4jfydAUUJFd3Ez9vC63s
D2kDN8Z71rm6gKFrI1xJDKBcqbLy6Erbg8YP9CrelZZ2rFKl4DT8kWUemITlkWsz
cYH9O8pNMZtRAoeN3VAWMEtyFRzMPzXLZv7g8fQlWPLBbi/xyRml+GIUewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH2JC8k61pD2CnZ+xvqBQ9xyPDqrMB8GA1UdIwQY
MBaAFBM4l/x6lj8UIV1Y4YJBRKsZ/VgQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzkt
ZjJiODdmMzhiOWRkLzEvZllrTHlUcldrUFlLZG43Ry1vRkQzSEk4T3FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy84YmU0YWYtNjJiZS00MTgwLWJlYzktZjJiODdmMzhiOWRk
LzEvRXppWF9IcVdQeFFoWFZqaGdrRkVxeG45V0JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXmQKMA0G
CSqGSIb3DQEBCwUAA4IBAQCBJ0Hv9IXBKnEKUncPiJZLiVJ6h/GUFhr1o+HRmtzV
5g4zsOTOeUGgI/CYJkA8sAcO1pVROO73LQjqujvo5nKApc3AHGEfBw1IOt0tcYuL
fMjaraJrlTdfJVesYhquakNV64GETK6IlLpM/72Rp3KwJv9k2cx6Nioas8QVj/SF
BdRF8ygu9dcHDDzF4f8p6o81/PwO7qbih/9+DJ3K+IeKif2Y+NKC30yBg3iHH/bn
KCL9pOU+Fz7T2C6GEgMXBDTH42yMSFtvGOWRLdr4FsB7aXhA2TNtzirIKKMzzR10
P/t4ylLRWbhwJbvcT1+I6Z0lCieWL713gf//lezyacig
-----END CERTIFICATE-----
Generated at Wed Mar 12 13:06:04 2025 by rpki-client