Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa
File: 9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa (raw, json)
Hash identifier: a0dVE6vpgZW3UUjOxu/nfSbGxvoPx4y2RaBLkZkeRbc=
Subject key identifier: F7:3F:5D:2A:99:F1:E8:4C:D4:70:75:46:35:FF:EE:1A:95:70:F4:EB
Certificate issuer: /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial: 0194266B5DD72E55D23A688EE00A4B27D054
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa
Signing time: Thu 02 Jan 2025 09:49:18 +0000
ROA not before: Thu 02 Jan 2025 09:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 194.180.26.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:5d:d7:2e:55:d2:3a:68:8e:e0:0a:4b:27:d0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Validity
Not Before: Jan 2 09:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f73f5d2a99f1e84cd470754635ffee1a9570f4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:3a:18:6e:46:cf:66:77:48:4f:fa:0c:c0:
90:fe:b0:44:1e:ad:f2:89:dc:6a:cf:cd:b8:18:71:
e6:d7:58:27:44:f0:03:d3:ac:ab:08:7e:fe:60:7c:
95:63:52:95:8d:3e:bb:63:47:ba:24:e0:e1:43:16:
72:1a:eb:d4:87:54:13:6a:21:ba:50:88:5d:c9:69:
87:10:da:d0:c4:17:1e:27:9e:20:0f:f2:66:43:d0:
4e:4c:6d:ac:38:a0:42:b1:ef:55:b3:03:08:1a:e2:
0c:b1:48:40:8c:e2:a0:be:b3:84:61:11:82:11:4c:
32:f9:42:83:64:43:8f:51:79:7a:77:28:41:1e:fa:
ee:a2:b4:d6:76:07:14:2d:cb:3c:e0:91:db:50:a3:
e9:1b:01:d2:e9:52:8f:de:c3:27:7c:b5:25:ae:32:
15:6f:cd:26:2d:e2:c1:83:05:58:41:f0:60:0f:0f:
66:d2:5b:9f:f7:3b:06:e6:b8:c6:9b:85:bb:a2:18:
26:89:6a:46:1c:88:13:11:84:c5:12:28:6e:b6:fc:
c0:8b:15:11:0b:10:81:ff:b3:79:70:2c:34:04:41:
bf:a6:ec:c5:73:c3:ad:f8:8e:c5:30:a1:fe:47:69:
e3:b1:33:b3:ec:8b:fb:20:3a:c3:ec:a6:6c:10:5b:
34:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3F:5D:2A:99:F1:E8:4C:D4:70:75:46:35:FF:EE:1A:95:70:F4:EB
X509v3 Authority Key Identifier:
keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/9z9dKpnx6EzUcHVGNf_uGpVw9Os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.26.0/23
Signature Algorithm: sha256WithRSAEncryption
96:39:14:06:f4:a5:34:c0:60:3d:79:8b:c8:9c:01:26:c0:fa:
1e:a4:03:19:85:c4:c1:d6:55:e9:9c:c5:e0:82:07:ea:7e:b1:
44:0a:fe:62:2d:71:6c:92:83:40:e2:f3:6b:9a:9a:3e:fe:1b:
26:1a:72:26:43:4c:f9:fb:21:0b:af:ab:ff:7a:a0:17:0a:f0:
1c:1a:ad:97:56:6e:38:33:80:61:81:57:d6:99:04:fd:14:d3:
62:50:13:7f:33:f9:c6:59:c7:31:0c:0a:f5:58:40:13:32:58:
b2:0b:75:6b:1b:79:cd:b4:e5:4f:81:48:34:3e:05:9c:57:32:
8d:e2:92:53:e8:42:bd:b9:81:a5:fc:c2:f5:87:c1:c6:cc:bf:
db:14:85:25:03:6f:9c:b2:fb:c1:c4:cb:0f:92:fe:fd:cf:fb:
1f:77:90:90:25:09:98:fc:06:47:c0:ba:b2:c4:f7:ce:8b:33:
72:1e:4f:32:04:54:b1:ca:34:fd:0a:fd:49:a1:da:1b:83:f6:
b3:48:16:07:8a:5a:52:5e:72:15:bd:6a:4d:81:16:4e:6a:33:
39:23:4e:da:d5:1b:05:9d:0f:7f:c5:74:0d:1a:d2:00:d9:30:
a1:62:39:ee:9e:e7:6b:48:83:af:aa:58:0f:12:f6:ad:07:70:
15:63:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:30 2025 by rpki-client