Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/czIaY-XlRgarzp_wkQpyud-0B3Q.roa
File: czIaY-XlRgarzp_wkQpyud-0B3Q.roa (raw, json)
Hash identifier: EBDoWNZ6Ipi5eiNG8o5AxDtIX+fxJxHhZxrkTNu67Lo=
Subject key identifier: 73:32:1A:63:E5:E5:46:06:AB:CE:9F:F0:91:0A:72:B9:DF:B4:07:74
Certificate issuer: /CN=33980d41e32a5616382e906840264945af02d67e
Certificate serial: 016B5B45
Authority key identifier: 33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/czIaY-XlRgarzp_wkQpyud-0B3Q.roa
Signing time: Wed 02 Mar 2022 06:54:24 +0000
ROA not before: Wed 02 Mar 2022 06:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 94.103.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23812933 (0x16b5b45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33980d41e32a5616382e906840264945af02d67e
Validity
Not Before: Mar 2 06:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73321a63e5e54606abce9ff0910a72b9dfb40774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8b:72:b8:31:da:3e:f1:9c:54:72:1b:84:26:
69:ae:79:84:ff:37:47:ec:62:ee:d3:ab:80:58:ff:
16:9b:64:16:e5:5c:7e:3b:32:bd:60:2f:43:c2:dc:
b5:b3:57:3f:ab:fc:4f:d1:65:95:3e:35:4b:fe:93:
94:1b:13:1b:af:27:dd:9a:db:7c:5e:92:65:2b:ab:
31:67:b6:9a:2f:5d:7d:04:e1:ee:bb:31:c3:25:a6:
dc:2c:97:27:b2:ac:26:83:92:ab:14:91:7f:fa:bf:
fc:82:13:30:36:d5:c1:37:8a:13:f8:e7:38:8d:e4:
91:86:27:91:87:55:25:af:a8:67:3b:52:16:5a:34:
27:a6:52:96:be:45:aa:97:7c:f1:fa:12:2f:6b:eb:
e4:4a:a7:cd:27:ce:0d:2a:13:09:20:c2:be:80:6a:
a7:8b:5f:f8:d5:f5:05:fb:fe:a8:19:db:1f:0b:e0:
15:e0:86:0b:36:6e:ee:84:18:f2:f5:e0:95:b5:c0:
ff:06:a5:1f:3b:8d:46:6f:27:10:da:67:5e:50:69:
6e:1a:a4:9a:68:cc:1e:5a:9b:3d:ed:5a:91:5f:cd:
9f:04:2b:1c:64:b0:f5:81:c8:bd:f1:71:ee:e7:4e:
c3:24:b0:64:3a:9f:a1:a6:e5:48:5b:26:48:3c:46:
a5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:32:1A:63:E5:E5:46:06:AB:CE:9F:F0:91:0A:72:B9:DF:B4:07:74
X509v3 Authority Key Identifier:
keyid:33:98:0D:41:E3:2A:56:16:38:2E:90:68:40:26:49:45:AF:02:D6:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5gNQeMqVhY4LpBoQCZJRa8C1n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/czIaY-XlRgarzp_wkQpyud-0B3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5a3374-220d-4dc6-8900-2a3ffb7a218a/1/M5gNQeMqVhY4LpBoQCZJRa8C1n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.177.0/24
Signature Algorithm: sha256WithRSAEncryption
78:69:d5:e1:41:8b:15:2f:f8:d1:ad:4c:eb:5e:82:28:8b:eb:
ce:17:35:10:81:91:be:af:fc:f6:2c:44:6d:e7:88:61:c5:3b:
fe:0e:cd:c9:29:f0:f4:2a:b8:16:ff:f0:e1:56:25:b9:3a:0d:
19:10:3a:23:ef:38:0c:d9:90:56:d1:db:7d:d8:b0:1a:0d:d0:
56:0f:ac:de:22:97:d1:74:8d:2d:c6:11:87:89:72:a1:38:01:
b9:96:0e:d5:2e:e2:e8:f3:53:98:ac:16:81:4d:92:3c:58:49:
7b:28:83:25:f1:48:89:c2:3b:50:bc:6e:1c:12:a2:a3:e5:3a:
79:48:15:0f:02:19:ab:48:43:1d:43:a7:15:a8:c1:8b:75:62:
82:7d:65:c7:85:e0:88:4c:31:f4:3d:44:e7:5d:7f:bb:4c:2d:
f9:73:a3:4d:90:e6:55:bd:70:15:e4:c1:46:40:4c:20:11:8d:
61:22:0d:c2:4d:fe:b5:37:9e:d3:ae:c8:24:07:70:7c:09:58:
77:48:e4:7a:d5:b5:15:05:4b:1b:c8:0d:73:fa:dc:b6:62:0b:
63:45:7d:14:a4:ee:21:94:e4:76:e7:07:75:56:f0:6a:b1:49:
0d:63:8d:dc:58:3e:06:e2:ce:a7:58:82:65:4e:81:2d:60:29:
b4:2c:ca:1d
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAWtbRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
Mzk4MGQ0MWUzMmE1NjE2MzgyZTkwNjg0MDI2NDk0NWFmMDJkNjdlMB4XDTIyMDMw
MjA2NTQyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNzMzMjFhNjNlNWU1
NDYwNmFiY2U5ZmYwOTEwYTcyYjlkZmI0MDc3NDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKqLcrgx2j7xnFRyG4Qmaa55hP83R+xi7tOrgFj/FptkFuVc
fjsyvWAvQ8LctbNXP6v8T9FllT41S/6TlBsTG68n3ZrbfF6SZSurMWe2mi9dfQTh
7rsxwyWm3CyXJ7KsJoOSqxSRf/q//IITMDbVwTeKE/jnOI3kkYYnkYdVJa+oZztS
Flo0J6ZSlr5Fqpd88foSL2vr5EqnzSfODSoTCSDCvoBqp4tf+NX1Bfv+qBnbHwvg
FeCGCzZu7oQY8vXglbXA/walHzuNRm8nENpnXlBpbhqkmmjMHlqbPe1akV/NnwQr
HGSw9YHIvfFx7udOwySwZDqfoablSFsmSDxGpWMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRzMhpj5eVGBqvOn/CRCnK537QHdDAfBgNVHSMEGDAWgBQzmA1B4ypWFjgu
kGhAJklFrwLWfjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L001Z05RZU1xVmhZNExwQm9RQ1pKUmE4QzFuNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjAvNWEzMzc0LTIyMGQtNGRjNi04OTAwLTJhM2ZmYjdhMjE4YS8x
L2N6SWFZLVhsUmdhcnpwX3drUXB5dWQtMEIzUS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAv
NWEzMzc0LTIyMGQtNGRjNi04OTAwLTJhM2ZmYjdhMjE4YS8xL001Z05RZU1xVmhZ
NExwQm9RQ1pKUmE4QzFuNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF5nsTANBgkqhkiG9w0BAQsFAAOC
AQEAeGnV4UGLFS/40a1M616CKIvrzhc1EIGRvq/89ixEbeeIYcU7/g7NySnw9Cq4
Fv/w4VYluToNGRA6I+84DNmQVtHbfdiwGg3QVg+s3iKX0XSNLcYRh4lyoTgBuZYO
1S7i6PNTmKwWgU2SPFhJeyiDJfFIicI7ULxuHBKio+U6eUgVDwIZq0hDHUOnFajB
i3Vign1lx4XgiEwx9D1E511/u0wt+XOjTZDmVb1wFeTBRkBMIBGNYSINwk3+tTee
067IJAdwfAlYd0jketW1FQVLG8gNc/rctmILY0V9FKTuIZTkducHdVbwarFJDWON
3Fg+BuLOp1iCZU6BLWAptCzKHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:07 2024 by rpki-client on console-fra.rpki-client.org