Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/C3nJIzqXqtfT9J07ejsBxjCr7Es.roa
File: C3nJIzqXqtfT9J07ejsBxjCr7Es.roa (raw, json)
Hash identifier: 0iPZreySqxS1TmgmvlfhSgIdLiwkUUv4lfeOkL5knpY=
Subject key identifier: 0B:79:C9:23:3A:97:AA:D7:D3:F4:9D:3B:7A:3B:01:C6:30:AB:EC:4B
Certificate issuer: /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial: 01941F8C4B2D1DD337603697EFF7537B6728
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/C3nJIzqXqtfT9J07ejsBxjCr7Es.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207949
IP address blocks: 194.104.90.0/23 maxlen: 24
194.104.92.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4b:2d:1d:d3:37:60:36:97:ef:f7:53:7b:67:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b79c9233a97aad7d3f49d3b7a3b01c630abec4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8b:56:dc:9e:78:14:fc:a9:c0:75:46:96:6c:
91:98:c4:0f:f5:47:d2:2e:ed:4f:97:c2:70:68:27:
4c:e8:0a:53:a4:3c:c1:72:ee:d5:c9:b2:e1:7a:91:
f0:e1:4e:12:ef:c4:e8:55:2e:b3:0c:e0:48:f4:6a:
71:81:08:6a:82:be:8d:58:bc:97:56:81:87:d3:87:
d9:a3:02:5a:89:4c:49:dc:b7:69:cd:4d:38:69:cd:
33:6b:39:24:59:40:ec:f1:18:d7:39:9e:c7:dd:d1:
90:dd:30:a7:f5:e6:77:a5:75:6f:2b:83:0a:95:21:
51:19:56:29:ac:43:18:74:98:1d:41:c2:45:f4:e5:
54:45:e7:72:0a:6c:4d:44:fb:ca:ea:50:5f:48:88:
4f:a5:43:88:d1:97:04:5e:27:30:30:e2:19:67:18:
38:e3:46:91:6d:35:c9:2a:3e:77:54:34:35:71:5c:
2f:ca:fb:c4:a7:ba:01:0a:c6:05:06:5b:ea:35:e6:
c2:ac:94:0b:53:21:ab:e6:33:c2:b0:55:75:94:53:
32:fe:ad:89:b8:9e:33:15:9c:79:3d:e4:dd:2a:39:
9c:e9:26:4d:ed:c6:b1:46:7c:ef:c1:92:ee:9b:b3:
d4:47:99:15:a0:be:20:dd:a0:72:6c:ae:fd:ba:73:
2a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:79:C9:23:3A:97:AA:D7:D3:F4:9D:3B:7A:3B:01:C6:30:AB:EC:4B
X509v3 Authority Key Identifier:
keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/C3nJIzqXqtfT9J07ejsBxjCr7Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.90.0-194.104.93.255
Signature Algorithm: sha256WithRSAEncryption
a8:64:ac:33:db:98:6a:b0:ff:93:33:82:39:07:2f:3b:82:d8:
25:2e:7b:4c:a1:b8:bd:2e:21:cb:48:ee:99:03:31:f5:ef:fd:
b4:d3:45:1e:12:6d:c6:68:91:f5:27:a4:ca:a9:48:40:a9:4a:
3d:ba:4b:5a:52:8f:89:84:fe:63:9e:b5:50:c6:57:c4:07:e7:
0f:ee:a1:57:65:09:ce:ce:5b:75:18:73:f6:b4:a9:7b:c7:48:
93:c1:eb:58:d7:bd:af:87:cc:ad:58:64:29:ef:b1:6f:5b:ba:
fb:f3:9d:bb:71:2c:80:87:3c:b2:a3:21:27:a2:31:ea:b8:a4:
3a:f2:6c:32:d3:5c:61:d2:c8:66:65:2a:0e:c7:63:b7:72:be:
63:03:a6:31:6a:1d:14:7f:55:e2:33:66:c2:2c:9b:50:3e:8e:
50:8c:60:96:7b:9e:d8:c5:30:33:63:f4:1b:42:ec:e6:23:a6:
0b:e4:ad:ce:37:c3:1b:a5:8c:66:e2:2e:72:a5:f0:2f:5f:09:
f2:f7:d7:70:dd:7f:ea:e0:26:a2:5d:1e:53:fe:a4:11:89:24:
55:db:4a:be:91:b0:27:ae:b9:98:fc:69:6e:c5:c9:14:89:d1:
d2:59:0c:d7:a7:83:87:29:86:23:ed:cf:e3:48:5c:78:9c:ce:
36:57:eb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:30:47 2025 by rpki-client