Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gRcfvRFhLIJ72nuXnN1y0Rp9Zk8.roa
File: gRcfvRFhLIJ72nuXnN1y0Rp9Zk8.roa (raw, json)
Hash identifier: hVWcEK4U9B1Ah/fzlOC6DmkVgrijLM/8xeU1B1FJfMw=
Subject key identifier: 81:17:1F:BD:11:61:2C:82:7B:DA:7B:97:9C:DD:72:D1:1A:7D:66:4F
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 01856ED4CC7A4624CDAC4079FF49894F83C8
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gRcfvRFhLIJ72nuXnN1y0Rp9Zk8.roa
Signing time: Sun 01 Jan 2023 19:35:17 +0000
ROA not before: Sun 01 Jan 2023 19:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43350
IP address blocks: 94.74.157.0/24 maxlen: 24
94.74.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:cc:7a:46:24:cd:ac:40:79:ff:49:89:4f:83:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 1 19:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81171fbd11612c827bda7b979cdd72d11a7d664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ac:5c:a3:4d:b6:de:2e:b5:31:56:28:ca:e7:
0a:88:87:df:88:00:46:ed:35:1d:2d:97:a0:01:ea:
07:b0:91:54:1d:b8:ea:02:cd:53:0a:08:8c:33:fa:
0d:43:07:85:b2:38:d5:b0:ca:fb:da:5e:5b:7d:25:
86:5a:7f:54:8b:96:0d:a3:3f:2c:bc:6f:14:1c:df:
a9:69:48:4b:57:4f:1a:d9:9a:b9:32:dd:45:79:25:
ab:d4:2b:25:30:e3:e0:75:6b:39:fc:fa:7b:ea:b2:
a5:bd:3f:df:f2:a8:42:03:da:b0:93:68:38:f3:08:
85:1a:0c:fd:d9:7e:b4:7b:9c:1f:68:8e:20:a9:24:
b2:ba:a9:62:13:11:ad:a4:c3:ae:d6:a2:0e:ec:e7:
75:e1:7c:6a:17:3e:c7:14:c3:5b:ce:18:37:c3:b5:
55:34:66:83:67:e3:65:01:aa:0d:3f:90:87:dc:69:
ef:17:5d:99:d4:08:56:6f:e7:71:29:b5:cf:98:b4:
ea:91:c8:91:a2:ba:8b:0f:d0:49:b2:50:ce:f1:ef:
0f:e4:51:1b:59:6a:08:50:ee:4b:f7:0e:71:00:4d:
5f:0f:ef:8a:05:46:fc:c6:9a:75:40:99:c8:68:d3:
f6:2a:fe:54:ff:c0:7a:46:30:f2:f1:2d:b4:03:eb:
e5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:17:1F:BD:11:61:2C:82:7B:DA:7B:97:9C:DD:72:D1:1A:7D:66:4F
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/gRcfvRFhLIJ72nuXnN1y0Rp9Zk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.74.157.0/24
94.74.171.0/24
Signature Algorithm: sha256WithRSAEncryption
75:3f:67:92:f8:97:5a:5b:85:7c:e5:ad:88:6a:91:71:da:3e:
2a:93:a6:1c:25:8b:99:56:90:04:97:a1:47:d2:51:20:6f:d8:
ef:4b:a8:c1:70:24:52:2c:e8:54:dd:68:15:af:c1:e6:4a:27:
ab:67:69:e6:e3:79:5c:81:fe:0c:c2:3a:2c:fc:b2:56:c7:ac:
25:88:6d:33:0e:ac:80:36:05:e7:29:03:df:88:52:6b:69:93:
e8:ea:55:51:8c:83:e4:e3:34:81:7b:15:92:b0:9c:60:0f:84:
15:9a:c5:47:c0:2a:86:60:d4:6f:d1:88:ce:9a:40:ef:24:29:
c5:db:10:95:24:57:1b:da:4b:38:2c:64:3e:e9:bc:e4:8f:7e:
78:08:e9:47:7c:93:7a:94:6e:8a:8f:44:68:28:cc:83:68:03:
ef:01:ee:ea:d2:83:84:89:5f:b4:db:a5:ab:c1:72:36:1f:16:
40:51:0c:78:04:04:a0:b1:a3:d1:44:86:f4:9a:c4:21:48:60:
10:07:21:c4:19:71:3b:5a:34:f5:dc:b9:c7:59:2c:ac:36:d0:
77:33:21:67:6b:15:cf:9d:15:47:c6:50:69:a5:ae:4b:c0:78:
0f:60:0a:22:13:3d:15:f1:c8:a9:5d:ff:6c:00:06:13:74:d6:
48:27:66:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:00 2025 by rpki-client