Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/COccjCH51IRHjTk-mTOcDzkFaE0.roa
File: COccjCH51IRHjTk-mTOcDzkFaE0.roa (raw, json)
Hash identifier: bI1J+fGI41cUgMEEB1zInVbQG3lN/yrve8e+geaDEN8=
Subject key identifier: 08:E7:1C:8C:21:F9:D4:84:47:8D:39:3E:99:33:9C:0F:39:05:68:4D
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 01836520234E78421FF9F26014CDD816C997
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/COccjCH51IRHjTk-mTOcDzkFaE0.roa
Signing time: Thu 22 Sep 2022 12:15:48 +0000
ROA not before: Thu 22 Sep 2022 12:15:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44477
IP address blocks: 94.131.98.0/24 maxlen: 24
94.131.102.0/24 maxlen: 24
94.131.105.0/24 maxlen: 24
94.131.106.0/24 maxlen: 24
94.131.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:65:20:23:4e:78:42:1f:f9:f2:60:14:cd:d8:16:c9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Sep 22 12:15:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08e71c8c21f9d484478d393e99339c0f3905684d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:ce:d5:86:c5:3a:67:e9:b6:c4:e4:af:31:
07:4e:39:af:0d:de:d4:3b:a3:0a:9d:f8:58:df:ee:
cd:f4:6d:0f:03:e9:11:09:d9:36:ed:c7:76:42:c4:
dd:4f:2a:93:3d:ee:06:42:94:ef:77:fc:a7:34:95:
80:80:83:ea:ba:f4:0e:85:61:f5:05:ab:06:86:bb:
e0:69:df:77:88:1a:4b:db:ac:b2:3b:b3:1a:26:5f:
20:8a:0a:99:cc:6b:d5:be:07:02:a5:e5:ae:d3:c3:
5c:d0:f1:35:7b:49:d6:42:7c:ec:23:02:19:f7:aa:
b8:f7:ff:6d:77:40:0e:d9:33:77:0e:88:a7:9e:aa:
07:f3:46:6e:23:3e:f1:f5:f0:eb:46:a5:3d:cb:1d:
1d:09:37:86:d7:04:f2:73:c9:cd:2d:b2:25:2d:da:
89:1a:28:fe:b1:1c:af:81:f7:ce:a7:ff:cb:84:12:
b3:99:f5:a7:04:43:fb:e7:87:03:e6:d5:03:b9:54:
6d:81:c9:2e:b2:b7:da:19:20:16:da:5e:9a:52:0e:
4d:eb:9a:08:3a:0b:a5:e6:a6:77:df:f0:87:e6:5c:
04:88:b6:7c:2d:ce:15:35:46:47:e4:97:58:3b:2d:
9a:4c:41:a6:18:79:c8:99:64:fb:2e:ef:b6:15:dd:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:1C:8C:21:F9:D4:84:47:8D:39:3E:99:33:9C:0F:39:05:68:4D
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/COccjCH51IRHjTk-mTOcDzkFaE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.98.0/24
94.131.102.0/24
94.131.105.0-94.131.107.255
Signature Algorithm: sha256WithRSAEncryption
3c:38:a9:f2:15:c0:54:72:46:e3:c0:15:6c:76:ef:74:ab:d1:
a7:3b:a0:f2:bd:4d:13:1a:cf:71:10:1c:48:f4:d8:fe:bc:28:
8d:a5:74:ff:0b:0e:a1:8c:69:b4:8e:09:88:8c:d4:b8:b4:6e:
e9:e0:06:50:fd:c7:81:7e:6e:c7:bb:3e:19:a1:08:dd:e0:44:
26:7a:60:c1:61:83:43:27:ab:44:e4:d1:15:21:7d:36:a1:f0:
bd:6f:81:c3:74:a7:71:10:1b:c7:75:38:10:29:6c:22:03:01:
14:76:0f:f3:e9:84:82:8c:04:32:a6:8c:1a:0a:29:df:ec:73:
cc:c9:d3:80:e0:fd:79:88:76:52:41:ac:6b:7b:16:46:54:ad:
57:a6:ce:45:78:15:44:f1:dd:87:f8:4c:f3:49:16:b1:f6:5d:
f7:37:c7:3e:20:a3:f0:14:63:3d:f7:1c:41:1c:50:e7:57:b4:
fb:b0:b3:4d:e9:9c:1f:12:19:cc:c1:31:90:98:2f:a2:e1:bb:
01:5a:10:17:8f:45:ca:d5:4e:35:e7:dd:de:13:58:8f:a2:0c:
df:a4:1a:5d:e8:49:6e:b2:65:82:77:8f:c9:b7:cd:34:e2:55:
f1:db:0b:df:81:2b:3d:c3:25:00:18:7d:af:e8:e1:8c:02:6c:
bc:c2:f7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:08 2025 by rpki-client