Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/kAl6NHywvV8RbwDET-9j2Zyzl-Q.roa
File: kAl6NHywvV8RbwDET-9j2Zyzl-Q.roa (raw, json)
Hash identifier: fDZx49YXgBMIvsyX1Q8GsRyWG+AC+cVp8yVCHZqnnv4=
Subject key identifier: 90:09:7A:34:7C:B0:BD:5F:11:6F:00:C4:4F:EF:63:D9:9C:B3:97:E4
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0188FD3E46E7F9470ECA1ECF9B8D5898932E
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/kAl6NHywvV8RbwDET-9j2Zyzl-Q.roa
Signing time: Tue 27 Jun 2023 14:24:57 +0000
ROA not before: Tue 27 Jun 2023 14:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198636
IP address blocks: 94.131.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:3e:46:e7:f9:47:0e:ca:1e:cf:9b:8d:58:98:93:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jun 27 14:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90097a347cb0bd5f116f00c44fef63d99cb397e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:92:c2:b7:67:11:e9:8e:fb:c6:f9:af:9a:ed:
2e:ac:cd:0e:68:ba:76:de:45:15:f5:99:cb:e8:67:
76:cb:1f:02:63:b6:20:a4:65:e9:0f:6a:6e:b0:03:
8c:10:8d:4a:34:ca:ed:c8:0b:d8:5f:8b:f9:74:32:
48:13:24:46:7f:b0:93:46:83:d9:20:5f:ce:8d:9a:
d9:87:f1:c5:0d:67:dd:76:93:34:bb:8e:50:ef:49:
43:a0:9f:8b:ae:4b:26:3c:c8:5b:96:c0:d8:18:f7:
4e:20:1a:fa:a3:46:38:19:0b:f8:bd:db:20:81:12:
f9:10:e5:8e:12:c9:11:70:4b:8a:db:fd:0d:c2:be:
db:ea:d5:47:1b:18:13:82:cd:05:97:2a:d7:bf:27:
d6:d8:e2:c9:b8:1b:27:fc:3e:47:6f:6c:1d:02:b3:
60:6b:62:27:78:b3:c5:00:f9:71:aa:b0:0b:b3:ca:
fb:e1:3c:c9:e2:6a:07:20:6a:8b:ae:9e:5d:19:3c:
7c:fb:de:53:8b:cc:46:e1:dc:a1:65:b5:46:cd:19:
8e:0f:dd:9e:36:1d:20:56:8d:65:12:07:57:cd:31:
a8:91:89:92:fd:47:ca:28:2e:ef:6b:48:e2:3a:97:
88:ff:c4:74:be:6e:b8:99:16:fa:89:9d:89:71:94:
ce:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:7A:34:7C:B0:BD:5F:11:6F:00:C4:4F:EF:63:D9:9C:B3:97:E4
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/kAl6NHywvV8RbwDET-9j2Zyzl-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.28.0/22
Signature Algorithm: sha256WithRSAEncryption
24:a7:1e:e2:0e:4d:a0:be:99:b7:a9:6e:a5:f7:91:27:ab:cc:
1a:17:5a:05:6f:8e:02:f3:1e:bb:89:b8:f8:20:9a:f2:4a:8a:
85:a8:dd:af:07:b3:c2:bc:e9:b5:ca:6b:96:7f:44:cf:35:9a:
61:9d:6f:16:71:61:61:b5:45:5c:31:7e:ed:04:c3:33:2a:e9:
15:51:53:4c:4e:fa:04:76:b9:f4:fa:04:b4:d1:8c:9e:43:86:
8b:d5:08:11:27:3e:7a:8f:be:9c:a9:4f:89:4c:29:47:88:bd:
b2:47:60:81:44:fb:31:40:e5:b0:ab:18:58:2c:3d:dd:f4:09:
e3:83:6d:7a:08:69:5a:5c:52:24:dc:07:4d:ff:d1:2f:ec:a9:
3a:44:c1:b1:a0:ad:3e:4c:a1:ad:d2:d6:bf:ee:4e:49:0a:45:
81:69:73:f3:a6:3c:ed:96:7f:e4:ec:f5:40:b3:69:1f:53:62:
0d:4c:65:a5:42:58:93:44:72:41:41:36:17:de:19:47:a9:fa:
a8:b4:02:57:bf:54:07:a6:ea:34:49:43:67:c3:6c:04:9b:67:
b7:1f:81:ec:bf:0f:ce:bc:94:b1:61:a2:f7:f3:16:48:7e:2f:
35:35:26:c2:39:3d:e1:58:23:f6:8c:0f:1f:bd:c4:6c:be:2d:
54:0f:57:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:38:26 2025 by rpki-client