Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/8HDa5hwkZUBQWaNWyQgy9jJcPfA.roa
File: 8HDa5hwkZUBQWaNWyQgy9jJcPfA.roa (raw, json)
Hash identifier: 1qS1HLNckumEjn566uaRaiMW0EcvlARzxeomCNyRsUE=
Subject key identifier: F0:70:DA:E6:1C:24:65:40:50:59:A3:56:C9:08:32:F6:32:5C:3D:F0
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0185706727BB8B7E290D7FCC5CCCF7B98B77
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/8HDa5hwkZUBQWaNWyQgy9jJcPfA.roa
Signing time: Mon 02 Jan 2023 02:54:46 +0000
ROA not before: Mon 02 Jan 2023 02:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:27:bb:8b:7e:29:0d:7f:cc:5c:cc:f7:b9:8b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 02:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f070dae61c2465405059a356c90832f6325c3df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b2:5f:53:6a:b5:45:49:90:b4:58:02:d6:e2:
4c:ee:d7:53:25:0c:46:b1:db:89:16:07:0b:29:02:
cd:b8:b2:59:78:a7:69:64:63:12:84:7d:e6:a3:f5:
0d:a8:29:c5:39:1a:d5:c3:48:f0:ed:42:b3:80:54:
ac:89:2e:3d:21:7b:1c:9e:86:c8:b7:57:4e:8b:51:
f1:ab:17:53:3b:3e:9c:6b:bc:1d:12:4c:10:0b:06:
33:d5:18:f5:b8:0c:10:c8:1e:24:29:89:6f:19:09:
89:72:78:fb:5d:98:da:11:39:15:91:a3:b5:f6:50:
ae:b0:85:52:9c:4a:6d:30:9c:89:6f:46:20:d9:a1:
de:26:7f:19:85:89:fd:16:86:cc:11:05:53:6f:8a:
de:fa:1b:65:66:ea:a1:08:b8:b7:46:89:e3:e0:b2:
95:15:b1:2e:34:93:84:16:e7:40:d4:f1:24:cc:dc:
11:3a:95:a9:4b:83:1e:77:51:ce:94:b4:d2:d6:00:
6b:16:6f:9a:d2:64:b0:bc:ae:4e:70:0d:52:04:c5:
ba:59:a2:b2:6e:10:a7:87:cd:d6:2c:b1:77:27:5e:
3e:25:6f:31:32:aa:98:3a:83:a7:da:17:7d:82:cf:
0b:5b:fe:df:fe:c2:39:44:fd:9e:51:83:07:b3:7d:
4c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:70:DA:E6:1C:24:65:40:50:59:A3:56:C9:08:32:F6:32:5C:3D:F0
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/8HDa5hwkZUBQWaNWyQgy9jJcPfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.79.0/24
94.137.91.0/24
Signature Algorithm: sha256WithRSAEncryption
78:e4:1c:19:d3:96:d6:e5:1b:0e:d4:6a:8b:c0:98:07:bb:b8:
81:5b:2c:3c:15:a5:54:f6:5a:e3:2a:8e:2a:a1:66:55:97:bc:
9f:0f:90:bc:b0:67:c0:40:6c:74:b2:2f:3f:9b:d0:aa:f2:e2:
33:26:20:47:5b:b8:9e:bc:7d:fe:a0:bf:21:88:68:4d:c5:b8:
96:1b:69:f8:89:84:1e:93:8a:06:1c:30:fa:98:49:73:6c:ee:
b8:ea:ee:41:a8:d0:10:c8:1b:ba:94:35:52:be:b9:36:99:f4:
35:c3:b9:79:f4:91:6a:c6:1f:2b:e2:ec:e4:36:8c:8b:d1:6c:
cf:ec:fa:9b:93:58:8f:5b:94:7e:dd:30:7b:7d:7a:0d:be:5c:
a6:e7:03:d6:af:20:f7:87:11:82:6f:6c:82:17:0e:91:a9:7e:
3f:75:2a:93:07:8b:95:d1:2a:a5:78:54:f7:5a:9c:92:49:b9:
04:df:61:b4:71:91:af:fb:31:8c:65:5e:1b:09:8f:24:e2:03:
15:ba:ad:27:a0:3e:30:f8:e3:8a:b6:f0:ac:3c:17:4b:e3:c6:
20:29:a0:21:fe:99:a6:77:e8:df:66:d0:83:b4:f2:8f:b4:09:
50:68:77:e6:76:aa:d7:cd:0b:7a:a5:7d:b7:aa:16:cd:f1:2a:
96:5e:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:08 2025 by rpki-client