Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eI9F_LSb3X4NO_PNYUjLUxgrwqc.roa
File: eI9F_LSb3X4NO_PNYUjLUxgrwqc.roa (raw, json)
Hash identifier: eKfLdAfKn4XzQd6Pr6XXZ6luO/xNC4ppwlNyAMVAidE=
Subject key identifier: 78:8F:45:FC:B4:9B:DD:7E:0D:3B:F3:CD:61:48:CB:53:18:2B:C2:A7
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 019426D9BE0073F35F3859611C043164EE02
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eI9F_LSb3X4NO_PNYUjLUxgrwqc.roa
Signing time: Thu 02 Jan 2025 11:49:51 +0000
ROA not before: Thu 02 Jan 2025 11:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12679
IP address blocks: 94.137.72.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:be:00:73:f3:5f:38:59:61:1c:04:31:64:ee:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 11:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=788f45fcb49bdd7e0d3bf3cd6148cb53182bc2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:57:da:6f:47:f8:14:e4:ea:81:e4:a6:42:8e:
32:c1:bb:e0:0c:e1:e5:00:9b:e5:ea:37:79:8d:5e:
27:1a:15:22:15:59:a4:5e:10:65:d3:5d:30:95:01:
2a:28:56:04:bd:f4:a9:ca:89:72:ff:30:6e:c1:11:
5a:d1:ce:ae:f2:88:3e:cd:f7:64:8d:9c:28:82:f1:
40:62:a5:c5:5a:3b:e1:3a:4b:e9:40:7f:b9:0b:2e:
74:10:ab:c7:5d:c0:2a:3b:43:fe:c3:96:78:ab:15:
c5:63:7b:04:32:b0:49:d1:b8:55:38:7e:b9:d2:c9:
42:57:50:05:8a:41:c1:a1:73:73:de:66:b3:90:67:
12:2d:44:14:9b:7b:43:a1:86:ba:2c:21:f1:87:ab:
87:23:f1:96:cf:ec:e7:42:f7:b3:9e:b7:a0:cc:59:
48:ef:ef:e5:a3:e8:10:a7:30:5d:fc:70:ed:70:3e:
55:19:91:ce:d7:ed:f0:22:4b:7f:bb:7b:d1:8d:50:
ce:f2:fa:68:94:3d:82:87:4a:7b:26:73:b6:f9:88:
6d:b4:5c:15:24:e5:ac:42:0b:66:a5:71:7b:9d:38:
50:96:57:8c:f4:8d:98:29:18:e5:09:ff:5a:37:7b:
2f:5d:89:c0:f8:eb:f6:ff:04:7c:8b:1a:b1:f7:18:
c5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8F:45:FC:B4:9B:DD:7E:0D:3B:F3:CD:61:48:CB:53:18:2B:C2:A7
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/eI9F_LSb3X4NO_PNYUjLUxgrwqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.72.0/24
94.137.89.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:01:09:71:a8:ff:0f:00:07:1c:cd:87:35:03:54:ba:9e:c3:
e4:12:ba:e7:b5:93:98:d1:30:73:d6:f4:5b:e3:76:0a:fc:66:
ca:05:a8:1d:01:37:3e:6e:17:67:ab:ab:3a:a2:70:84:5f:76:
9e:e8:12:fe:f4:bc:bd:63:a6:82:a8:35:de:f8:c2:3e:e1:7f:
06:68:a8:a7:2e:b7:10:16:c1:dc:1b:77:39:1c:80:04:01:ae:
2e:80:b2:99:d7:92:a9:36:b7:bc:ba:6a:54:45:1d:42:11:9a:
ec:d6:30:82:28:ab:46:ce:a4:30:fc:d0:b7:61:8e:ec:4a:f0:
a8:20:78:2e:67:55:e9:a5:24:04:a0:de:b3:08:3a:53:f5:f7:
73:b8:b8:17:23:c1:87:13:9e:6f:ee:fc:83:72:27:62:e3:b1:
30:90:12:bb:b9:a8:07:e9:e5:28:40:67:d2:8b:c5:31:d0:d2:
04:45:51:b9:ea:fb:8b:92:75:5c:51:35:2e:0e:0f:bb:2d:42:
55:1f:ea:66:03:96:8d:fa:9f:0b:78:36:fa:c3:4f:91:fd:2a:
bd:d8:69:c6:b8:8c:08:57:75:1d:5b:d1:f2:20:7f:69:22:b1:
87:96:b7:9f:36:fc:01:db:a8:a6:18:a3:94:ab:56:6c:38:0c:
23:38:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:22:01 2025 by rpki-client