Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3Pubc2khi5K9Fd9DIzfGQUX2WBs.roa
File: 3Pubc2khi5K9Fd9DIzfGQUX2WBs.roa (raw, json)
Hash identifier: BVEfJ+8hCRcFUZGi0KUmwIE7qiR7BrukLNKRdQ2/Hn4=
Subject key identifier: DC:FB:9B:73:69:21:8B:92:BD:15:DF:43:23:37:C6:41:45:F6:58:1B
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019424450D9135B3308E66B46039EBD68E3C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3Pubc2khi5K9Fd9DIzfGQUX2WBs.roa
Signing time: Wed 01 Jan 2025 23:48:12 +0000
ROA not before: Wed 01 Jan 2025 23:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 996
IP address blocks: 94.103.178.0/24 maxlen: 24
94.103.189.0/24 maxlen: 24
94.103.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:0d:91:35:b3:30:8e:66:b4:60:39:eb:d6:8e:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Jan 1 23:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcfb9b7369218b92bd15df432337c64145f6581b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:33:08:0f:04:96:eb:6a:ff:1b:5b:a2:7f:e5:
99:25:d8:93:3d:9d:c9:02:d4:07:5d:6b:fd:cb:63:
d9:60:15:70:f7:69:dc:ef:d8:c9:87:06:1a:4f:f3:
6b:70:c9:c5:81:5c:ab:0e:24:27:ac:80:7f:2e:f1:
7d:9e:1a:3e:85:42:27:1e:0f:3a:60:8c:4c:53:c5:
01:48:33:73:b9:60:89:9b:df:e5:81:ad:b6:d1:1c:
04:b9:37:1b:a1:2b:9c:7a:e2:7e:8f:3f:eb:a6:e1:
46:ca:4a:7e:88:3b:dc:e7:0b:3c:e1:17:fd:52:d7:
92:71:0c:63:87:2e:14:ab:99:86:70:df:53:bc:f8:
86:e9:4a:36:1d:73:d7:05:f0:75:13:28:5e:d7:cf:
cd:ea:02:20:0e:88:0b:6f:44:94:84:1f:d6:0a:4b:
00:e0:e7:9a:e8:de:0b:30:b8:57:58:31:24:1c:84:
46:52:49:e3:38:f1:b3:6f:67:56:60:bc:ce:92:63:
11:ec:69:76:3c:1c:8f:b6:6b:31:84:1a:de:b3:cd:
90:23:95:0a:5f:01:3b:e6:d4:7f:89:48:62:fe:1b:
d2:64:c9:68:6f:0c:4b:8e:6c:5f:ba:bd:6a:75:dc:
7a:6b:3e:5b:79:c4:ea:29:c7:6a:45:02:8f:e1:0d:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:9B:73:69:21:8B:92:BD:15:DF:43:23:37:C6:41:45:F6:58:1B
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/3Pubc2khi5K9Fd9DIzfGQUX2WBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.178.0/24
94.103.189.0/24
94.103.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:f0:b7:01:2f:de:86:e6:ce:d9:a4:ff:0b:6f:3f:bb:8b:47:
ff:e3:3a:d3:53:d1:41:09:ff:bb:86:43:d5:71:e7:77:ee:ef:
e3:ac:21:aa:85:cb:d7:27:b0:f2:67:1d:21:10:9d:a6:a3:6b:
89:10:26:e3:db:52:e5:65:2d:e4:cd:be:0d:f4:cf:fb:f9:1a:
92:8b:a1:d8:69:2f:e2:02:b7:e8:67:21:7d:86:c1:c2:10:b7:
d4:58:40:9b:cb:5b:78:23:90:f9:25:23:29:df:1f:ec:04:82:
ff:21:88:db:17:3f:cc:ff:11:8c:a1:7f:ca:8c:8d:ef:0d:82:
e5:4c:86:78:26:9a:5d:12:4d:dc:53:66:b5:be:cd:d5:03:90:
f4:d3:cb:d3:d2:63:c1:a2:a2:8e:55:c3:cf:52:74:20:21:09:
64:fc:18:2a:15:28:cc:ec:34:3d:d6:c2:71:04:6c:24:3f:17:
1c:5a:fb:11:c1:df:cd:56:32:4e:f6:54:54:79:a7:fc:ca:ee:
da:db:d2:20:bd:77:b2:02:7d:2a:88:3d:18:91:5a:58:82:19:
ad:8b:f4:c7:0d:0b:a1:50:dd:71:a5:f8:ff:d0:8d:95:c9:93:
ef:20:a4:33:65:48:ea:1e:81:d9:6b:65:b8:26:36:39:92:2d:
e8:58:48:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:55:01 2025 by rpki-client