Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/1-9F4deHUj-oeUdB2iPNcuyoeJvw.roa
File: 1-9F4deHUj-oeUdB2iPNcuyoeJvw.roa (raw, json)
Hash identifier: Y2dWBOQIbkeYjWtB5sNmNxDDcmQlhi16VWYhZr6gy60=
Subject key identifier: FB:D1:78:75:E1:D4:8F:EA:1E:51:D0:76:88:F3:5C:BB:2A:1E:26:FC
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 0192FAFA041220AAB593054D9F510591F652
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/1-9F4deHUj-oeUdB2iPNcuyoeJvw.roa
Signing time: Tue 05 Nov 2024 06:19:01 +0000
ROA not before: Tue 05 Nov 2024 06:19:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38195
IP address blocks: 80.94.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fa:fa:04:12:20:aa:b5:93:05:4d:9f:51:05:91:f6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Nov 5 06:19:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbd17875e1d48fea1e51d07688f35cbb2a1e26fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:38:ef:1b:99:28:12:5d:14:76:82:c8:0a:
78:43:ad:e8:a4:eb:c4:14:5b:93:d7:f7:62:0b:4f:
98:87:42:d2:30:92:03:09:65:31:21:97:27:6a:3c:
f5:70:c7:d3:39:ec:bb:94:b7:df:42:94:c1:b6:b0:
4d:91:5f:8b:17:26:d6:41:68:b6:a1:87:91:73:7e:
91:b6:f4:ea:23:8e:50:11:c2:f2:38:94:d4:60:da:
cd:30:87:32:12:1c:5a:f9:20:ba:c9:9d:ab:95:14:
fc:22:00:d7:52:0c:9d:b0:11:0a:4f:86:ab:aa:8e:
6a:12:bd:7e:7a:7d:f5:bc:7a:0f:af:29:97:fd:6a:
28:3f:f6:55:fb:76:d7:15:70:c2:88:f2:cd:fe:ca:
fd:4f:a0:b2:e3:e8:95:31:3b:69:c2:f5:fd:b6:45:
56:b0:e1:3d:52:90:1b:23:69:db:9d:8d:4c:37:c0:
21:25:b8:76:57:3a:ad:0e:b2:d4:8e:c7:41:85:6d:
b3:da:84:2f:aa:a2:b7:06:3d:e1:a7:f3:f7:18:a5:
73:d6:8a:8a:13:8b:5a:5a:ba:ac:42:56:99:bb:8f:
77:4d:4d:e1:5d:76:e2:bd:2f:81:0e:fc:87:36:5a:
4d:a4:49:f1:fe:88:f3:05:42:49:62:8d:94:14:fe:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D1:78:75:E1:D4:8F:EA:1E:51:D0:76:88:F3:5C:BB:2A:1E:26:FC
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/1-9F4deHUj-oeUdB2iPNcuyoeJvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.89.0/24
Signature Algorithm: sha256WithRSAEncryption
20:96:6d:ae:59:ee:eb:9b:d3:9d:2d:35:21:8f:05:48:28:57:
73:1d:26:c1:1e:8e:b7:24:d6:41:36:d0:45:22:6f:45:1f:1f:
b4:37:67:6c:d0:e4:5c:e4:c8:83:92:c7:64:00:d6:a7:dd:30:
42:72:03:5b:aa:6c:1a:4d:e0:0b:2e:b7:b2:14:e5:1c:57:d2:
d9:87:19:8f:bf:c5:5d:04:97:32:55:11:00:03:6f:b3:8c:6a:
00:44:be:f3:f2:87:98:8e:71:10:10:98:55:b1:f3:7c:f6:62:
05:28:ca:26:8a:70:66:37:7f:4f:0c:ce:4d:23:17:f7:05:84:
5d:d4:f9:21:4d:8a:79:87:7a:39:ce:cc:13:bf:04:cf:ab:75:
be:8a:13:49:02:9b:dd:da:01:78:31:c7:41:ef:09:9a:ae:c1:
b8:a9:59:94:89:bd:36:49:06:22:91:1f:20:78:46:28:68:e5:
99:01:bb:e9:18:57:8d:3d:c5:79:1b:8c:15:d9:42:9c:d1:35:
e8:24:15:c8:0f:3b:30:b7:82:9c:36:ad:0c:ac:aa:d8:af:ea:
40:48:bb:83:e4:02:24:ad:b9:45:66:8f:f2:42:20:fd:87:76:
36:cd:68:39:0a:3e:b2:3d:22:1f:05:9e:b5:00:cb:f5:69:11:
8d:e8:c8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:41 2025 by rpki-client