Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/9auHlYd76wljLXTUa30Fu1vgrAg.roa
File: 9auHlYd76wljLXTUa30Fu1vgrAg.roa (raw, json)
Hash identifier: HBfq6ffLHN01D2NvTz3EG9p3pmZtmKOOtE4D6clwziw=
Subject key identifier: F5:AB:87:95:87:7B:EB:09:63:2D:74:D4:6B:7D:05:BB:5B:E0:AC:08
Certificate issuer: /CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Certificate serial: 0185A83C565D5718B2DE6EAAA04D43445A09
Authority key identifier: 35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/9auHlYd76wljLXTUa30Fu1vgrAg.roa
Signing time: Thu 12 Jan 2023 23:06:44 +0000
ROA not before: Thu 12 Jan 2023 23:06:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 79.139.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a8:3c:56:5d:57:18:b2:de:6e:aa:a0:4d:43:44:5a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c96065093998ba42cfba11bf0d17d3ac403d40
Validity
Not Before: Jan 12 23:06:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5ab8795877beb09632d74d46b7d05bb5be0ac08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:97:49:65:a4:ee:df:8d:0d:f3:33:be:30:8b:
82:9f:be:de:fa:d3:37:55:44:4f:c9:e6:81:d1:fb:
8e:08:1d:54:1a:86:e7:38:51:52:32:29:d1:7d:9c:
78:3d:29:1a:d5:04:a7:ca:d7:16:8d:fe:aa:b5:78:
cf:f8:d3:40:90:33:35:c4:3f:88:da:ef:34:f0:54:
58:64:4c:06:23:dc:42:ea:9b:86:06:92:8e:dc:80:
f8:de:5e:d0:96:27:46:0e:76:5b:0b:d5:95:13:61:
2a:1c:fd:7b:44:21:40:9b:5d:a6:e0:5c:f5:e3:98:
44:f1:29:80:21:df:11:8b:8e:e3:8d:e1:2a:30:a6:
4f:37:4a:1d:0c:03:4e:3d:08:2c:16:54:4c:eb:1f:
2e:cf:bc:94:eb:03:b3:c2:6f:83:1a:6c:1c:14:ba:
fe:cb:6c:30:d6:ee:1b:8b:94:83:60:dd:bf:88:eb:
55:ac:cb:62:c3:e9:ce:8a:8f:49:d2:88:9a:e9:cd:
6f:36:b4:45:79:90:7b:d9:00:af:e6:2f:7b:56:96:
dd:cc:d9:d9:05:da:56:cf:5a:a4:00:09:f5:ce:18:
8e:5e:fd:04:06:c7:f9:5e:e3:12:8e:82:44:c8:17:
b4:c1:db:80:bb:d6:5f:ff:77:f5:7e:cd:c2:70:8e:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AB:87:95:87:7B:EB:09:63:2D:74:D4:6B:7D:05:BB:5B:E0:AC:08
X509v3 Authority Key Identifier:
keyid:35:C9:60:65:09:39:98:BA:42:CF:BA:11:BF:0D:17:D3:AC:40:3D:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NclgZQk5mLpCz7oRvw0X06xAPUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/9auHlYd76wljLXTUa30Fu1vgrAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/62764b-9aa6-4f12-a71c-6bac34987019/1/NclgZQk5mLpCz7oRvw0X06xAPUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.139.52.0/22
Signature Algorithm: sha256WithRSAEncryption
be:9f:4c:03:8e:4c:d8:53:15:f6:c4:f0:ff:01:6d:4e:4c:5d:
eb:51:54:5a:94:d8:ba:35:12:9a:ab:98:f0:40:11:0a:d9:c9:
6d:a8:d3:87:89:77:f6:e8:39:05:ea:a1:c1:24:9a:07:70:d1:
9c:ae:ef:fb:f9:20:de:43:c1:13:31:da:1c:20:fe:ef:63:97:
57:94:40:74:6f:e1:bd:30:9c:2b:c9:2c:0d:7b:72:ea:e9:15:
f2:bf:de:c3:99:5a:0a:20:39:76:7d:fe:bc:ad:eb:4f:2c:2c:
e4:9b:79:66:31:84:56:72:37:b0:47:21:f3:de:84:20:90:20:
d7:73:ce:e2:61:d5:3c:6c:61:cb:2c:72:fe:50:1b:72:36:8b:
6a:1b:4d:46:5f:ac:b7:5e:c4:45:16:5c:5d:a4:a5:62:af:4e:
55:31:ef:8f:b5:a9:3d:a2:85:4d:d9:c2:78:bf:8a:73:7d:ad:
f9:8e:7a:33:03:01:82:e9:d8:10:f5:5e:4f:f5:2a:d3:01:d7:
1f:55:97:00:fc:4b:06:e1:6f:d9:3b:d6:63:fa:64:9f:ce:27:
cb:f0:0a:15:69:5b:1a:59:86:c1:f8:43:87:ce:de:e4:13:e5:
ae:ba:3a:d0:fb:fa:3e:9d:d1:bd:89:59:62:64:6f:11:e7:9a:
47:1b:ac:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:11:20 2025 by rpki-client