Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/R0heEneY578iH77KC77_0W27cmU.roa
File: R0heEneY578iH77KC77_0W27cmU.roa (raw, json)
Hash identifier: V3zZzjiZ45Zh80PliqGRKKpTsuOfGwQZW1KqiFS1qF4=
Subject key identifier: 47:48:5E:12:77:98:E7:BF:22:1F:BE:CA:0B:BE:FF:D1:6D:BB:72:65
Certificate issuer: /CN=ca942b2706761c2ba753289783edf985e338f177
Certificate serial: 0185703053A77D365D261DE6A0765054D2D8
Authority key identifier: CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/R0heEneY578iH77KC77_0W27cmU.roa
Signing time: Mon 02 Jan 2023 01:54:53 +0000
ROA not before: Mon 02 Jan 2023 01:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212542
IP address blocks: 195.189.240.0/24 maxlen: 24
91.233.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:53:a7:7d:36:5d:26:1d:e6:a0:76:50:54:d2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca942b2706761c2ba753289783edf985e338f177
Validity
Not Before: Jan 2 01:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47485e127798e7bf221fbeca0bbeffd16dbb7265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:c7:49:4b:b2:80:0d:54:f8:db:1c:af:0f:
cb:17:78:29:5c:fe:7c:46:77:c9:e3:b0:d0:34:b9:
74:bd:5b:12:c9:69:42:53:48:51:ff:44:c3:28:00:
e0:a6:d0:e8:60:e7:be:dd:8e:34:50:2f:ed:58:ea:
af:51:18:4e:90:60:71:c2:78:bd:37:65:74:c9:16:
dd:10:fa:e3:84:93:11:f6:8a:01:49:ef:09:50:4b:
91:42:d0:fe:87:66:5f:d2:82:bc:40:8e:e1:3d:be:
f1:de:0d:57:18:da:71:61:b0:6c:d4:3d:b5:6c:1a:
88:ee:f7:3e:56:31:1a:db:ab:64:4a:f0:2f:91:48:
08:b0:ae:fe:d6:38:bd:8d:d3:f7:a4:be:5f:93:44:
74:90:f4:25:b1:a4:01:37:4e:d7:05:b1:72:5a:1a:
6e:ea:58:c5:81:26:ee:5d:a0:d1:50:a1:b0:37:2b:
cf:87:a0:af:f2:f0:77:2e:fb:c8:ae:0a:13:3e:66:
bb:36:83:95:4a:e6:e6:00:74:7c:e8:37:60:57:5a:
8d:c3:90:19:ca:d1:a0:b6:38:6a:93:e2:12:34:46:
7a:9f:ab:31:5f:e2:13:23:26:30:ea:a1:99:25:3b:
b4:d3:db:f4:c1:a6:67:80:56:3e:21:b4:44:f8:0f:
94:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:48:5E:12:77:98:E7:BF:22:1F:BE:CA:0B:BE:FF:D1:6D:BB:72:65
X509v3 Authority Key Identifier:
keyid:CA:94:2B:27:06:76:1C:2B:A7:53:28:97:83:ED:F9:85:E3:38:F1:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ypQrJwZ2HCunUyiXg-35heM48Xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/R0heEneY578iH77KC77_0W27cmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b8c13d-e7d3-4aa9-a911-ed64805977f0/1/ypQrJwZ2HCunUyiXg-35heM48Xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.100.0/24
195.189.240.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a9:50:e9:0d:e1:e1:30:c2:57:40:34:87:2b:17:30:02:81:
5b:57:77:82:1d:69:d7:ec:53:b4:3b:e0:62:09:f7:90:eb:55:
ac:c2:f3:02:4f:64:4d:17:09:f3:95:ad:f7:67:cc:6f:60:4c:
bf:83:a9:84:81:26:4d:dc:30:a5:c9:1a:28:87:11:1d:40:76:
62:0d:93:da:9d:c3:41:f9:11:0b:2c:6f:bb:a4:c9:75:c2:19:
e8:b3:26:17:b7:1a:a1:66:b0:c9:4a:f9:e7:a2:ab:96:bf:bc:
ac:c4:2b:ed:16:a4:0c:58:c6:e9:8d:26:ed:8a:e5:64:bb:cd:
9b:4b:73:54:55:f9:69:18:61:1b:2f:8f:95:ca:21:86:a5:8b:
91:19:45:a9:79:df:85:78:46:cf:7c:7e:0d:42:fe:1d:a6:c4:
f4:0e:d4:d5:ab:65:25:ca:a8:40:8b:fb:85:ee:dc:2d:8b:b0:
04:55:6e:ba:9b:1b:88:9f:7b:c8:b1:ee:75:2d:9a:5e:ab:56:
ce:93:db:42:77:98:10:36:fd:5c:90:36:4b:28:ee:55:ae:a8:
93:49:18:78:3f:ed:f6:1f:1b:8c:03:e3:5b:86:2f:88:2b:fd:
32:88:68:59:db:5d:e6:9d:a8:c0:b6:c0:31:11:69:1d:35:97:
ab:70:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:19 2025 by rpki-client