Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/A3kZg31ILTQ3OSqE2fIVPuvadnk.roa
File: A3kZg31ILTQ3OSqE2fIVPuvadnk.roa (raw, json)
Hash identifier: 7/QhKHTO2gjozvjoZKJjoWmApfX9dCrjSRHmEFs0idg=
Subject key identifier: 03:79:19:83:7D:48:2D:34:37:39:2A:84:D9:F2:15:3E:EB:DA:76:79
Certificate issuer: /CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Certificate serial: 018CC8DCDF7BB6B75B2BF40BBEB7E9C50DA3
Authority key identifier: E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/A3kZg31ILTQ3OSqE2fIVPuvadnk.roa
Signing time: Tue 02 Jan 2024 06:29:27 +0000
ROA not before: Tue 02 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211163
IP address blocks: 94.188.180.0/24 maxlen: 24
94.188.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:df:7b:b6:b7:5b:2b:f4:0b:be:b7:e9:c5:0d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d5bb401180e55f5c165d47908dff4fe29a0d86
Validity
Not Before: Jan 2 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=037919837d482d3437392a84d9f2153eebda7679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:45:91:e8:fd:3b:6b:ed:16:73:44:b1:a1:58:
c6:1d:10:8e:4d:99:a7:8a:e0:7f:1c:28:c7:69:71:
9d:a1:03:32:29:d7:1b:11:b5:6d:a3:a4:fd:12:43:
93:06:d0:64:13:9e:fb:5f:de:a1:9e:e5:aa:25:7a:
95:41:56:18:a8:6f:c7:3f:a9:10:b3:60:60:ea:4c:
7e:5a:89:f1:fc:39:dc:25:33:04:5b:45:a9:1f:05:
3d:42:87:27:c2:a8:3d:4b:68:09:11:79:96:7d:ee:
1e:06:04:cf:9b:eb:c0:38:4f:ad:21:84:f1:4f:3f:
98:66:8a:21:02:b0:8a:10:bb:6e:9b:b1:b6:6c:bc:
7a:b5:96:0a:ca:09:0c:db:fd:64:f4:cd:11:5c:66:
fe:2a:79:30:9d:01:ab:48:8d:20:f7:42:f1:16:4d:
f8:ba:cd:d9:2a:31:e6:54:84:63:2c:98:e6:39:84:
44:db:b7:38:42:19:fa:ad:d6:72:8d:4b:6d:28:ab:
04:30:77:1b:00:cd:c0:2f:0a:3e:98:4f:e4:26:db:
4d:90:79:4e:c8:df:22:ba:a1:ef:64:81:e2:9a:00:
7e:76:6a:19:e3:9c:f9:df:ca:96:3d:2f:31:f6:b6:
b9:18:80:b7:1b:47:8d:ce:c4:32:78:c8:e4:12:07:
39:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:19:83:7D:48:2D:34:37:39:2A:84:D9:F2:15:3E:EB:DA:76:79
X509v3 Authority Key Identifier:
keyid:E2:D5:BB:40:11:80:E5:5F:5C:16:5D:47:90:8D:FF:4F:E2:9A:0D:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tW7QBGA5V9cFl1HkI3_T-KaDYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/A3kZg31ILTQ3OSqE2fIVPuvadnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/86297a-d219-4567-9171-421e6bc7e2e8/1/4tW7QBGA5V9cFl1HkI3_T-KaDYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.188.180.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:07:5d:b2:a2:62:5b:6b:58:17:fe:95:61:d3:96:6e:9a:12:
fb:f6:09:39:b0:44:79:aa:e7:23:d2:82:09:80:b1:98:d1:a0:
93:bb:0e:bb:b7:e7:7b:07:dd:70:68:d5:a3:ef:bb:50:10:7b:
3e:96:49:4a:26:e9:ef:76:02:45:22:15:21:5d:17:5b:f3:8b:
a9:4e:b2:94:91:21:d3:49:00:8c:e3:00:7a:21:06:4c:29:fd:
78:03:1b:0d:c6:84:ac:28:88:20:b5:2c:c3:6d:77:9b:91:a9:
1e:86:dd:e2:41:d2:ca:08:35:a6:2f:fb:57:69:04:28:76:e1:
ee:45:72:f4:b5:d3:a0:b2:05:6c:37:62:42:02:00:ec:f5:28:
3a:a3:28:0e:e1:e2:0e:f9:0a:6d:0c:80:23:16:ac:e0:bf:0d:
e9:67:20:2f:e4:b1:87:29:49:a6:ba:87:9a:76:f3:1f:87:a9:
52:48:fc:99:3a:51:7b:87:26:70:c7:e4:84:60:3d:26:3a:a8:
8b:6a:e8:54:dd:98:c7:0c:00:4a:34:a8:50:9e:db:d5:4a:c6:
e5:6f:84:8c:f4:f9:4b:78:44:06:87:5e:44:63:57:77:5a:e1:
8f:ce:af:2c:c9:a6:00:e3:78:2c:c0:25:5b:bd:85:2b:2d:c7:
d5:2f:77:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:18:22 2025 by rpki-client