Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/1-1z1aJksBNlleH9sd20xU_V9Mx8.roa
File: 1-1z1aJksBNlleH9sd20xU_V9Mx8.roa (raw, json)
Hash identifier: VQ6fyMBbWbDF7MlbiFqET3He22y1J2jxDAsAOcRFBYw=
Subject key identifier: FB:5C:F5:68:99:2C:04:D9:65:78:7F:6C:77:6D:31:53:F5:7D:33:1F
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 01856DAF4D18D8B9BDEEFAB0C691D1D27F1F
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/1-1z1aJksBNlleH9sd20xU_V9Mx8.roa
Signing time: Sun 01 Jan 2023 14:14:43 +0000
ROA not before: Sun 01 Jan 2023 14:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203735
IP address blocks: 94.231.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:4d:18:d8:b9:bd:ee:fa:b0:c6:91:d1:d2:7f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Jan 1 14:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb5cf568992c04d965787f6c776d3153f57d331f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:60:b3:bd:0f:c5:28:ca:11:72:ea:f5:e6:
ff:8f:63:73:17:36:8b:2c:55:73:de:d2:e7:5e:9e:
7a:5f:96:a3:7e:f6:a1:9c:5a:d2:7b:ee:7d:0b:b3:
65:27:cf:e4:62:d1:3a:21:07:fa:24:11:7e:28:08:
2c:c7:79:03:33:0d:1a:43:b9:1f:70:13:d4:b7:81:
0c:1f:bd:2c:53:76:32:d0:94:85:1f:4d:da:be:4f:
4c:0f:4f:de:fd:3e:bd:90:9b:26:f4:0f:e3:52:b7:
bc:ff:49:c1:08:d7:c4:13:9e:51:97:7d:61:f8:fe:
08:52:7a:b7:ee:27:2f:76:9e:a9:58:3c:9a:76:bd:
58:69:2d:1a:b1:2d:ae:b8:f4:45:ba:c1:4d:1e:1b:
89:ae:f9:89:25:13:11:6e:45:91:c5:40:25:be:d3:
06:23:10:52:fc:6d:6f:01:18:6b:2e:e9:ba:b3:60:
d5:f7:d4:34:59:5f:ab:43:d9:6d:a5:2d:48:a7:7b:
05:a4:19:be:1c:dc:25:dd:d8:41:24:65:11:50:5b:
8d:7a:1d:5c:76:2e:eb:90:b1:8e:fc:4f:3b:85:9c:
35:cf:48:ea:00:92:3c:8a:26:02:ee:ec:6a:51:2a:
2a:8e:ae:13:16:1c:6d:1a:c4:c1:45:cc:44:6c:33:
f6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5C:F5:68:99:2C:04:D9:65:78:7F:6C:77:6D:31:53:F5:7D:33:1F
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/1-1z1aJksBNlleH9sd20xU_V9Mx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.199.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5a:28:03:90:21:33:eb:43:7e:d3:27:49:f3:4e:c9:6a:9b:
64:bf:68:8b:32:da:00:21:4e:c0:a3:6f:d6:9d:78:87:14:87:
2c:63:11:cc:5d:21:27:b0:0d:54:cd:e4:6d:79:7d:0c:f3:f1:
8c:30:1e:f3:c4:8a:31:7c:3a:3e:82:46:fa:f4:36:15:79:29:
a9:88:2d:2d:f5:67:26:5c:70:53:4f:d3:4a:dd:40:c9:79:f3:
6f:b4:d7:da:39:7f:9c:48:df:6e:8f:03:fd:d8:97:63:72:35:
a3:0a:f7:eb:2b:06:c6:1a:99:8c:7a:9b:d2:aa:1f:85:0f:e4:
a0:19:66:b2:27:a0:38:ff:c0:c6:c6:b6:4e:a0:d8:bf:76:5d:
c5:04:e9:fb:4a:53:20:c6:c9:87:3c:de:d1:fd:c0:af:e2:9b:
b1:50:ce:03:e1:4e:76:7d:03:77:e4:33:6c:35:24:99:41:19:
81:14:27:22:b1:a0:13:8f:60:ae:38:b3:3e:e2:9e:e0:d2:c2:
be:3e:26:29:81:ed:20:df:20:54:4e:a8:71:2f:c9:bb:c4:8e:
bc:ff:2c:c1:1c:08:e2:f7:cb:98:ad:27:11:0b:5c:5d:1c:bb:
cc:5a:b0:85:da:42:03:e0:09:13:06:ee:35:a3:53:09:2b:c4:
4a:a2:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:13:54 2025 by rpki-client