Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/z9CBeQFGVJ6a-aOkTgW9kr4T7ZQ.roa
File: z9CBeQFGVJ6a-aOkTgW9kr4T7ZQ.roa (raw, json)
Hash identifier: 0d+6+lgP+FSRMRw+03QrDwFBD775Hc5mljxOB7sBV+4=
Subject key identifier: CF:D0:81:79:01:46:54:9E:9A:F9:A3:A4:4E:05:BD:92:BE:13:ED:94
Certificate issuer: /CN=52882280ef8c6e52dc64a94ace84d3dc8f261ded
Certificate serial: 01B65A
Authority key identifier: 52:88:22:80:EF:8C:6E:52:DC:64:A9:4A:CE:84:D3:DC:8F:26:1D:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UogigO-MblLcZKlKzoTT3I8mHe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/z9CBeQFGVJ6a-aOkTgW9kr4T7ZQ.roa
Signing time: Thu 10 Feb 2022 08:31:45 +0000
ROA not before: Thu 10 Feb 2022 08:31:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50964
IP address blocks: 194.76.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112218 (0x1b65a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52882280ef8c6e52dc64a94ace84d3dc8f261ded
Validity
Not Before: Feb 10 08:31:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfd081790146549e9af9a3a44e05bd92be13ed94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:69:c4:73:77:12:81:30:07:6b:c1:a6:2e:
a9:ff:2e:90:69:80:db:45:b9:7d:fe:47:18:f3:95:
01:ae:14:f8:9c:47:2b:75:bf:dd:dc:35:4d:08:06:
0e:9f:a8:1a:2c:17:7c:b8:5f:7e:8e:03:6a:7c:80:
70:d1:29:77:da:9b:f8:79:84:4a:c3:23:c6:db:66:
4b:8a:c3:db:9b:de:2d:00:4a:7a:b5:ec:a6:0b:bd:
1d:52:99:c0:38:46:0d:5b:ae:fe:e0:5c:5e:81:06:
dc:5a:d2:d3:d9:e3:5a:90:9d:ff:84:ea:0d:5c:dc:
4e:bc:16:7a:54:ed:09:62:bc:23:ce:d6:00:03:ab:
e8:26:43:ff:67:d6:64:97:9f:c9:4a:44:dc:2c:ba:
1b:d4:f0:2a:18:a6:5c:af:c5:76:78:b4:f0:2b:76:
4f:dd:ad:c0:db:a7:5c:a8:9c:b3:b3:62:b8:9a:48:
fd:c4:06:83:6f:f1:c5:19:cb:68:a6:fb:48:4e:b4:
e2:37:15:3c:a6:da:1e:da:9a:12:c2:a5:1d:47:55:
1a:26:3b:b8:f5:2e:46:96:ac:ad:e4:0c:8f:80:95:
a3:45:16:0a:bc:87:ef:08:8c:d2:ea:6a:9e:44:f8:
28:a7:6b:0d:29:8e:4a:7f:f6:ac:ab:d9:d0:15:c6:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D0:81:79:01:46:54:9E:9A:F9:A3:A4:4E:05:BD:92:BE:13:ED:94
X509v3 Authority Key Identifier:
keyid:52:88:22:80:EF:8C:6E:52:DC:64:A9:4A:CE:84:D3:DC:8F:26:1D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UogigO-MblLcZKlKzoTT3I8mHe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/z9CBeQFGVJ6a-aOkTgW9kr4T7ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/207ea7-e4e2-49e2-9e13-1efc3559d706/1/UogigO-MblLcZKlKzoTT3I8mHe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.38.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:df:c1:6d:48:18:30:ea:38:d1:ee:b0:fb:59:6b:a0:96:3d:
bb:37:c1:d1:e5:e7:c9:96:6c:de:c5:d5:ff:05:a0:a2:13:4e:
f7:3f:6c:45:48:e7:ca:3c:59:54:df:1e:d3:d6:17:37:aa:a5:
5d:05:96:f4:f0:2a:29:61:10:7e:58:d2:f6:6a:8e:22:58:65:
90:56:cf:98:07:5d:c3:5c:5a:e0:00:51:8f:74:d2:75:3e:e6:
f1:48:55:4f:90:60:95:9b:24:85:e6:12:69:08:d3:a2:aa:75:
59:b3:84:b9:70:69:72:6b:b6:8e:1e:f6:c2:ad:a8:03:7a:36:
5c:9b:65:df:c6:fb:f2:a2:6a:39:22:f9:fc:36:49:73:f9:9d:
02:c7:78:75:a4:77:70:28:60:8a:de:72:9c:e2:5b:0f:5a:d4:
ef:04:2a:8b:19:40:44:92:1e:3a:ec:d4:c8:0b:90:16:f0:66:
5e:a0:6b:c4:2b:c5:ae:dc:11:a8:c0:d0:50:16:b7:99:27:d4:
f6:e0:92:8e:7b:10:6b:f9:47:3e:a2:91:d1:1e:77:99:76:68:
66:a6:85:45:58:50:35:cd:e3:2b:ec:98:69:47:49:45:cf:0b:
fb:c9:d1:c7:d4:0e:82:ea:28:9c:bf:8d:e8:62:dd:36:81:48:
14:ba:82:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:39 2025 by rpki-client