Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/vw7tLfUg7FS7K7WLErg453Om0xs.roa
File: vw7tLfUg7FS7K7WLErg453Om0xs.roa (raw, json)
Hash identifier: 3mM+qbFxWwoEK5ZnzaxTSvOSsJCeKZ4h7jmzf4fvbp4=
Subject key identifier: BF:0E:ED:2D:F5:20:EC:54:BB:2B:B5:8B:12:B8:38:E7:73:A6:D3:1B
Certificate issuer: /CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Certificate serial: 018C1DF84E7716726EFA46EDC307D03A3BA5
Authority key identifier: E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/vw7tLfUg7FS7K7WLErg453Om0xs.roa
Signing time: Thu 30 Nov 2023 02:04:21 +0000
ROA not before: Thu 30 Nov 2023 02:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31863
IP address blocks: 194.126.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1d:f8:4e:77:16:72:6e:fa:46:ed:c3:07:d0:3a:3b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9cb1687488cf43a7334f9efa4d9cdf635724e9c
Validity
Not Before: Nov 30 02:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf0eed2df520ec54bb2bb58b12b838e773a6d31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:70:07:c2:52:bf:20:ec:0a:d9:d8:88:4b:
c6:67:72:d1:b8:63:71:d3:c2:7a:2d:b3:a3:8e:da:
19:05:98:3d:89:49:d1:5b:fe:d3:92:7e:f2:52:11:
b0:a6:ae:1b:0f:1a:e9:73:e1:4d:47:02:53:ea:8a:
22:b9:bb:23:96:7d:65:bd:9a:9d:6d:7a:35:1e:94:
fe:aa:67:7c:84:cb:5c:9f:41:31:b1:8b:4a:fc:55:
fe:6a:ab:b9:ab:17:0c:78:6b:dd:8d:af:bf:ef:2c:
4f:52:3b:c4:d8:61:1f:d5:a4:81:06:e9:dd:da:4a:
55:ec:ce:e2:aa:ed:29:65:60:83:37:63:5b:8a:8f:
17:63:e9:a4:1a:8c:93:f7:1f:a4:e2:f8:5d:ea:57:
5d:f9:1d:30:ee:94:04:94:c1:c3:03:b9:c4:21:1b:
c0:50:e6:20:4b:a3:0b:3f:44:16:2d:f2:a7:9e:fa:
1c:c6:6d:b4:02:4d:37:96:8e:c4:7b:48:50:25:17:
9d:9d:ee:78:b7:e2:8d:fa:61:d5:98:fb:4a:9f:c6:
ce:67:36:03:63:b3:53:4e:f7:54:0f:8f:07:af:0a:
fe:b2:f8:13:8d:43:de:3c:db:b3:4b:39:ef:ab:4f:
87:c5:df:e0:d1:1a:4f:ff:ae:38:b6:d6:af:c4:f4:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:ED:2D:F5:20:EC:54:BB:2B:B5:8B:12:B8:38:E7:73:A6:D3:1B
X509v3 Authority Key Identifier:
keyid:E9:CB:16:87:48:8C:F4:3A:73:34:F9:EF:A4:D9:CD:F6:35:72:4E:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6csWh0iM9DpzNPnvpNnN9jVyTpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/vw7tLfUg7FS7K7WLErg453Om0xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/c60ece-561b-4d19-8abf-c1ffa7e5b04a/1/6csWh0iM9DpzNPnvpNnN9jVyTpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
81:3a:37:6e:f5:95:25:2b:92:4d:16:69:f9:fc:14:5f:89:2c:
49:3a:8f:f4:52:db:15:57:44:64:b8:f5:85:de:3b:b9:ff:43:
35:e2:86:c1:48:87:a4:5f:a4:a8:eb:70:5e:67:f7:8e:18:c7:
93:f6:1e:4a:39:0a:11:c4:23:9f:69:97:da:f7:19:3f:58:fd:
39:2a:98:78:29:c7:86:46:6d:7e:bf:f4:1f:97:ba:5b:b1:49:
fd:b2:77:65:78:fd:e5:1f:54:fe:1b:76:06:da:ab:db:d7:9d:
25:91:2f:35:66:58:d0:2d:30:d5:7f:72:e2:0b:2a:8a:f5:45:
dc:c4:d3:70:9b:3a:66:0d:77:84:34:5a:77:e0:50:67:db:38:
77:d4:6a:6e:a9:58:9d:7b:86:b9:8b:1c:0c:49:a2:e9:95:ff:
f7:76:b8:4d:73:68:ee:69:fd:bc:85:76:1b:60:12:e4:03:76:
cb:bf:1d:3a:a6:a3:cc:14:12:1c:38:96:ef:ff:79:19:ef:ca:
1a:9c:64:92:78:11:89:b8:3c:6a:b4:e4:07:6f:0a:6d:49:df:
63:3a:1f:20:c7:68:21:7e:8f:f5:cb:62:e9:30:d2:e9:51:52:
cc:05:b9:7e:54:f4:ff:20:55:ca:e0:00:1c:3e:0d:cc:80:bb:
af:be:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 13:08:25 2025 by rpki-client