Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/RzIzgQdkGweHapAd18zKA9kKnQ4.roa
File: RzIzgQdkGweHapAd18zKA9kKnQ4.roa (raw, json)
Hash identifier: QhxFU2NIWR1IWU9bDQCXd68koEUZzob0XfVJp6w+Bmg=
Subject key identifier: 47:32:33:81:07:64:1B:07:87:6A:90:1D:D7:CC:CA:03:D9:0A:9D:0E
Certificate issuer: /CN=80d31d25c6b88f0d50a6d7298b4f39e6ed22f742
Certificate serial: 0187EE37299205A22DFA67AAAE86272355E0
Authority key identifier: 80:D3:1D:25:C6:B8:8F:0D:50:A6:D7:29:8B:4F:39:E6:ED:22:F7:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gNMdJca4jw1Qptcpi0855u0i90I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/RzIzgQdkGweHapAd18zKA9kKnQ4.roa
Signing time: Fri 05 May 2023 23:20:05 +0000
ROA not before: Fri 05 May 2023 23:20:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212338
IP address blocks: 194.39.110.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ee:37:29:92:05:a2:2d:fa:67:aa:ae:86:27:23:55:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80d31d25c6b88f0d50a6d7298b4f39e6ed22f742
Validity
Not Before: May 5 23:20:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4732338107641b07876a901dd7ccca03d90a9d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:22:77:e2:88:53:7c:53:2c:1b:4c:53:6e:
f0:ec:09:59:c5:d3:3f:38:ef:7b:0f:91:a6:d4:6f:
fe:e5:34:cd:af:21:0e:ae:fb:0e:d4:1b:24:b8:49:
8f:6d:99:b2:f3:6d:23:c1:dd:70:87:13:af:bd:5f:
f7:1c:88:ee:1d:fb:26:22:09:67:1c:b3:ce:6e:de:
62:cc:e0:ce:58:38:fa:ab:1f:4c:0e:5a:d9:81:2f:
b2:d2:35:a3:61:cc:84:bf:81:d1:3c:48:89:fd:57:
ec:2e:da:98:c4:c2:a7:dc:ed:21:4f:30:7b:ac:39:
bf:e9:46:c0:a8:4b:61:54:19:d5:d2:cb:2e:78:7f:
f6:a0:3a:c8:83:e3:93:18:a5:de:eb:4e:54:24:14:
2a:90:a8:66:fa:e8:3c:cf:0e:88:6c:be:a5:3c:df:
71:fa:8d:18:cc:c0:46:a1:4e:6d:ef:da:c1:12:55:
7c:6d:2f:04:af:97:47:e1:4f:66:b4:47:37:f6:ec:
04:cd:d6:de:5c:06:cf:56:1f:9b:80:b2:7a:2e:8b:
7e:82:bb:d8:e9:88:42:6f:24:d7:02:9d:e0:da:8b:
6d:fd:d3:77:04:10:6f:06:aa:33:2f:a6:ca:e0:12:
b5:de:5d:75:2a:c5:6b:41:7e:39:de:6c:34:03:fc:
de:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:32:33:81:07:64:1B:07:87:6A:90:1D:D7:CC:CA:03:D9:0A:9D:0E
X509v3 Authority Key Identifier:
keyid:80:D3:1D:25:C6:B8:8F:0D:50:A6:D7:29:8B:4F:39:E6:ED:22:F7:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gNMdJca4jw1Qptcpi0855u0i90I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/RzIzgQdkGweHapAd18zKA9kKnQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/350731-a88a-4f18-a65d-d9fc6b109d78/1/gNMdJca4jw1Qptcpi0855u0i90I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.110.0/24
Signature Algorithm: sha256WithRSAEncryption
65:87:19:67:29:d5:2f:7c:7f:ca:47:3a:3a:91:67:38:44:5f:
ed:d5:83:82:b7:06:7c:08:09:b5:7e:dc:b4:d6:30:31:4f:ce:
cb:a0:47:6a:c3:b0:0c:ac:65:e8:09:28:7c:0c:b7:d9:fd:2e:
96:b2:d7:de:4a:31:28:e8:58:5e:b2:4b:8b:b1:a2:79:ae:45:
24:bc:74:7a:85:99:15:4d:02:f1:a9:fc:ae:00:03:e1:cc:0b:
9e:d1:64:f4:22:18:39:eb:9a:cc:94:ff:66:1a:78:3a:bd:e6:
6c:12:78:e6:d8:e3:57:95:74:50:e7:b8:25:32:ee:cc:e2:35:
ef:56:71:da:54:d6:37:75:d2:c0:f4:29:14:97:f7:2e:36:ec:
34:26:a1:7e:9a:82:f1:61:e1:c0:54:6b:ec:b6:5e:f6:ce:b6:
38:b2:45:10:63:97:56:cf:d5:6d:73:ed:e1:cf:13:55:31:1c:
27:a3:15:38:08:5f:02:7f:60:6a:21:3a:5d:58:55:3f:c2:43:
6e:e0:4d:fa:1e:e6:cb:7d:97:d9:25:d9:ae:f4:1e:e6:46:73:
29:6c:c1:2a:aa:18:4e:de:d6:c2:78:ec:81:ed:37:18:bd:c9:
6c:2b:27:aa:ef:54:f1:2b:ff:3c:b0:05:92:82:64:38:88:6f:
83:9c:cd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:46:12 2025 by rpki-client