Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/K9Fb6Pn1AHpGxh2AZw7cQ7hwTqI.roa
File: K9Fb6Pn1AHpGxh2AZw7cQ7hwTqI.roa (raw, json)
Hash identifier: VCxgcx/ZYF4zNLJnfglNTlLIzeWeHT96SqRsakuMnqQ=
Subject key identifier: 2B:D1:5B:E8:F9:F5:00:7A:46:C6:1D:80:67:0E:DC:43:B8:70:4E:A2
Certificate issuer: /CN=5c9f01985a3f410f92370d6600a14ee783b044e9
Certificate serial: 018571957AAF0DB132E1BF9BF2508D5A471F
Authority key identifier: 5C:9F:01:98:5A:3F:41:0F:92:37:0D:66:00:A1:4E:E7:83:B0:44:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJ8BmFo_QQ-SNw1mAKFO54OwROk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/K9Fb6Pn1AHpGxh2AZw7cQ7hwTqI.roa
Signing time: Mon 02 Jan 2023 08:24:59 +0000
ROA not before: Mon 02 Jan 2023 08:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206417
IP address blocks: 84.205.180.0/23 maxlen: 24
91.192.225.0/24 maxlen: 24
84.205.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:7a:af:0d:b1:32:e1:bf:9b:f2:50:8d:5a:47:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c9f01985a3f410f92370d6600a14ee783b044e9
Validity
Not Before: Jan 2 08:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bd15be8f9f5007a46c61d80670edc43b8704ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2c:6e:7f:13:af:f9:3d:03:84:31:60:fa:0b:
0c:9a:5e:74:14:cc:b7:ca:47:df:9b:24:87:85:bd:
86:11:8d:bc:48:12:2d:53:71:c4:46:98:3d:f6:b4:
85:d6:29:8b:65:95:45:44:46:13:82:5b:86:61:5c:
07:65:c8:f7:05:2f:f2:d5:89:c5:e5:d8:d7:f9:d5:
d5:48:ee:3f:4b:c2:80:89:c8:2e:4f:0a:6c:66:ef:
11:69:60:c8:53:b6:6d:0b:3c:13:08:1e:08:c5:6a:
35:b6:40:d0:a8:47:ee:3c:47:bc:a1:5c:93:f9:d3:
19:81:1e:a9:21:ac:e0:d1:fc:58:6c:3d:3b:b4:99:
55:0d:9d:ac:ad:98:71:3d:63:47:30:10:d9:6d:76:
0f:66:16:ba:58:be:6e:70:5a:e7:5f:b0:cd:39:ed:
0a:ee:db:08:b5:e3:eb:34:3c:b0:5b:fc:55:d9:92:
aa:fc:c6:a5:57:19:b2:16:c8:e7:d3:ad:7e:07:36:
08:2d:45:67:d0:77:71:a6:19:96:6f:18:42:df:7d:
0c:6b:08:bb:2d:6a:ef:ef:e2:2e:f5:ae:35:0a:2f:
13:67:ab:6a:a1:f5:f9:32:b2:84:65:29:ed:5c:6f:
12:ef:e9:7e:c3:aa:42:8b:77:29:0f:94:cc:50:d0:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D1:5B:E8:F9:F5:00:7A:46:C6:1D:80:67:0E:DC:43:B8:70:4E:A2
X509v3 Authority Key Identifier:
keyid:5C:9F:01:98:5A:3F:41:0F:92:37:0D:66:00:A1:4E:E7:83:B0:44:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJ8BmFo_QQ-SNw1mAKFO54OwROk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/K9Fb6Pn1AHpGxh2AZw7cQ7hwTqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/79fb00-8d51-4712-929a-8cfb2e73f70d/1/XJ8BmFo_QQ-SNw1mAKFO54OwROk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.167.0/24
84.205.180.0/23
91.192.225.0/24
Signature Algorithm: sha256WithRSAEncryption
51:bc:12:cf:66:40:4a:6c:06:e7:56:d5:ad:9d:0b:29:05:ca:
88:b8:3d:ea:32:54:dd:b7:e5:d1:b1:1a:0e:20:a5:44:61:fd:
f3:ad:fd:35:85:46:b9:8f:55:95:f4:6f:11:eb:56:56:84:2b:
c3:66:f1:41:ff:65:fd:ad:bf:de:42:a0:14:6c:20:b1:80:a5:
30:33:b1:f2:6d:60:fe:a2:b6:fd:32:dc:e8:a2:3f:be:ca:85:
17:28:e6:56:2a:93:36:d1:59:8d:f8:1f:9f:94:37:54:69:1c:
8e:0e:27:78:a5:7d:8c:fc:b2:11:df:b0:bf:50:cb:65:8d:ad:
70:8f:39:bb:0c:83:f7:77:4c:b3:c4:3b:2e:bf:05:ff:06:15:
18:d7:df:5a:c5:41:13:48:cc:05:16:5e:67:9b:50:a8:49:ec:
41:b3:0d:cd:6b:5d:01:11:8e:86:0f:75:b9:9f:e2:e7:8a:77:
a8:95:d5:8f:6f:72:e5:7f:19:12:cf:e4:14:8b:0e:41:1d:ca:
32:19:16:80:a9:c5:6e:4f:97:ee:17:a2:c1:73:1e:e4:2d:fd:
a7:91:2c:b6:18:a4:59:8d:37:9b:8f:05:d6:18:59:c6:a5:d1:
57:4f:59:3f:2b:c1:8b:03:29:5a:17:62:4d:13:4b:f8:50:1e:
a2:83:c8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:52 2025 by rpki-client