Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa
File: 2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa (raw, json)
Hash identifier: z7wlSbeXCPnKRT5F6st24jvggmZT5WHmth3yDlecnKg=
Subject key identifier: D8:09:28:CB:65:39:5D:32:8D:FD:66:64:CD:99:3C:A5:B1:FF:5A:F5
Certificate issuer: /CN=4a9d166c6484738972e9b33938165f4489a5168c
Certificate serial: 0194244486D9707AE80542F93F144F899B00
Authority key identifier: 4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50955
IP address blocks: 83.242.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:86:d9:70:7a:e8:05:42:f9:3f:14:4f:89:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a9d166c6484738972e9b33938165f4489a5168c
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d80928cb65395d328dfd6664cd993ca5b1ff5af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:2b:4b:30:79:cb:d0:43:5c:1d:38:e8:6b:
6b:71:c0:c0:ab:45:b0:2e:db:96:4f:79:7a:3d:f6:
b9:00:f5:d3:30:c9:ae:f6:83:b9:03:9f:98:a4:3b:
63:2f:e5:be:92:74:6f:8f:bf:bc:64:64:93:91:03:
ac:2d:e5:2c:45:7d:4b:8e:4f:3a:31:8f:e2:20:f7:
16:e5:7f:17:7b:3a:cf:78:74:b4:31:3d:46:e9:43:
ec:c2:dc:0c:1f:83:e2:12:18:94:cb:88:80:b4:c4:
20:d0:25:f2:a6:ed:78:bf:bc:bb:cc:6f:99:4f:e0:
a1:63:c7:12:e9:23:7d:59:b5:73:18:90:d2:17:f6:
d7:b9:a3:fd:e1:7e:ac:ec:f6:b4:e6:d2:1d:90:13:
76:67:09:91:93:82:50:87:e4:84:d8:e6:ac:8f:8d:
4b:62:0a:04:ae:80:ad:da:6e:6c:98:d4:a5:da:47:
60:32:65:0f:67:32:94:d1:9e:3e:82:59:4d:d7:5c:
68:dc:5a:fb:5e:a2:30:ed:fc:83:10:e5:aa:06:4c:
db:72:55:e0:83:44:86:96:c2:da:45:33:f6:d7:c4:
db:8e:a6:06:89:59:18:54:d8:30:32:3d:57:e5:bd:
6f:09:6c:c8:4b:d6:c2:80:cc:62:8e:18:a9:3e:5f:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:09:28:CB:65:39:5D:32:8D:FD:66:64:CD:99:3C:A5:B1:FF:5A:F5
X509v3 Authority Key Identifier:
keyid:4A:9D:16:6C:64:84:73:89:72:E9:B3:39:38:16:5F:44:89:A5:16:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sp0WbGSEc4ly6bM5OBZfRImlFow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/2Akoy2U5XTKN_WZkzZk8pbH_WvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/76c905-e5af-48ae-b7ac-bfa96392ac5d/1/Sp0WbGSEc4ly6bM5OBZfRImlFow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a5:32:34:19:1d:2c:14:c1:ed:cd:98:55:21:d5:f7:44:32:
ca:f1:b2:b0:a8:50:0f:08:74:14:f2:71:51:f4:eb:31:96:d7:
52:45:10:73:cf:d9:43:f7:2c:21:2e:15:24:be:8a:84:dd:3b:
d2:67:eb:38:4f:c6:a8:3b:11:a9:cf:d3:9b:30:cc:5b:00:71:
e8:92:6b:85:f9:41:28:96:63:69:5b:04:12:0b:de:f5:17:11:
f5:a4:70:a4:2f:f2:6a:51:9c:84:56:5d:8e:05:4e:30:89:c1:
f2:70:d5:a8:7e:36:1c:9d:86:f5:74:db:7e:cf:f2:56:af:53:
68:a2:20:6c:b1:06:39:81:bf:c8:49:9d:7c:f9:9d:29:60:e0:
d6:62:ea:0f:80:57:56:be:98:94:70:20:4a:3c:37:f1:5c:d9:
63:9e:d0:5c:de:07:a7:0a:2a:0e:2b:b0:6b:0d:b1:5d:88:93:
df:1e:3a:c5:65:97:cf:79:0e:8d:9a:3f:ba:03:da:c0:50:0e:
66:22:50:61:db:9e:03:44:d6:fe:46:00:c0:d5:25:6f:5e:a8:
ee:9e:b2:3b:07:8f:4e:88:45:49:23:f9:20:a6:19:0c:9f:1c:
27:fa:b4:9f:83:6e:cc:2b:49:5a:ad:e4:de:14:0b:2d:24:fe:
81:a5:d3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:42 2025 by rpki-client