Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/6wzCW0kCjyL7eOaN0tirv_V-3uw.roa
File: 6wzCW0kCjyL7eOaN0tirv_V-3uw.roa (raw, json)
Hash identifier: S6kLaAfy9ySF66gowUatFPcaC1tWs6Nfr+BOUd2Yozo=
Subject key identifier: EB:0C:C2:5B:49:02:8F:22:FB:78:E6:8D:D2:D8:AB:BF:F5:7E:DE:EC
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 019424448F473742E498BB9F01FC8DD30FED
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/6wzCW0kCjyL7eOaN0tirv_V-3uw.roa
Signing time: Wed 01 Jan 2025 23:47:40 +0000
ROA not before: Wed 01 Jan 2025 23:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199363
IP address blocks: 94.240.38.0/23 maxlen: 23
94.240.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:8f:47:37:42:e4:98:bb:9f:01:fc:8d:d3:0f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jan 1 23:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb0cc25b49028f22fb78e68dd2d8abbff57edeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a9:35:06:53:3a:d9:ba:ab:53:6a:4a:17:0b:
5f:c7:b6:ad:e2:65:60:b2:c9:ea:b6:2f:4e:1a:1d:
9b:6a:e4:c2:30:57:7c:b9:a3:4a:5f:e7:48:a8:67:
9e:34:fc:26:13:cb:07:a7:26:46:cb:12:80:8e:ac:
5d:33:af:eb:d1:31:bd:b5:6c:1c:f9:b1:96:ed:9e:
7f:b4:fa:83:7c:f7:fa:c0:f8:d1:47:69:c6:68:20:
fc:07:3e:bc:bd:b5:04:28:a1:33:19:0c:e5:77:93:
94:25:f3:91:2b:f4:b7:ab:49:82:8f:30:67:59:3d:
fd:74:3e:15:12:18:b8:f6:d2:2b:c1:61:c6:1a:31:
91:79:78:0e:52:14:9c:75:da:4c:21:18:d6:83:80:
ff:72:bc:d7:1e:48:76:6a:b4:35:e9:8d:94:b1:05:
5f:df:c9:e5:a1:af:92:6e:5e:df:0d:cc:7b:16:6a:
cb:a3:e9:8d:fb:61:56:0a:c3:ab:ec:3f:16:6d:12:
bc:68:ec:9a:8a:a4:23:d2:16:a3:45:6e:78:dd:ef:
17:14:4e:99:54:42:9e:c0:2a:9f:09:81:7c:79:74:
c1:11:c1:b8:7a:c6:4c:ea:f7:21:12:fc:ee:7e:82:
3d:7e:4b:58:3a:4d:cc:04:c7:ff:ef:5f:e4:06:61:
25:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0C:C2:5B:49:02:8F:22:FB:78:E6:8D:D2:D8:AB:BF:F5:7E:DE:EC
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/6wzCW0kCjyL7eOaN0tirv_V-3uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.38.0/23
Signature Algorithm: sha256WithRSAEncryption
72:94:5e:12:96:8b:62:0b:95:a3:39:86:71:80:f7:84:20:00:
7d:7c:da:05:3f:5d:6f:5f:a9:91:58:ba:ee:eb:73:4b:01:c4:
54:ca:b1:27:46:47:66:e1:26:e8:d1:ea:53:40:89:f7:ee:3d:
9a:d0:34:db:ad:01:b0:76:8b:30:dd:7f:ec:51:f3:47:e1:1c:
4c:40:08:74:1b:e5:84:c6:16:fc:0b:d9:3c:f8:7a:8f:9e:f0:
de:8e:58:6c:ae:13:e0:f8:2e:a1:ac:73:24:52:ae:60:3f:bf:
93:2e:3f:64:89:c1:85:6d:57:63:77:c3:c1:53:1a:6a:96:b7:
e0:ff:1c:70:8a:8e:5e:29:05:ed:a3:39:5a:45:ac:67:19:0b:
59:58:8c:09:ae:75:67:f9:2d:37:4a:c6:bc:7d:81:7b:bf:3b:
f0:50:b5:cc:1c:11:9c:42:f3:92:ed:e2:f6:da:68:8a:8a:58:
e8:fc:55:0f:de:86:de:97:7b:01:68:8b:d7:04:b1:d5:ca:92:
bb:dc:3b:74:7c:7e:c5:bd:0c:97:8d:03:a6:6c:4c:a4:83:25:
ad:55:f3:82:d4:18:08:58:79:6b:d0:53:fe:0b:b8:9f:65:11:
50:c9:35:f6:b4:c8:84:dd:b1:cc:33:76:ef:95:35:66:6e:e3:
81:63:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:48 2025 by rpki-client