Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/p_94zjXvIxvZX3aQA57M25We4NA.roa
File: p_94zjXvIxvZX3aQA57M25We4NA.roa (raw, json)
Hash identifier: vvn9L+UEyAju3ZqufARR85jtYJnKTidqsL/kwmEYQZc=
Subject key identifier: A7:FF:78:CE:35:EF:23:1B:D9:5F:76:90:03:9E:CC:DB:95:9E:E0:D0
Certificate issuer: /CN=dee12d8c09292452c66b3a3521095333a9ecfe95
Certificate serial: 01856B933F4BF62A572FFFF7BD28E19E0892
Authority key identifier: DE:E1:2D:8C:09:29:24:52:C6:6B:3A:35:21:09:53:33:A9:EC:FE:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uEtjAkpJFLGazo1IQlTM6ns_pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/p_94zjXvIxvZX3aQA57M25We4NA.roa
Signing time: Sun 01 Jan 2023 04:24:49 +0000
ROA not before: Sun 01 Jan 2023 04:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211298
IP address blocks: 87.236.176.0/24 maxlen: 24
193.163.125.0/24 maxlen: 24
2a06:4880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:3f:4b:f6:2a:57:2f:ff:f7:bd:28:e1:9e:08:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee12d8c09292452c66b3a3521095333a9ecfe95
Validity
Not Before: Jan 1 04:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7ff78ce35ef231bd95f7690039eccdb959ee0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:ff:46:f4:e5:98:ca:cd:6f:2a:71:39:4d:
80:7b:4f:93:e6:ac:10:6f:33:d1:18:53:e5:b3:85:
8e:34:e0:63:95:b9:e8:a5:5c:d7:54:7a:df:33:f3:
0b:89:5a:86:b0:a7:b4:6e:64:a9:c3:9c:7d:d1:9d:
e1:ae:af:e7:aa:58:9f:af:18:88:81:a4:82:05:f7:
03:1c:b7:14:ab:d5:fb:e4:f1:0d:22:52:f5:4f:50:
68:11:dc:77:26:38:71:5d:a3:90:50:ce:2c:19:e0:
e9:07:8d:0c:f9:8b:28:7b:d8:16:73:12:b9:ab:73:
63:f3:4f:43:5c:42:47:9a:ba:27:9b:49:29:2d:94:
4b:35:1a:f3:34:2a:c9:9f:6d:fd:eb:53:ab:d2:69:
a5:2b:71:a5:8f:9e:9a:2b:2c:a1:d0:e7:6e:b2:1e:
cb:ed:07:1d:41:93:c0:62:b9:72:31:bf:44:7c:cf:
3a:66:a2:5d:b7:f4:82:d1:d0:86:b9:9c:8d:38:24:
30:43:09:38:90:02:ad:56:99:d2:5f:af:7f:52:b3:
b3:17:dd:c0:87:d9:43:61:40:36:4a:0e:cc:a0:17:
dd:2f:17:8f:c4:d7:f6:30:d4:09:9a:06:64:fe:cb:
e9:de:09:2a:7f:bf:d8:4e:04:a3:b4:03:e2:cc:be:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:78:CE:35:EF:23:1B:D9:5F:76:90:03:9E:CC:DB:95:9E:E0:D0
X509v3 Authority Key Identifier:
keyid:DE:E1:2D:8C:09:29:24:52:C6:6B:3A:35:21:09:53:33:A9:EC:FE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uEtjAkpJFLGazo1IQlTM6ns_pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/p_94zjXvIxvZX3aQA57M25We4NA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b21dfe-f138-406c-90ac-8823ac349b8e/1/3uEtjAkpJFLGazo1IQlTM6ns_pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.176.0/24
193.163.125.0/24
IPv6:
2a06:4880::/32
Signature Algorithm: sha256WithRSAEncryption
69:b6:3f:58:8b:a6:c6:3f:be:db:11:5a:d9:db:6e:04:4b:7a:
bd:ad:6d:3b:76:c7:f5:30:29:bc:77:ff:d2:f5:54:93:54:dc:
0f:59:8c:16:d8:36:e5:5d:06:b8:c5:3e:41:d2:20:7e:78:72:
28:9c:7c:d0:41:fe:c8:21:3b:44:e2:93:26:41:c8:3b:84:7f:
5b:6b:bb:d5:bb:46:e1:96:df:3e:f7:1b:fc:e0:65:42:7d:60:
ab:55:d5:c6:47:3b:24:03:af:85:5e:8c:5d:61:f4:3f:4f:08:
c3:ae:3c:63:1a:ff:41:fb:70:08:69:b2:eb:cc:24:e1:42:6a:
f4:47:1b:92:a1:54:9e:ed:39:8e:57:71:11:3e:d5:3f:82:2b:
04:fe:39:a4:85:28:87:b9:d1:24:c2:b8:0d:cc:9c:7a:7f:37:
2d:db:4c:b7:4a:57:6b:dd:c4:3d:11:e3:e6:17:d6:3a:8c:ef:
67:09:82:09:37:82:69:ef:a9:f0:64:91:0d:d4:f8:59:7d:81:
4a:3e:32:49:af:99:78:aa:90:98:5b:2c:66:be:7a:00:36:b0:
fe:94:e2:14:96:69:8c:d9:a2:85:7d:a2:f0:25:f9:fd:b4:77:
fb:42:7f:c3:56:af:f5:79:cd:01:d7:8d:65:51:d0:6f:a7:7c:
8c:2d:b0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:48:03 2025 by rpki-client