Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ev2TWqKbJ7VUMO4EPpHXy91JxI4.roa
File: Ev2TWqKbJ7VUMO4EPpHXy91JxI4.roa (raw, json)
Hash identifier: EwdPw62etUPv0XLAAP4eXSSFSkJUduKv3T28PVE93LI=
Subject key identifier: 12:FD:93:5A:A2:9B:27:B5:54:30:EE:04:3E:91:D7:CB:DD:49:C4:8E
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 01856ED4EDC393D6CAB200CDB8114548E78C
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ev2TWqKbJ7VUMO4EPpHXy91JxI4.roa
Signing time: Sun 01 Jan 2023 19:35:26 +0000
ROA not before: Sun 01 Jan 2023 19:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50222
IP address blocks: 84.204.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ed:c3:93:d6:ca:b2:00:cd:b8:11:45:48:e7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 1 19:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12fd935aa29b27b55430ee043e91d7cbdd49c48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:77:fa:2c:e1:b2:57:ac:69:7c:7f:92:e3:91:
3a:29:e9:98:cd:06:ac:3b:5c:75:e7:11:85:cd:29:
97:88:eb:cf:7e:14:8d:8b:8c:2e:33:ff:b5:ce:d0:
e2:bb:39:27:a1:82:10:a4:ec:f3:ec:17:fc:b1:1d:
61:cf:22:d4:36:82:02:5b:2c:71:80:98:04:d7:9b:
0a:10:34:c3:c3:76:4b:7e:28:5f:69:7c:43:e0:07:
9f:b5:35:4d:48:d5:c3:ec:06:a5:15:70:f0:e6:45:
38:a0:f3:2e:b5:50:24:94:39:c0:ca:f5:8d:12:e5:
8e:ae:d6:e3:3c:85:d8:b2:22:f9:b3:3a:18:2a:89:
c3:fd:4f:97:2b:ef:c3:7e:26:a5:ca:e7:55:54:c6:
af:c3:f1:71:0e:0e:0a:20:14:17:34:93:44:36:4a:
05:c0:b3:56:cb:6f:7c:ee:de:49:69:67:a5:1c:54:
3b:b9:51:bd:07:c3:75:b9:44:ad:54:40:25:05:aa:
8b:5a:44:8f:f0:f9:fa:cf:69:38:18:50:3f:48:d9:
a5:53:b1:d9:36:99:57:b4:58:a7:fc:e9:ec:0b:bc:
6b:f3:08:05:f3:c0:79:b0:6d:d2:70:d1:ed:d9:6d:
5c:00:65:e9:2a:6a:ab:b4:6c:41:3f:12:4f:be:9d:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FD:93:5A:A2:9B:27:B5:54:30:EE:04:3E:91:D7:CB:DD:49:C4:8E
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/Ev2TWqKbJ7VUMO4EPpHXy91JxI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.204.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:86:2f:92:e0:55:03:ca:9b:4b:89:41:87:df:16:fa:7a:93:
aa:5a:f6:5f:a9:65:d0:a3:ba:b1:5f:de:7a:c9:79:e8:cb:a3:
91:88:d6:70:ff:59:90:19:c6:97:f1:5e:00:21:0d:27:40:7b:
0d:86:09:9b:84:4c:3f:7e:36:b0:39:e8:96:b9:ca:6b:3b:0d:
06:d4:d1:db:9f:7e:70:bb:63:fb:87:c4:27:dd:01:4f:7d:9b:
23:aa:4a:21:49:b8:a4:16:4f:e7:9a:f2:1f:4d:46:f7:f0:04:
8e:c4:eb:6b:e0:2e:cb:91:f9:a3:7c:9d:ed:75:13:4a:69:c3:
17:7a:89:c7:eb:c5:1b:fc:b5:db:d6:93:27:21:3b:3d:f0:40:
a0:e2:14:52:4e:06:a9:a1:94:e1:9c:c3:b7:6e:f5:2c:1b:8a:
b5:41:50:bb:f0:d7:d1:08:dd:97:9e:f1:f2:a3:1d:33:2b:19:
9f:5c:7c:76:43:29:7d:65:57:54:35:a6:a1:43:1a:aa:b2:df:
ca:2e:b8:7a:ea:14:7c:a0:f6:d3:80:55:0b:c4:98:05:1f:46:
ee:7a:cb:ff:4a:1d:b6:73:90:95:2b:48:46:d8:90:e2:45:7b:
4c:17:f6:f8:6d:90:79:2d:ee:f3:07:eb:ae:f7:8c:33:0f:ba:
73:40:01:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:48:34 2025 by rpki-client