Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa
File: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (raw, json)
Hash identifier: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=
Subject key identifier: 20:21:7D:FB:CB:EF:6C:25:D9:13:44:C6:FF:8D:CF:83:EC:58:33:83
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 01941F8C29127B3C0E4E979CCD708EF15898
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa
Signing time: Wed 01 Jan 2025 01:47:46 +0000
ROA not before: Wed 01 Jan 2025 01:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15511
IP address blocks: 94.231.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:29:12:7b:3c:0e:4e:97:9c:cd:70:8e:f1:58:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Jan 1 01:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20217dfbcbef6c25d91344c6ff8dcf83ec583383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:bd:50:34:0b:63:6f:58:14:ad:75:97:a7:
cc:83:fd:60:29:2f:07:1f:3d:4b:96:08:73:6e:d3:
e0:d9:28:54:f6:72:bf:98:7f:77:9d:d9:45:03:e5:
b1:1c:b6:86:a3:99:db:36:b2:bd:d6:9e:41:88:ae:
ac:e0:9b:a2:7f:65:82:47:61:f0:3c:5c:fa:26:29:
0c:f8:69:f2:17:b6:f1:bb:a4:6d:29:ed:3f:4d:21:
cb:5c:b9:75:72:03:51:40:20:fa:59:d0:51:db:8a:
6d:9c:3b:80:d5:56:e9:83:5a:3e:e9:df:bb:dc:96:
3c:99:7f:9d:98:ba:d2:fd:79:85:fd:ff:53:ec:f0:
4f:60:f7:ff:94:9f:96:61:6c:1b:29:ac:6a:39:a8:
9d:7a:17:c7:96:24:4c:91:24:33:66:f4:6a:05:ab:
79:a9:09:0d:c9:80:5e:9f:39:d7:2a:7c:c4:4f:dc:
84:a2:68:ac:a4:32:c4:61:d8:6d:70:3b:95:a6:c6:
be:d1:6a:13:03:b1:ad:54:97:3c:be:c9:5b:11:ae:
89:9d:2a:ba:23:ca:8d:f0:52:4a:f1:eb:41:3c:5f:
4b:31:84:a9:8a:a9:8f:1f:60:e4:34:22:d0:98:9e:
cf:0c:b7:ad:29:44:1a:0d:06:64:94:23:99:1c:44:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:21:7D:FB:CB:EF:6C:25:D9:13:44:C6:FF:8D:CF:83:EC:58:33:83
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.231.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:13:2e:e7:80:15:48:05:71:3c:49:94:55:0a:9d:3a:98:6e:
2c:38:37:2f:5f:67:86:8c:75:d4:25:a1:dd:12:4b:b6:3b:d3:
b1:d8:85:6c:52:a2:18:44:f3:cb:7c:5a:2e:83:41:09:53:8a:
00:5c:fb:c1:a7:6e:53:f1:68:2e:2a:20:09:15:fc:3d:ab:01:
f1:68:a7:b3:c7:80:52:36:54:31:e1:95:43:29:cc:2f:3d:e6:
2c:e4:46:44:3e:f9:1b:c2:0b:23:50:1d:c8:d8:5c:3b:4c:bb:
f4:9e:59:2c:c9:bd:4a:9a:a2:f2:19:27:ef:f1:de:92:0c:c4:
7c:74:bf:37:b7:d4:17:f9:62:f0:25:24:d2:ec:60:0e:df:7b:
93:cf:bb:23:c3:25:78:83:ca:88:cb:32:16:fe:83:21:84:f0:
31:00:d9:8e:7d:e0:7e:a3:f3:a1:06:33:7b:51:6e:94:00:3d:
e1:b0:86:b2:c9:8e:7b:23:09:4d:f5:4c:9b:83:e1:bc:79:b7:
22:87:ed:04:7f:8b:a6:71:9d:38:1b:ee:53:75:aa:c9:df:97:
95:7e:08:22:6e:84:03:0d:e5:5f:7e:65:7e:c8:a3:f8:c8:b9:
06:9a:78:77:04:08:01:ee:4b:61:cd:64:d0:f0:4a:c0:56:e3:
d7:4a:b0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:39 2025 by rpki-client