Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/rFHFxww2E9wP7votF81meoMurDs.roa
File: rFHFxww2E9wP7votF81meoMurDs.roa (raw, json)
Hash identifier: qcznvXqTDOmoaZk1SnbUBUS/Rwr8wrMh0yAX7SYheU0=
Subject key identifier: AC:51:C5:C7:0C:36:13:DC:0F:EE:FA:2D:17:CD:66:7A:83:2E:AC:3B
Certificate issuer: /CN=73d09d895b43a622a4521b95b99969dc673c0d7a
Certificate serial: 018CC64B5513F9E96D1E70F719D94EB791E1
Authority key identifier: 73:D0:9D:89:5B:43:A6:22:A4:52:1B:95:B9:99:69:DC:67:3C:0D:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/rFHFxww2E9wP7votF81meoMurDs.roa
Signing time: Mon 01 Jan 2024 18:31:14 +0000
ROA not before: Mon 01 Jan 2024 18:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 93.177.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:55:13:f9:e9:6d:1e:70:f7:19:d9:4e:b7:91:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73d09d895b43a622a4521b95b99969dc673c0d7a
Validity
Not Before: Jan 1 18:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac51c5c70c3613dc0feefa2d17cd667a832eac3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:41:b1:91:90:ca:29:ea:3f:d7:ab:e3:61:d4:
73:f4:10:72:40:7b:13:c3:17:44:f3:e6:e5:a4:5f:
d4:c7:a8:cd:b9:36:c7:42:06:c0:74:1e:d5:64:0f:
e9:c0:49:2d:08:b1:8f:29:39:48:a4:f0:59:d4:a9:
84:0f:69:e8:1f:0d:2c:ab:f6:81:00:e5:fb:37:fa:
c2:a2:2f:b5:fb:a4:b6:a8:a0:68:5f:5b:1b:a5:7d:
c7:59:e7:a9:c8:b7:87:0a:21:70:16:c2:39:54:fc:
c2:ee:34:d3:fe:70:b9:82:29:a7:04:b7:75:13:78:
98:f1:90:19:ef:7c:b6:67:d1:02:18:2e:f6:9f:9d:
7a:cc:93:b1:d0:13:1c:ae:7e:7d:23:10:03:c4:2a:
09:e4:41:53:cf:6f:d6:21:65:ae:b2:1c:48:7c:bb:
6d:40:58:6a:76:0a:ed:9d:5e:bc:57:c5:0c:75:79:
70:21:e3:a8:d2:29:18:38:7e:59:e0:13:00:1f:a0:
08:48:4f:70:0a:51:68:cd:6b:53:86:e7:97:22:40:
69:1d:b8:93:20:e1:3d:48:3f:7f:6c:e5:57:94:3b:
08:dc:69:b3:fe:41:7e:01:bf:a1:b8:9f:27:b7:21:
59:e8:fc:53:b1:6b:52:ac:cb:2e:6a:65:a0:30:c4:
75:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:51:C5:C7:0C:36:13:DC:0F:EE:FA:2D:17:CD:66:7A:83:2E:AC:3B
X509v3 Authority Key Identifier:
keyid:73:D0:9D:89:5B:43:A6:22:A4:52:1B:95:B9:99:69:DC:67:3C:0D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/rFHFxww2E9wP7votF81meoMurDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2970df-509e-42d3-b011-9b9ff9c24051/1/c9CdiVtDpiKkUhuVuZlp3Gc8DXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.104.0/24
Signature Algorithm: sha256WithRSAEncryption
15:58:4b:08:97:8f:dc:7e:ad:ae:55:d7:70:08:5a:64:59:f7:
5e:57:45:51:98:9a:41:6f:69:a3:a3:05:e6:41:18:a7:a2:a3:
b0:a3:c3:c2:6e:16:08:ec:a7:60:2c:90:ee:71:ce:d9:3a:8d:
54:64:fa:b6:e2:12:8a:78:5f:12:55:fa:c9:4d:0f:20:60:f4:
df:c0:64:b6:bf:3d:8a:f2:a0:da:f4:a0:8c:0e:ce:6e:57:6b:
f5:86:ce:4a:14:b0:e6:32:81:28:a4:22:bb:58:54:3f:c8:88:
33:10:34:6a:98:bc:e7:6d:be:09:b0:c5:1a:ff:26:8e:3f:fe:
5e:24:e7:d8:97:38:3f:60:e7:3c:1f:d0:b3:4b:e2:e9:8a:c9:
ba:73:6a:79:93:d3:3b:5c:9b:51:36:55:c5:78:66:a2:47:9f:
77:54:67:4a:3e:94:70:54:ea:d5:7f:37:df:b0:01:91:5d:75:
3e:4c:1c:aa:33:91:f1:d0:a9:11:3b:50:cd:6a:82:dc:1c:9b:
8d:65:d2:84:43:f4:5f:2a:d8:d7:37:dd:17:4c:75:e7:8f:47:
3e:fe:4a:15:d7:81:e0:ed:ed:86:21:6a:50:87:d3:5c:c5:3b:
d3:f9:e3:68:85:df:b6:26:9f:d0:75:b3:7d:a9:86:94:c2:d5:
e5:92:1a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:10:27 2025 by rpki-client