Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0CZBzWEnWhrwE6rz3aQTvxDGPeM.roa
File: 0CZBzWEnWhrwE6rz3aQTvxDGPeM.roa (raw, json)
Hash identifier: 92BsSRbsWY2N2Gc5DIaZuLHfoqRCKyW6zKlt0wMYOVI=
Subject key identifier: D0:26:41:CD:61:27:5A:1A:F0:13:AA:F3:DD:A4:13:BF:10:C6:3D:E3
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018BA4F84535F43EB1DD1263FC3C58857790
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0CZBzWEnWhrwE6rz3aQTvxDGPeM.roa
Signing time: Mon 06 Nov 2023 14:10:15 +0000
ROA not before: Mon 06 Nov 2023 14:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63018
IP address blocks: 194.110.173.0/24 maxlen: 24
2a09:ff00:101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a4:f8:45:35:f4:3e:b1:dd:12:63:fc:3c:58:85:77:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Nov 6 14:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d02641cd61275a1af013aaf3dda413bf10c63de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:31:3f:16:45:0d:de:e3:99:3c:fc:e5:25:d7:
ff:01:2b:e2:99:ed:7e:e9:d3:d5:1c:ad:7a:b4:3c:
9f:5d:e8:c0:92:98:97:79:14:d1:5d:be:bb:93:b2:
60:f2:bf:3d:82:d5:b0:aa:4d:3a:58:5b:e6:e0:27:
15:8a:00:20:60:eb:fd:85:77:29:be:f9:62:0e:e6:
d1:3e:d0:5b:90:fb:ec:6c:23:97:3c:f8:51:c0:2b:
80:3a:4d:29:4e:f8:a7:30:d4:0e:30:ea:1e:c8:78:
ef:d5:35:1c:9e:76:77:b8:36:8f:28:4f:91:ba:ef:
d6:29:b8:4f:df:8e:bd:51:d1:3c:78:e8:03:0a:27:
37:54:36:64:2b:43:8a:39:8d:7f:ed:55:fe:3e:ad:
be:6a:7b:47:13:2b:9c:aa:ad:fb:25:49:71:a6:0c:
0c:f8:cd:a7:4b:a2:45:48:e4:bf:5c:66:22:fd:b6:
06:8f:e1:dd:a9:7e:1e:2e:2a:fe:9c:dc:f7:58:a6:
48:d6:4b:cc:97:fe:41:cf:50:a2:c8:6f:99:7e:65:
09:3b:af:11:c2:c0:f2:2b:02:29:98:2f:0a:a0:3c:
28:ed:82:a9:35:58:9b:46:4d:c0:f1:a8:cc:85:49:
39:95:ed:ba:ad:a1:fc:93:05:46:fc:44:74:70:56:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:26:41:CD:61:27:5A:1A:F0:13:AA:F3:DD:A4:13:BF:10:C6:3D:E3
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/0CZBzWEnWhrwE6rz3aQTvxDGPeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.173.0/24
IPv6:
2a09:ff00:101::/48
Signature Algorithm: sha256WithRSAEncryption
52:4f:d1:1f:10:cd:9f:d8:38:04:65:72:c3:24:fd:35:8e:e0:
04:01:cf:b8:be:67:26:3d:55:44:ce:62:d0:d5:a0:d3:72:8a:
04:40:fb:63:96:84:15:83:17:af:d9:7d:7d:8f:6a:34:92:c6:
25:7c:9b:81:29:ac:2e:ad:f9:ff:61:df:f5:a5:ca:ed:4d:b5:
ae:9c:5a:ed:78:d4:43:fd:e0:15:12:88:e0:c7:30:35:3e:8d:
20:1a:1d:65:c5:69:99:0c:d5:6d:05:64:73:18:5a:85:c0:10:
c9:51:f1:a3:a1:a9:de:ef:ba:71:2c:2d:30:be:33:af:c6:aa:
04:fa:99:5f:ae:b2:9d:ad:84:06:df:30:ed:11:e0:40:31:5b:
d5:f6:e4:b1:39:8b:ef:f5:4a:fc:1d:62:02:f3:1f:8a:82:6b:
15:01:58:d3:7d:4c:81:fb:72:1e:73:c7:2f:22:eb:0a:40:51:
be:99:73:71:08:fb:98:57:03:74:a8:4c:b0:cc:19:31:79:41:
58:24:59:97:3c:17:a6:42:ec:37:e5:52:87:a4:3b:45:72:42:
b1:40:19:b3:64:8b:c8:bc:d5:fb:70:3d:84:21:7e:0d:7c:6e:
06:5e:8e:c4:e9:5e:b9:eb:c8:99:97:84:5c:6b:5e:62:24:25:
f5:bf:e9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:21 2025 by rpki-client