Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/z3a7_omYIsWqMEnJ_BzZl78O_t8.roa
File: z3a7_omYIsWqMEnJ_BzZl78O_t8.roa (raw, json)
Hash identifier: RdW+vdy60U8UYXgdCCCXW54Dw80tnyrg91KnPGG6tiM=
Subject key identifier: CF:76:BB:FE:89:98:22:C5:AA:30:49:C9:FC:1C:D9:97:BF:0E:FE:DF
Certificate issuer: /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial: 018CC8DF31AED9E4A71C464A90984DE4245F
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/z3a7_omYIsWqMEnJ_BzZl78O_t8.roa
Signing time: Tue 02 Jan 2024 06:31:59 +0000
ROA not before: Tue 02 Jan 2024 06:31:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8414
IP address blocks: 156.106.0.0/16 maxlen: 24
193.5.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:31:ae:d9:e4:a7:1c:46:4a:90:98:4d:e4:24:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
Validity
Not Before: Jan 2 06:31:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf76bbfe899822c5aa3049c9fc1cd997bf0efedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:67:a2:75:60:80:48:bf:89:15:d9:28:aa:
c2:b7:3a:be:17:8b:b3:cf:e3:9a:61:86:17:f0:e1:
01:56:4d:04:a5:10:8b:f4:da:20:9c:68:c2:aa:a9:
6e:fe:86:aa:17:fa:9d:3a:b5:41:69:2a:ad:97:2d:
21:c6:80:07:7c:eb:44:f2:20:b4:15:35:b1:d5:81:
34:8f:5c:e8:4a:3d:9e:71:f0:21:b8:6d:6f:53:f1:
94:1f:d4:f3:83:b7:2c:c4:b8:57:f9:ac:20:5d:96:
76:8e:dc:62:a9:00:1f:6e:39:f2:1e:06:90:36:04:
6f:c7:ea:ac:95:bd:71:8e:94:e7:01:4e:30:c8:59:
30:75:88:a3:e8:3b:ac:4e:8e:d9:5d:db:3e:30:3f:
12:12:95:f3:9a:36:e4:c3:d7:7a:36:2f:75:32:0f:
7c:65:c9:cc:4e:dc:e1:fe:60:f8:93:21:51:87:b2:
56:87:73:03:0d:f2:33:e5:28:09:df:ba:31:45:96:
38:33:04:3d:06:96:b4:f4:2c:9d:af:4f:f3:b7:94:
70:63:6a:de:cd:9a:3f:a0:40:8d:6d:7c:72:07:b2:
c5:62:14:9b:94:69:59:d7:45:05:8b:6b:47:87:a1:
4c:b8:94:b4:d3:4a:b4:bd:c1:19:33:ed:5b:ae:28:
73:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:76:BB:FE:89:98:22:C5:AA:30:49:C9:FC:1C:D9:97:BF:0E:FE:DF
X509v3 Authority Key Identifier:
keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/z3a7_omYIsWqMEnJ_BzZl78O_t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.106.0.0/16
193.5.62.0/24
Signature Algorithm: sha256WithRSAEncryption
98:98:9b:25:7f:2f:97:45:3e:7b:d7:00:8c:56:a8:e2:26:04:
c3:55:1d:89:75:68:85:2a:24:94:ac:27:eb:82:00:11:d0:70:
eb:bd:d0:f3:61:70:01:41:65:07:5a:fc:9f:5d:de:d6:cc:51:
ef:2f:8d:57:bb:e0:73:85:32:6e:e3:01:9d:9e:1a:1a:49:1c:
25:99:d3:45:f3:37:67:23:79:ff:5a:00:fc:40:02:13:25:79:
5f:49:7d:41:59:58:ce:b3:65:b7:0f:b2:65:54:c9:e9:8e:74:
5c:1e:08:08:cc:d6:b6:97:57:38:69:d1:31:43:3c:29:f0:5e:
1b:f7:4f:46:7b:8e:ef:d7:97:2e:9b:e9:6d:c8:b8:d1:3a:3c:
2b:fd:6b:20:19:30:b4:4b:f5:eb:69:03:76:5d:54:8b:a5:5d:
d7:36:2e:1a:9d:eb:28:cb:c8:ee:36:f6:df:1f:fe:3a:f9:81:
ba:87:95:f4:98:37:7a:eb:5f:49:db:fa:24:af:5c:cd:19:23:
a1:a2:f4:32:d2:86:8b:81:ff:1d:3f:c2:08:67:e7:27:a6:27:
c1:98:eb:c8:90:4f:7f:71:91:a0:00:18:a3:6b:b7:9c:e2:b9:
4a:8e:26:d4:51:3a:b7:d8:8f:c7:01:5a:66:14:7b:bf:46:f4:
7e:08:e5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:38 2025 by rpki-client