Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa
File: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (raw, json)
Hash identifier: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=
Subject key identifier: 47:39:89:14:CD:70:E2:57:0A:6F:E7:0C:31:01:F1:C0:E5:70:68:68
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0194221FA421F23FAB9D5463978F0FC97226
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa
Signing time: Wed 01 Jan 2025 13:48:06 +0000
ROA not before: Wed 01 Jan 2025 13:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31034
IP address blocks: 185.94.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a4:21:f2:3f:ab:9d:54:63:97:8f:0f:c9:72:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47398914cd70e2570a6fe70c3101f1c0e5706868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:38:1c:2e:37:1d:93:c2:a4:51:e5:3a:3c:
0b:f1:ee:25:03:ce:3e:fc:7b:27:48:67:50:a3:38:
be:8f:62:2f:eb:61:62:33:38:8d:df:ed:87:3a:50:
86:b5:aa:b8:99:b0:10:f3:cb:d6:21:56:06:ad:a9:
bb:dd:8f:26:9e:f5:00:bb:d6:9c:de:e9:06:6e:44:
e7:f8:f1:3b:27:3f:b4:db:d9:77:1e:01:b4:e4:5a:
e6:4b:64:0a:57:16:96:dc:61:9f:d8:5a:69:e1:a3:
03:71:4e:af:89:10:e8:f8:bd:16:89:06:63:56:55:
91:87:c7:86:d2:ec:c9:46:2e:73:fa:77:12:4c:b3:
3c:72:f7:83:9d:ae:24:06:fb:c2:9b:a4:50:3a:da:
5b:c5:99:de:c6:e0:4d:a9:48:91:bd:ec:8f:b6:1d:
cd:56:fd:6f:47:52:a4:d4:b6:15:ea:43:a6:d1:6b:
b5:6f:a7:3f:e9:66:4d:83:9f:f0:2e:14:13:12:1d:
ab:93:08:8d:34:62:93:96:fc:d8:8f:26:51:3a:de:
84:38:38:6f:55:9d:62:e2:e1:2c:5d:5c:f5:9e:f9:
dc:c9:66:20:d8:b5:ec:b5:0c:e5:28:24:cc:11:1e:
e8:ff:ec:ef:34:71:70:ae:af:1f:e7:c2:89:32:34:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:39:89:14:CD:70:E2:57:0A:6F:E7:0C:31:01:F1:C0:E5:70:68:68
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d5:1b:79:29:50:8f:64:c1:57:eb:0a:de:27:ad:9e:13:b2:
c4:83:37:5d:11:19:37:dc:de:d0:22:43:0b:6e:32:6f:99:33:
9e:93:13:fa:52:6a:0e:49:33:8c:66:cd:57:b0:ca:9c:43:44:
45:9a:ce:9e:e2:36:28:8f:17:4f:93:eb:32:d5:4e:84:b6:6f:
3c:32:92:93:e4:2e:be:44:15:25:6a:31:5b:32:62:79:79:4f:
b5:04:11:8c:19:24:1d:a4:7a:50:21:eb:29:f8:15:eb:95:c6:
0b:6b:f5:7e:11:a3:2d:20:1a:a5:5d:e7:7c:ac:94:39:6c:8f:
78:0d:6c:ea:e9:d7:b7:19:4e:91:8d:3a:1f:ad:63:01:83:b5:
09:e0:19:00:77:76:14:31:be:89:fb:10:9c:22:84:91:1c:d8:
4f:48:8d:2b:e3:2f:b3:4a:ab:c9:46:e0:30:59:a2:1d:68:e6:
dd:bc:4d:b3:1e:70:79:8b:46:11:5e:4f:36:f3:a7:b6:3a:40:
e3:fe:3f:80:da:5d:c7:3d:83:ce:90:9b:40:49:40:3f:e3:45:
0e:fe:ea:d6:86:4b:71:aa:a8:fe:76:ab:6f:78:20:e0:88:b2:
c1:a4:eb:25:06:fe:ca:46:cf:59:a3:0b:23:d0:bc:e9:aa:0d:
19:7a:1b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:41:51 2025 by rpki-client