Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1Z-zCNSxwwGR5Yd2zMe5Wf5kaGI.roa
File: 1Z-zCNSxwwGR5Yd2zMe5Wf5kaGI.roa (raw, json)
Hash identifier: fAwINqu8pF2sqFhHeDSmmFm60GW2WCeV5hM2N//U4OQ=
Subject key identifier: D5:9F:B3:08:D4:B1:C3:01:91:E5:87:76:CC:C7:B9:59:FE:64:68:62
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA4C6284A67F88099914D4445959B4
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1Z-zCNSxwwGR5Yd2zMe5Wf5kaGI.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62000
IP address blocks: 93.127.158.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4c:62:84:a6:7f:88:09:99:14:d4:44:59:59:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d59fb308d4b1c30191e58776ccc7b959fe646862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:a1:d2:79:39:1d:fc:d5:0f:01:8d:71:2e:
b4:3e:67:f7:88:af:e9:10:30:34:88:50:eb:8c:72:
4e:b7:2e:81:e9:25:5f:31:cc:61:de:7b:76:19:48:
ca:04:eb:00:5d:13:ed:fb:9e:fd:0b:c7:b0:1d:a5:
8a:a6:d1:6b:78:de:15:6e:58:53:b1:6e:73:bc:5f:
09:e3:fd:e3:d2:4c:cf:ca:4f:1d:f0:19:b6:2d:92:
50:32:3e:4e:65:39:41:fb:48:97:db:d7:a1:7e:78:
a2:a9:f5:ba:1d:92:9e:32:a2:ad:10:e4:bf:87:d6:
db:c5:7f:b9:1f:7e:22:2b:fd:62:44:cf:05:fb:8d:
dd:d1:a1:76:cc:02:f8:7e:44:ab:6d:e6:41:22:40:
ad:81:df:7c:d4:6b:26:6d:51:68:0b:3d:99:77:44:
97:14:d7:52:4a:20:93:13:40:b1:f0:b2:9e:62:37:
5c:b3:c6:d0:ba:08:78:68:46:2f:bb:4a:0b:38:df:
03:dd:74:08:e5:35:07:1f:ab:9a:43:d1:b7:02:e4:
d7:fe:d1:75:58:41:bb:0d:38:e8:0a:fb:24:95:2c:
42:71:8a:51:c9:fd:38:1a:0f:d4:33:15:09:59:f0:
b0:5c:5c:a9:74:35:dd:f0:af:21:be:98:5f:4b:95:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9F:B3:08:D4:B1:C3:01:91:E5:87:76:CC:C7:B9:59:FE:64:68:62
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/1Z-zCNSxwwGR5Yd2zMe5Wf5kaGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.158.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:e9:be:02:22:80:e5:64:56:b9:e3:b7:dd:bd:68:d2:08:ef:
78:86:dc:25:44:fc:9d:8e:2b:d2:94:9b:39:9c:ab:4a:16:17:
95:60:38:aa:15:b0:a5:90:b4:09:fc:aa:e8:58:b8:6a:e8:cc:
f1:9f:f4:8b:35:98:68:61:45:a3:b5:05:bc:c1:c4:9e:f5:9d:
0d:8a:c0:92:b5:6c:d5:c7:ac:7c:65:dd:3a:a4:42:0e:9f:b8:
87:b7:79:fe:1b:bb:88:23:7b:79:17:8a:b4:f6:b3:22:2e:c1:
3e:26:04:ca:ff:97:f8:fc:aa:ca:a7:44:1c:f3:89:f6:01:10:
b4:ed:8a:9b:42:33:95:a0:93:91:2c:15:ce:e7:79:aa:8b:ab:
b7:a5:b0:dd:fc:6e:23:2c:f5:fa:97:e6:03:78:5c:cb:92:1f:
4b:ed:9f:a7:b3:00:26:e1:e6:de:4e:bc:25:08:c4:c9:ae:0b:
4a:1b:e0:38:92:fb:0d:b6:0f:8e:d9:8b:4e:d8:a0:f6:e7:c6:
bd:ac:d8:b0:83:36:11:f6:27:38:18:72:75:1a:c8:b0:9f:ba:
08:7c:8c:cb:7e:62:83:29:39:39:86:94:06:a1:c2:42:6f:af:
a3:e2:10:40:72:c9:85:00:f0:c3:78:f8:6a:33:fc:8b:9c:3c:
39:06:34:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:21 2025 by rpki-client