Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/byfAz36QPO1zWRGDAvBxGCJUgUc.roa
File: byfAz36QPO1zWRGDAvBxGCJUgUc.roa (raw, json)
Hash identifier: cj5k9JTRqENUIcOxIhQN0l2jcQzpbWQBrAEBDWIt2vI=
Subject key identifier: 6F:27:C0:CF:7E:90:3C:ED:73:59:11:83:02:F0:71:18:22:54:81:47
Certificate issuer: /CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Certificate serial: 019428263678DF4538F42740FA41D41F8749
Authority key identifier: 74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/byfAz36QPO1zWRGDAvBxGCJUgUc.roa
Signing time: Thu 02 Jan 2025 17:53:00 +0000
ROA not before: Thu 02 Jan 2025 17:53:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39227
IP address blocks: 194.6.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:36:78:df:45:38:f4:27:40:fa:41:d4:1f:87:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7475a2c9588fc695d2754283dcd3d123d1f77811
Validity
Not Before: Jan 2 17:53:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f27c0cf7e903ced7359118302f0711822548147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:76:13:b2:d0:e8:dd:41:99:83:ed:ff:28:
50:ae:fd:3f:10:81:ff:f5:f4:63:16:be:69:72:f5:
7e:fd:1b:5c:64:f8:1d:cd:0b:d0:46:5d:f4:3f:00:
27:16:f4:8a:90:c6:69:9a:b8:7e:ac:31:85:d5:9c:
c6:9d:4b:38:fc:fb:5e:b3:bc:fa:5a:6d:0c:74:48:
e6:8c:de:f4:82:25:0e:6c:db:c0:69:a0:4c:49:30:
6f:a3:9e:7a:4e:3c:14:81:6a:ee:4c:ed:bd:ca:f3:
20:e0:90:10:42:14:ee:fd:20:ed:ed:2f:97:2d:f6:
df:c5:97:4c:85:18:03:a2:2b:8e:48:8d:8b:32:f7:
c1:9f:3a:be:de:1d:3d:fd:7b:f3:82:f8:1a:48:ee:
f2:05:d9:6a:01:83:d2:ec:a2:a7:76:08:b8:8a:a1:
d4:56:22:74:d1:fa:63:10:5f:91:fe:1b:f6:24:20:
06:f7:f9:cf:11:4a:8c:03:e8:21:02:90:26:e2:76:
cc:60:e1:c8:f7:87:52:72:3b:44:8f:50:53:1e:95:
1e:f3:24:b2:66:36:1a:91:8e:f3:7b:16:b8:9b:ad:
cc:4f:ae:f0:a8:b7:9f:b0:69:4c:49:13:96:0a:6a:
1d:8a:f0:3a:f2:4d:ff:cb:c2:a6:d0:90:b3:02:46:
43:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:27:C0:CF:7E:90:3C:ED:73:59:11:83:02:F0:71:18:22:54:81:47
X509v3 Authority Key Identifier:
keyid:74:75:A2:C9:58:8F:C6:95:D2:75:42:83:DC:D3:D1:23:D1:F7:78:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHWiyViPxpXSdUKD3NPRI9H3eBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/byfAz36QPO1zWRGDAvBxGCJUgUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2898e6-0d79-454e-ab54-40be0c463b90/1/dHWiyViPxpXSdUKD3NPRI9H3eBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.192.0/22
Signature Algorithm: sha256WithRSAEncryption
21:d9:d3:9d:4e:ce:c7:12:9e:f5:15:e6:eb:b6:83:85:d8:f8:
8d:67:9f:bb:df:39:88:a7:1a:24:27:55:15:4c:94:77:a2:44:
34:83:3e:2c:c6:f6:88:fa:98:29:b4:a2:35:de:1b:38:68:33:
e6:26:2d:79:b2:d8:8d:16:cf:3c:20:13:9e:92:ca:e0:57:e5:
43:3c:25:93:26:f5:56:1a:c6:65:36:93:a9:b5:fb:42:69:37:
c4:e2:c5:6e:95:d8:c2:81:8c:a0:22:ae:91:bc:1c:ff:46:b5:
b1:a1:85:e7:5c:a3:f3:91:1d:42:03:38:d2:1b:03:b0:a4:4d:
ea:1e:0a:fd:08:b2:c4:79:56:07:6a:73:d4:78:10:cf:0b:7e:
c3:2a:6e:79:ec:44:8a:e4:7e:57:57:b6:11:ad:4c:74:15:e0:
69:96:a9:3f:d4:9d:72:92:a6:7a:16:60:34:6f:54:95:6c:35:
02:d9:da:2a:8a:1e:b3:9c:14:14:ad:6c:53:48:a1:34:f6:38:
23:a4:19:b3:02:12:23:44:9d:80:ff:a0:62:ec:e1:10:14:d3:
2c:dd:48:6b:b0:de:76:ad:60:50:8c:d7:aa:e5:05:10:fb:3b:
4d:58:4f:b2:2e:ff:d2:3d:db:a0:df:c3:41:75:7b:ac:24:7e:
c0:3b:26:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:52 2025 by rpki-client on console.sobornost.net