Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/w9JDZbQcRyDKNjbJTHuRCz3QHeU.roa
File: w9JDZbQcRyDKNjbJTHuRCz3QHeU.roa (raw, json)
Hash identifier: xbfW1AhzMnZ4Oz5JNAvGAqsy0jLgKfRxOO8lEtVLcFk=
Subject key identifier: C3:D2:43:65:B4:1C:47:20:CA:36:36:C9:4C:7B:91:0B:3D:D0:1D:E5
Certificate issuer: /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial: 01941FFA326CE1DF1611E9354A4696ABAACC
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/w9JDZbQcRyDKNjbJTHuRCz3QHeU.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59829
IP address blocks: 94.176.97.0/24 maxlen: 24
212.6.50.0/24 maxlen: 24
2a0c:2f40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:32:6c:e1:df:16:11:e9:35:4a:46:96:ab:aa:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3d24365b41c4720ca3636c94c7b910b3dd01de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c4:41:5e:d6:0f:f7:ba:5e:0c:68:1d:6a:13:
ea:a3:0b:76:b6:8a:d0:bc:c9:e4:70:b0:64:3c:eb:
c9:d5:64:6a:df:d4:d9:47:7e:f9:10:9e:12:c8:4f:
7c:e6:0c:7c:59:6c:07:c8:99:23:13:dc:05:bf:86:
8d:08:02:74:7a:c6:cd:1b:12:82:98:03:da:33:13:
c9:f8:59:70:4c:94:af:77:61:b1:65:e5:39:b5:c6:
ff:65:f1:82:d7:dd:b3:7c:8b:98:f1:ac:96:d9:43:
75:ce:6f:65:3a:a2:b3:10:bc:3a:78:fa:8c:85:e9:
73:8c:9e:6e:54:d2:96:98:11:9e:72:ab:75:a8:bd:
75:39:ee:8c:c8:c6:1b:3b:05:5f:55:3d:2e:7a:2c:
82:d3:86:c8:d5:18:2a:5e:5c:1a:d5:d0:ba:90:d7:
9f:ba:58:7b:ad:68:67:b5:31:af:c9:08:60:7f:83:
34:68:bd:fb:0c:b8:54:4c:2b:e8:2f:76:81:7a:45:
0f:e3:c3:04:cb:29:a5:81:f9:54:bf:4c:b9:63:01:
db:6c:e4:15:6e:91:0e:8a:55:82:31:52:13:81:c5:
90:13:de:a0:bf:ea:d9:59:80:8c:d6:3d:8c:10:23:
31:59:64:75:29:d4:ff:3e:9d:a7:f5:ca:29:51:53:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D2:43:65:B4:1C:47:20:CA:36:36:C9:4C:7B:91:0B:3D:D0:1D:E5
X509v3 Authority Key Identifier:
keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/w9JDZbQcRyDKNjbJTHuRCz3QHeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.97.0/24
212.6.50.0/24
IPv6:
2a0c:2f40::/29
Signature Algorithm: sha256WithRSAEncryption
b9:12:bf:d5:e0:e6:e5:8f:0b:c9:86:d3:4f:a4:9b:3d:f6:7e:
59:c8:1a:c0:97:e0:27:89:95:61:6b:19:47:9e:5a:5a:30:69:
4b:33:db:bb:b5:79:46:44:59:8a:bd:13:28:55:31:84:02:80:
11:a3:63:ec:65:61:c3:c6:65:39:30:72:d7:eb:ed:97:98:d4:
0c:0e:95:79:bf:82:20:b9:ec:7b:43:e5:16:0c:21:c3:fd:61:
68:52:98:2c:b6:25:fc:04:8c:fe:5f:24:71:76:d6:25:d9:1b:
8b:bd:53:08:8d:1d:cb:c0:52:73:4c:5e:67:f3:36:b3:10:85:
18:21:97:d8:a9:df:3d:65:13:e8:da:e1:31:68:92:a5:96:91:
40:e8:66:7c:6d:c0:7c:60:aa:2c:ed:09:47:a7:f7:b0:5c:e4:
ad:c5:e5:f3:86:a4:b1:64:a5:ab:7d:f9:41:53:a0:e7:be:ef:
01:ef:33:8b:cd:22:bf:b9:f7:b9:27:cc:bc:b1:db:ce:c9:ab:
f0:21:1a:f1:1a:91:65:ee:98:df:82:dd:b0:53:4c:96:86:4e:
f0:fc:bc:ea:8d:bd:90:39:cc:a7:eb:79:38:ea:9a:fe:ee:8a:
1d:fc:09:8e:07:f7:52:1a:d1:31:bd:5b:5d:44:0b:2d:98:74:
d2:20:82:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:48:21 2025 by rpki-client on console.sobornost.net