Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa
File: wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa (raw, json)
Hash identifier: IJOJKrk97D1lz8Q6SGisOh1Nji4BvJsLyuj6phA3kdU=
Subject key identifier: C3:1F:5A:F2:95:45:ED:F9:E8:4C:10:28:1B:BD:60:BD:50:4F:73:F6
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266BA3EF414992C7440C3157B7738254
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa
Signing time: Thu 02 Jan 2025 09:49:35 +0000
ROA not before: Thu 02 Jan 2025 09:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212949
IP address blocks: 94.176.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a3:ef:41:49:92:c7:44:0c:31:57:b7:73:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c31f5af29545edf9e84c10281bbd60bd504f73f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:26:94:4e:bb:b5:18:3a:cd:28:58:78:7b:6f:
60:e3:3b:2e:47:ce:84:33:0d:80:ba:53:0e:2b:9c:
2b:a3:f5:47:e7:c4:6f:0a:58:21:40:47:44:6e:c4:
51:79:43:50:82:48:03:ff:3e:0b:d5:bf:3a:5e:45:
f5:03:99:48:94:11:15:f6:15:27:ab:83:65:3d:a0:
81:b7:0c:72:84:fd:02:6e:3c:e9:2f:45:42:43:17:
4a:16:8d:0a:14:bb:82:d5:2a:4d:32:d1:a1:15:e7:
81:68:7e:33:4e:12:3e:dc:47:f4:f7:50:c5:d0:fa:
50:82:5f:50:1d:48:43:f9:52:47:5b:7e:16:ef:85:
ef:b4:8b:e6:0e:a4:6b:8f:8e:72:51:05:45:ed:c5:
0b:08:16:3b:16:76:e6:b2:4f:12:2e:e9:64:79:8b:
fb:6e:2d:bf:71:c3:08:2d:48:a3:07:7f:21:1c:e5:
94:c1:e4:ae:00:2b:75:42:58:45:46:80:fa:a5:cb:
43:8c:b6:ed:c5:29:f1:71:2f:7e:87:de:35:70:66:
0d:7c:db:4f:b9:06:d1:a5:b6:0a:ef:1f:92:08:a9:
80:8c:d6:10:ec:46:b8:b8:f4:8c:a4:74:e9:5a:35:
81:7f:d5:86:c4:54:c5:ca:d9:cc:4e:a4:d5:66:9f:
88:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1F:5A:F2:95:45:ED:F9:E8:4C:10:28:1B:BD:60:BD:50:4F:73:F6
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wx9a8pVF7fnoTBAoG71gvVBPc_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:fd:b9:bd:23:eb:d3:7e:be:ee:14:34:c5:55:b1:d5:b3:5f:
4a:40:aa:ba:d5:e9:0a:9e:19:fe:d9:bb:78:6e:e9:46:27:26:
57:7c:e5:94:31:38:6b:6f:18:d4:52:e3:0f:fe:88:90:2e:c9:
d8:26:9d:cb:87:fb:a4:81:86:07:0e:60:3e:fd:25:a5:47:70:
a2:07:0e:d7:9b:00:ec:02:a0:f8:af:a7:71:32:e2:38:0f:8e:
04:ec:f0:77:02:93:2b:bf:f9:3b:16:5e:f8:90:93:9b:db:f4:
7c:a3:5a:b5:01:62:9a:58:18:dc:27:9a:24:84:9e:0f:47:41:
63:0e:21:70:0e:c1:c2:b1:56:8e:54:97:d1:d6:c8:98:ea:24:
51:15:1c:7c:f2:58:01:24:f0:f8:8a:9d:07:69:bf:ae:1c:fe:
3e:1a:7b:c4:4b:39:cc:fd:df:22:88:64:e3:97:22:c1:3a:45:
06:b5:c6:3f:7d:3c:8a:fa:74:eb:b2:16:25:1f:8c:3d:b0:ea:
59:e1:de:f7:b9:fa:8c:a7:40:24:88:44:ce:c3:38:ae:b3:ec:
3b:ce:6e:a9:98:c8:d0:e4:1f:46:f0:e8:db:2f:2a:05:ec:7e:
cc:60:f2:a2:92:06:8f:aa:0f:ae:5f:d0:68:e5:84:52:d2:80:
b2:a6:fd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:56 2025 by rpki-client on console.sobornost.net