Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa
File: jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa (raw, json)
Hash identifier: PbvVUSgN0dLFWz6bc4odaxxggERGNNwAo8M1AiayrEs=
Subject key identifier: 8C:8C:78:9F:4A:AF:18:23:1B:BD:9E:27:64:77:DE:EC:09:40:BD:CE
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 019420D6393A687B02D68E7620FDA67FBE44
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa
Signing time: Wed 01 Jan 2025 07:48:17 +0000
ROA not before: Wed 01 Jan 2025 07:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48437
IP address blocks: 94.232.176.0/21 maxlen: 21
178.54.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:39:3a:68:7b:02:d6:8e:76:20:fd:a6:7f:be:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c8c789f4aaf18231bbd9e276477deec0940bdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:31:ee:7a:49:c3:c2:4e:00:8f:b9:5e:e3:45:
bb:ab:68:06:df:2e:f5:a2:e2:7c:77:2a:b4:95:bb:
b5:53:a3:09:11:a6:5f:3e:53:43:74:dd:c7:b1:b5:
a1:60:fb:42:3c:b5:4e:8c:35:cb:3c:ef:68:9e:5a:
cc:46:4c:86:d3:b0:15:a8:59:48:ba:30:97:76:bb:
b8:17:69:a6:82:ab:03:20:bf:46:f3:e2:b8:d3:b9:
fb:6e:b0:00:6c:d0:bf:f5:c3:bb:b8:7e:8d:84:42:
cc:7c:57:4a:9e:65:8c:01:76:26:a8:75:4f:6f:63:
67:83:fb:81:98:c0:8f:04:21:bb:25:f6:17:3e:3a:
b7:72:cb:b6:94:20:23:a9:13:b4:5e:9c:2f:02:f1:
eb:2c:88:70:31:41:e4:ac:8e:de:61:40:3a:c2:ef:
78:db:bd:7c:2d:73:23:ce:58:81:52:6e:3d:8b:2a:
e3:5b:cd:4e:16:08:a2:9e:89:44:1c:4f:8c:62:b8:
00:ad:23:f0:72:bb:0f:67:40:b4:3f:97:df:b0:f4:
1d:69:98:35:2d:db:14:c4:22:a1:7f:8e:ea:f0:b1:
16:a6:0a:44:11:33:af:8e:4a:69:f0:4a:57:9d:c6:
bb:e1:30:9c:a0:53:48:87:18:76:eb:8d:80:e7:f2:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8C:78:9F:4A:AF:18:23:1B:BD:9E:27:64:77:DE:EC:09:40:BD:CE
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.176.0/21
178.54.128.0/17
Signature Algorithm: sha256WithRSAEncryption
43:ee:d8:6d:c5:ee:0c:05:2d:53:d2:1f:32:28:42:7f:82:c8:
ad:34:f3:67:69:b2:50:9a:38:8a:0f:1a:f6:dd:08:63:8b:d2:
73:a1:b2:e8:39:cf:34:9f:8e:48:f3:63:b8:12:4c:39:55:c6:
78:a0:05:8d:96:c2:db:c6:81:1e:0d:1c:22:8d:2b:e8:79:e8:
fa:a7:71:e3:9e:20:69:bb:6f:a3:53:bb:05:80:89:e1:9d:b1:
0b:ab:9c:bc:55:76:b5:4a:70:29:85:80:3c:1a:6a:87:ba:02:
c0:e3:86:b9:39:4c:93:28:3b:c3:bd:08:07:1c:3b:70:be:ba:
65:57:78:57:3e:99:e4:5b:62:13:6d:51:fa:31:d1:8c:10:4f:
4f:e7:2d:28:d5:6f:3f:67:54:6a:85:f7:ed:43:99:0e:63:7e:
39:58:bf:29:72:cc:7a:d5:ab:4e:cc:65:ab:d1:eb:47:da:e4:
7b:c6:04:66:35:d9:e2:0c:13:cd:25:3b:24:7e:4c:86:d4:e9:
95:2a:4b:1e:6c:5c:42:c7:c8:78:f3:75:44:75:41:ff:68:86:
36:fb:70:0c:2a:b0:c0:91:96:9d:f9:87:bd:89:5f:14:cc:f8:
ef:94:a1:b2:3d:6a:5d:d9:7d:e6:55:0a:9f:dc:6b:0f:46:40:
59:c1:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:27 2025 by rpki-client on console.sobornost.net