Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/9KPfrwTfFRVyaYbxKiw1OGZQrSI.roa
File: 9KPfrwTfFRVyaYbxKiw1OGZQrSI.roa (raw, json)
Hash identifier: UY1UPsGvghj6PCWZfYzuCTpSPNsdGtDSEoWLKHoTyLY=
Subject key identifier: F4:A3:DF:AF:04:DF:15:15:72:69:86:F1:2A:2C:35:38:66:50:AD:22
Certificate issuer: /CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Certificate serial: 019427B68FC56E4E95B341F6DA264302B3A5
Authority key identifier: 7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/9KPfrwTfFRVyaYbxKiw1OGZQrSI.roa
Signing time: Thu 02 Jan 2025 15:51:03 +0000
ROA not before: Thu 02 Jan 2025 15:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211219
IP address blocks: 194.31.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:8f:c5:6e:4e:95:b3:41:f6:da:26:43:02:b3:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7bbf58975b81e8f9f9c15e4d8b899190cec00687
Validity
Not Before: Jan 2 15:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4a3dfaf04df1515726986f12a2c35386650ad22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:64:e7:01:bf:45:61:67:78:2e:c3:02:c5:
87:13:a3:02:ac:be:12:2f:2d:59:56:9a:64:62:16:
33:a7:b9:6d:46:61:24:30:bf:f9:09:0b:50:d3:e5:
d2:c7:9b:de:30:c1:35:43:0b:d2:9e:8d:ef:74:2b:
7b:3b:4e:6e:0f:76:e1:5b:7e:fc:b9:4a:fa:5c:aa:
e1:64:ca:7c:bd:21:c7:f6:6a:e2:53:e6:b5:66:e1:
6f:21:f0:4d:fb:65:3e:7b:4c:4e:0c:0e:4d:20:49:
46:dd:a5:7c:cf:64:7a:29:27:ac:09:19:62:a0:62:
5a:f4:1f:d5:51:b4:73:d8:5d:07:e4:17:02:86:07:
e5:2a:50:4b:2f:fe:fa:0e:18:11:14:2a:8f:e1:9c:
95:e4:40:1c:33:44:df:37:db:a6:72:6a:7a:de:07:
6a:f0:ee:50:7f:d7:16:b6:d1:c1:af:6f:bd:3c:7a:
5c:5f:0a:b2:f0:a2:7f:8a:36:5c:20:7f:95:e1:18:
f3:1a:5e:70:3f:92:a0:85:11:05:e9:27:05:b4:c9:
6b:f2:ce:3c:6e:7b:fa:f4:bf:21:4d:1d:e7:0c:5e:
97:1b:d6:db:72:1a:f7:f0:47:1c:37:2d:bb:08:df:
88:fc:0b:dc:27:46:35:52:2f:44:69:d2:b9:b7:df:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A3:DF:AF:04:DF:15:15:72:69:86:F1:2A:2C:35:38:66:50:AD:22
X509v3 Authority Key Identifier:
keyid:7B:BF:58:97:5B:81:E8:F9:F9:C1:5E:4D:8B:89:91:90:CE:C0:06:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/9KPfrwTfFRVyaYbxKiw1OGZQrSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0ea9ca-ac97-43f0-8577-1c70d1e7b782/1/e79Yl1uB6Pn5wV5Ni4mRkM7ABoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.253.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bd:45:e0:94:e8:68:3e:27:53:f0:2f:4b:d8:c5:88:8d:56:
d3:97:8f:33:13:6f:30:f3:87:61:5c:8d:28:80:cb:e6:45:b9:
09:e4:61:65:56:57:7d:eb:6b:df:ab:82:0a:cb:4c:c4:69:b9:
38:5e:45:23:b5:8b:ee:3d:f2:c3:8b:c2:75:73:ac:5e:94:7c:
14:66:be:ba:ae:56:d0:10:c3:99:ff:b4:cc:29:64:ba:cd:cf:
5c:fd:79:f8:a6:b1:21:f2:91:d0:48:44:51:c8:4b:8d:bb:ca:
f4:17:6b:75:13:b5:f8:81:c2:b8:f8:ef:53:b1:a5:f1:d0:80:
55:6a:84:6a:77:71:d4:89:3f:10:89:5b:e9:5f:a0:32:b5:e8:
47:b1:89:2a:21:bd:dc:a1:f8:bd:65:73:c2:31:ec:7e:c4:62:
3e:6a:c1:6f:d5:44:f8:b3:6f:47:74:49:d7:d7:bf:19:00:0b:
da:f8:21:d6:b4:81:b5:1c:61:ab:05:97:97:f6:07:aa:f0:1f:
e3:a5:79:35:4a:44:1f:90:fe:ac:6f:fd:95:54:6d:4d:38:47:
9d:27:23:48:c7:77:ef:23:28:3e:bc:84:bd:39:4d:f8:5a:24:
b1:f9:69:55:33:cd:da:56:f1:01:fa:05:ca:dd:38:13:13:88:
ca:9b:7b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:57 2025 by rpki-client on console.sobornost.net