Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/cxjVghHfKz7r8jK0ajPAm20QF-U.roa
File: cxjVghHfKz7r8jK0ajPAm20QF-U.roa (raw, json)
Hash identifier: HPsMihI6S6ZtrZUoih477ooLtwdT/SYfO2io/vTyfY8=
Subject key identifier: 73:18:D5:82:11:DF:2B:3E:EB:F2:32:B4:6A:33:C0:9B:6D:10:17:E5
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 019428237C5BB1C4E3B3A01F0C7FCC69FB83
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/cxjVghHfKz7r8jK0ajPAm20QF-U.roa
Signing time: Thu 02 Jan 2025 17:50:01 +0000
ROA not before: Thu 02 Jan 2025 17:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49433
IP address blocks: 94.139.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:7c:5b:b1:c4:e3:b3:a0:1f:0c:7f:cc:69:fb:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Jan 2 17:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7318d58211df2b3eebf232b46a33c09b6d1017e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:b1:77:21:b3:5a:3d:84:79:ed:82:eb:34:
3f:d1:29:ad:c2:c7:82:f7:65:a6:9b:c2:5d:e8:64:
ee:57:99:cf:a0:fc:3e:21:7a:6d:d0:23:e6:61:a1:
12:e8:77:c4:ef:86:23:2e:c7:be:bf:81:b5:cd:78:
bb:41:e7:00:01:1e:e9:3d:e6:8e:bf:f0:5e:47:a0:
ac:ed:f0:75:36:63:cb:1b:b5:c3:15:51:ce:82:78:
c4:74:c0:b4:95:77:87:d4:9e:25:6c:c8:a9:73:95:
55:38:ad:6b:55:21:45:b8:dc:5a:93:68:98:8b:73:
e2:de:a9:83:59:e7:1a:56:0c:da:66:bb:8d:54:05:
77:de:16:17:6b:13:4c:4f:5b:de:1a:20:4a:1b:ff:
5b:c7:00:07:a4:ad:08:3b:dd:2c:84:ed:f2:bf:73:
ab:ae:b7:af:e4:79:83:cf:33:56:ac:47:ae:be:48:
39:2b:1c:43:d0:2e:1b:15:02:6b:64:2c:b4:ef:db:
e1:de:e8:7d:c5:90:20:0c:13:71:18:bb:2e:32:5c:
c1:9b:79:88:00:fd:8a:57:df:ef:82:cf:39:b5:c2:
dd:66:b2:99:87:f4:a8:88:1b:52:c5:11:ba:95:cb:
0f:0d:85:09:38:bf:7e:79:9c:77:57:71:25:80:e5:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:18:D5:82:11:DF:2B:3E:EB:F2:32:B4:6A:33:C0:9B:6D:10:17:E5
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/cxjVghHfKz7r8jK0ajPAm20QF-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.189.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:26:b5:38:5f:09:ea:1a:f5:17:90:d5:c2:ba:c8:1d:91:7b:
b2:52:76:fd:99:09:2a:3b:70:45:fc:01:4f:ac:ba:cd:8f:53:
f4:23:0d:76:23:cc:b1:2a:65:43:1e:7b:e2:2e:d7:1e:b1:30:
ad:24:26:f9:d2:44:8d:ce:84:bb:3a:f5:6a:49:d2:3d:3d:2e:
5c:28:c7:c5:37:bd:3f:7d:b4:35:a7:3b:0e:a5:42:c1:80:d9:
d1:31:1a:ea:fa:46:eb:07:06:84:7a:53:b3:8e:dc:23:c6:cf:
2a:6a:c0:d5:24:a3:b2:22:ec:a7:7a:f5:e0:f5:2f:2c:e5:0b:
5b:fb:9f:e9:25:6b:9d:65:96:28:f4:19:2e:24:21:a5:c7:0c:
ab:1b:3d:fc:cc:ba:db:9c:43:a7:2b:6b:d9:d0:5c:b3:21:42:
b8:12:23:9a:da:21:a4:f7:2c:7b:2b:e4:ca:86:8e:0a:c4:49:
42:1c:af:41:4f:60:d2:b8:59:ad:7b:d8:d0:2f:fa:74:a2:28:
d6:2c:2a:2f:4c:78:ee:c6:88:aa:b0:b0:81:ec:95:27:13:e1:
54:58:ec:62:cf:4d:d2:ee:d7:9d:c3:42:49:6a:51:7f:f1:42:
0e:93:2e:81:9e:6c:6f:33:0d:1e:af:6f:73:44:68:a7:2c:52:
d6:48:38:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:32 2025 by rpki-client on console.sobornost.net