Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/Z94Es0pJzdNNFG_pvtxbCrg0w94.roa
File: Z94Es0pJzdNNFG_pvtxbCrg0w94.roa (raw, json)
Hash identifier: uXR+OJPAQJAMUd3RxLmxlHyff75ZTmhyAoVDvTJyktM=
Subject key identifier: 67:DE:04:B3:4A:49:CD:D3:4D:14:6F:E9:BE:DC:5B:0A:B8:34:C3:DE
Certificate issuer: /CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Certificate serial: 0194221FC7C57EC4EB865AD26432B1E9CCB3
Authority key identifier: A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/Z94Es0pJzdNNFG_pvtxbCrg0w94.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15520
IP address blocks: 194.176.168.0/22 maxlen: 22
194.176.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c7:c5:7e:c4:eb:86:5a:d2:64:32:b1:e9:cc:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a77325e495cb0150203b79f246f4cd4c0fec24ff
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67de04b34a49cdd34d146fe9bedc5b0ab834c3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:08:15:ce:b5:12:85:12:a7:5d:75:b7:24:
92:d7:64:0a:88:21:bd:89:4c:4a:3e:a9:72:c1:c1:
ce:32:d3:d5:44:b0:e9:c1:b8:51:14:27:02:5a:4b:
d1:b9:75:b7:3e:2c:ab:ab:73:d4:bb:1b:1c:a8:8d:
48:68:b3:f0:1e:8f:e3:8a:8b:fa:be:06:e9:08:f8:
29:f7:c3:e0:f4:6f:1d:f9:e9:60:19:ce:fe:1a:ff:
1c:71:96:44:24:b4:eb:34:34:cc:2d:54:78:bb:83:
c7:e5:84:72:c3:d4:a6:a3:47:47:cc:90:ff:9e:03:
f5:ba:73:99:67:79:f8:0e:7b:01:69:cf:ae:32:e7:
28:74:a9:b7:fa:da:f5:dc:bd:cb:cb:43:b1:23:a6:
e1:6f:2e:e8:e8:88:38:87:70:3c:88:f8:75:00:63:
63:38:21:3c:8c:70:2f:f6:84:eb:8d:85:9d:44:16:
a7:18:30:0a:cf:ae:d5:b9:0b:58:93:26:b3:32:4c:
df:20:d3:42:7d:1f:24:d3:08:a8:ee:f6:e1:72:74:
6f:01:f3:b8:3c:20:24:e2:bc:f2:ba:f2:c3:3f:49:
e5:cb:de:b8:a6:fe:ea:bd:2c:29:5a:77:54:14:8d:
39:e4:b7:f7:bc:c6:ef:73:2f:af:06:3d:16:24:a8:
3e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DE:04:B3:4A:49:CD:D3:4D:14:6F:E9:BE:DC:5B:0A:B8:34:C3:DE
X509v3 Authority Key Identifier:
keyid:A7:73:25:E4:95:CB:01:50:20:3B:79:F2:46:F4:CD:4C:0F:EC:24:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/Z94Es0pJzdNNFG_pvtxbCrg0w94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/bf8411-6960-4cef-91f9-13b6a6d71a41/1/p3Ml5JXLAVAgO3nyRvTNTA_sJP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.168.0-194.176.172.255
Signature Algorithm: sha256WithRSAEncryption
57:fa:4f:ac:09:d5:16:5e:aa:41:dc:a5:9a:93:11:0e:f2:3f:
63:fb:8f:b2:fa:48:cc:c4:74:07:4b:dd:36:cc:89:b6:37:86:
58:d2:b8:5d:a6:41:13:e9:92:a6:13:96:a2:75:9e:35:76:7d:
57:6e:f6:a9:fa:7d:33:ab:25:83:6f:86:c0:1c:8d:d9:ba:87:
9e:c6:6d:94:f1:48:36:7d:c3:1d:67:c8:50:e5:50:20:ad:16:
eb:91:f2:df:06:dc:e6:e0:65:a9:a2:3f:a0:96:44:49:f2:79:
8e:b4:a5:12:57:09:74:f8:7c:d3:37:d7:b9:74:f0:63:dd:5f:
59:a6:35:8e:72:85:28:26:a4:69:b7:aa:f9:71:3b:4d:b4:49:
cb:e8:7c:85:57:96:f3:9a:e1:54:cb:cf:06:e6:13:66:ea:37:
7d:36:89:81:f1:87:bf:be:30:7c:e1:66:a9:96:e4:81:60:fe:
fb:09:09:08:cf:4e:c9:b7:1b:dc:1e:81:43:17:d0:59:c9:f5:
21:58:25:a1:64:ee:56:84:59:62:3d:5a:f7:4d:8f:fa:05:a8:
75:d4:07:2a:0a:9d:03:81:14:9a:b9:e2:7e:3d:30:92:3c:43:
e2:9d:aa:06:f7:21:71:15:78:13:ea:f4:b1:66:98:e1:69:c6:
27:04:22:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:48 2025 by rpki-client on console.sobornost.net