Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/xxSlotnx79L8b4E3SOOpZq1Bjug.roa
File: xxSlotnx79L8b4E3SOOpZq1Bjug.roa (raw, json)
Hash identifier: vYFthu8ezDOoXxrRtpiXeXfGxBIx2vuOicaKhGYrXgQ=
Subject key identifier: C7:14:A5:A2:D9:F1:EF:D2:FC:6F:81:37:48:E3:A9:66:AD:41:8E:E8
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 0194F54ABA3404849D036776EC5DE9DECE6E
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/xxSlotnx79L8b4E3SOOpZq1Bjug.roa
Signing time: Tue 11 Feb 2025 13:55:02 +0000
ROA not before: Tue 11 Feb 2025 13:55:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 86.109.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f5:4a:ba:34:04:84:9d:03:67:76:ec:5d:e9:de:ce:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Feb 11 13:55:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c714a5a2d9f1efd2fc6f813748e3a966ad418ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:1b:15:30:8b:04:22:45:3e:3f:11:b7:88:
0d:88:8d:cc:64:54:bd:87:bc:42:0a:17:b7:5c:3a:
71:07:27:5e:43:be:ce:e6:1e:2a:ea:4e:31:3d:7f:
d9:f5:f6:ec:35:0e:1d:57:b2:6e:26:f3:2e:94:1d:
d2:f7:74:0a:b7:16:f5:cf:ac:03:32:ef:14:7d:75:
61:39:eb:d5:85:9c:23:f4:da:88:0f:c6:09:c6:80:
3a:d9:98:8a:cb:87:fa:33:7d:7c:53:c5:c4:21:0c:
7a:0c:28:b6:ee:25:2c:a8:ed:ef:07:9a:b8:0b:5a:
63:ce:ce:7f:b1:8e:a9:e9:90:9a:17:b4:c3:66:a5:
4e:27:1c:89:66:7a:5e:ca:97:ca:b5:42:0e:14:13:
40:3c:ee:c7:cc:0a:2d:f7:05:91:1c:bd:eb:63:c4:
c0:73:d7:6d:92:98:32:a3:8a:94:1c:24:d2:41:d3:
1b:f7:63:17:99:da:b8:5b:ad:e1:5f:36:7b:b6:73:
44:0e:34:ed:9a:9a:81:c4:2d:34:bc:55:b4:c6:09:
8e:23:59:bf:df:5d:cf:29:5d:2f:25:ed:a4:80:4e:
ba:f9:98:fe:fb:4a:ed:30:5b:b9:18:8b:34:08:80:
54:37:80:3b:bd:92:e0:79:84:51:71:7b:9a:93:38:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:14:A5:A2:D9:F1:EF:D2:FC:6F:81:37:48:E3:A9:66:AD:41:8E:E8
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/xxSlotnx79L8b4E3SOOpZq1Bjug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.88.0/22
Signature Algorithm: sha256WithRSAEncryption
af:66:4b:2d:35:8d:a0:f5:14:65:df:8a:7c:71:4d:7b:e0:15:
ba:de:55:23:2b:ca:64:e7:ae:08:24:4a:ee:c1:66:1c:5c:f6:
a1:70:ab:1c:36:19:41:94:60:78:26:1a:fb:72:c4:e7:5f:ae:
a4:a8:f7:1c:a7:5a:40:d0:62:94:33:f0:d3:57:ce:b1:c3:35:
58:d2:4e:b3:aa:79:7c:5f:6a:15:b1:ed:b0:e3:e3:0b:97:d0:
93:8e:9b:8d:99:7b:78:1b:0e:c6:13:e6:7f:de:1a:55:09:fe:
8d:7e:d9:18:c1:85:ae:a2:5e:cf:d3:2d:83:8f:c2:f8:fb:af:
f4:79:60:d9:71:39:fa:47:c9:d6:c6:31:89:c4:ae:7f:8c:c5:
51:e4:27:83:94:35:61:d8:28:cf:6f:1e:bb:57:83:44:ef:1e:
e4:9b:f8:59:11:8f:9d:0c:3f:b8:93:46:2f:23:78:92:9d:59:
94:80:5b:63:8e:3d:26:b1:db:be:80:f3:8a:4d:4c:ea:48:1a:
55:ac:78:5e:13:34:ed:75:f0:a9:62:75:8a:d1:d2:8b:59:f9:
56:0a:cd:a4:03:74:b2:f1:16:7f:ff:0b:b2:3d:30:48:5c:cb:
e4:9d:62:9c:4a:c9:a0:92:ed:5a:4c:7b:1e:49:3a:c8:47:e6:
6a:3c:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:29 2025 by rpki-client on console.sobornost.net