Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/X6Y7lqv-TzoOvUF6C2uzI7fpsV4.roa
File: X6Y7lqv-TzoOvUF6C2uzI7fpsV4.roa (raw, json)
Hash identifier: xCuFGXAyguxWOfnBEGZS+iRA1WM0XsbE0f95kMTUqHo=
Subject key identifier: 5F:A6:3B:96:AB:FE:4F:3A:0E:BD:41:7A:0B:6B:B3:23:B7:E9:B1:5E
Certificate issuer: /CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Certificate serial: 018757568ADEAD171B71B5093BF1CC870321
Authority key identifier: 80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/X6Y7lqv-TzoOvUF6C2uzI7fpsV4.roa
Signing time: Thu 06 Apr 2023 16:11:42 +0000
ROA not before: Thu 06 Apr 2023 16:11:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399498
IP address blocks: 107.150.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:56:8a:de:ad:17:1b:71:b5:09:3b:f1:cc:87:03:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f376df5f9ef487c82b31a875c6a496d79ca0d7
Validity
Not Before: Apr 6 16:11:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa63b96abfe4f3a0ebd417a0b6bb323b7e9b15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:c6:7c:78:1c:1b:df:f5:1e:72:b9:5b:45:
8f:41:c0:2a:13:5b:36:6e:42:d6:3d:b7:d6:75:13:
56:99:6f:9a:d6:3b:c6:00:17:09:3a:00:96:34:27:
b1:59:4c:da:dc:33:30:35:2d:e2:40:32:d6:7b:d4:
1e:73:06:e7:8c:c3:cd:f0:36:23:cc:64:11:d4:20:
eb:6e:57:11:a5:a6:10:c0:2c:e0:8c:4b:c6:97:4f:
c1:e6:f2:0b:7c:9e:41:2f:cf:50:55:77:2d:0c:fe:
c5:cb:71:73:25:d5:a2:d9:f5:cc:ca:6c:87:5c:de:
b1:08:d6:0f:cd:f9:29:5a:61:b3:c5:ed:ac:20:b4:
60:b5:aa:02:64:0a:00:61:0f:3a:22:d5:a3:a0:7a:
d7:93:88:71:e6:ee:a2:f8:8b:2d:cd:3f:d8:44:d1:
c9:22:42:12:10:a5:05:a2:af:c9:dc:62:97:82:aa:
ec:88:bf:71:95:99:80:f8:cc:fc:6d:91:d2:32:14:
ac:33:af:b8:cf:2f:47:5f:44:16:73:08:c8:8e:c3:
3d:3b:94:80:54:18:92:10:58:fd:98:1f:ca:7e:48:
6c:d0:fa:34:fb:89:95:a2:af:39:5e:6c:cc:e8:7b:
3a:fc:90:41:56:07:05:b7:2d:75:f0:a6:ef:7a:0a:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:3B:96:AB:FE:4F:3A:0E:BD:41:7A:0B:6B:B3:23:B7:E9:B1:5E
X509v3 Authority Key Identifier:
keyid:80:F3:76:DF:5F:9E:F4:87:C8:2B:31:A8:75:C6:A4:96:D7:9C:A0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPN231-e9IfIKzGodcakltecoNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/X6Y7lqv-TzoOvUF6C2uzI7fpsV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/795ded-fcdf-47cf-af83-a4bc2816643a/1/gPN231-e9IfIKzGodcakltecoNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.150.94.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d3:ac:57:e1:b4:51:07:e2:73:a6:e6:20:9e:6a:da:6e:1c:
93:ac:58:50:cb:0e:c8:d7:4c:71:62:09:c7:fb:0a:bc:a2:fe:
02:89:02:67:2b:ed:a5:73:34:80:5a:70:70:e4:63:96:d4:04:
82:2b:73:de:0a:d5:2e:96:02:b0:b2:c9:cc:6e:8f:44:e0:ef:
e6:ce:e8:e1:bd:a2:37:79:9c:6b:43:63:d2:a9:44:04:e7:6e:
34:83:df:c2:0b:58:2d:ac:42:d5:60:41:15:a2:01:f3:67:ce:
5a:78:9d:92:6a:c3:c9:7a:9d:e4:56:dd:8d:12:9f:1e:f9:29:
9e:4f:c9:81:47:06:62:1e:04:e9:de:f0:a8:ca:b1:56:39:10:
94:e0:f7:61:6e:8a:dc:c0:6f:b7:48:11:73:7e:00:78:f2:30:
46:3c:de:10:e9:b1:95:37:92:c5:e6:aa:2b:a6:bf:7e:fe:d9:
7a:04:da:cc:70:a4:da:3c:8b:e7:f6:b6:ac:49:54:ee:e5:72:
2a:d6:96:29:92:01:bc:67:94:87:95:51:48:a9:e8:ed:a9:0a:
ac:db:fd:d5:f2:f4:f8:9a:d6:76:14:24:fc:e2:8c:9c:f9:0f:
d5:69:87:fa:48:ad:ff:11:5a:77:a8:b9:44:9c:ae:08:21:68:
33:03:2b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:21:49 2025 by rpki-client