Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa
File: pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa (raw, json)
Hash identifier: OjXgWSjMIysxXIzCr8G2HbFXqB0exJC+XSuA+1t55uo=
Subject key identifier: A4:BA:17:E1:6A:47:15:E3:39:8C:3E:A6:74:76:A1:E7:3F:9D:D5:07
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 0194206872FA07A622A968FEF24BF37A76B7
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 93.93.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:72:fa:07:a6:22:a9:68:fe:f2:4b:f3:7a:76:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4ba17e16a4715e3398c3ea67476a1e73f9dd507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:96:1b:67:5f:6e:bd:b8:3c:89:a0:b4:bb:12:
2c:dc:66:3e:09:5b:8c:3a:b8:5e:11:53:f5:8f:58:
4c:89:16:4c:a3:29:c2:38:cf:da:a3:f2:55:d0:52:
92:6d:5b:ef:ed:f3:1f:69:e7:a5:a7:b0:73:1d:27:
99:5c:b8:3a:9e:f1:f3:c0:5d:56:5d:98:78:35:ab:
90:c5:c5:80:5d:85:d0:cf:16:0b:d0:91:e2:33:9d:
c9:0b:16:0b:57:18:50:59:89:6a:e8:91:4b:98:c0:
cf:ce:8b:22:f3:51:bf:16:bf:8e:4b:8f:20:90:e7:
f4:45:62:5b:ba:e7:01:89:a9:22:8e:84:72:17:d0:
d2:e2:f6:2f:48:53:8c:10:63:af:07:cf:07:4e:11:
a3:bd:4a:96:25:60:b8:ad:c4:5f:52:48:96:4d:c9:
5f:f9:69:11:4b:e4:ac:c8:16:c9:9b:ea:77:36:4e:
28:96:05:26:46:d3:ce:8b:61:c3:dd:f4:de:84:4c:
65:06:10:91:ab:62:a8:40:20:17:8c:94:16:c2:c5:
13:06:53:ce:9f:7c:27:1e:6a:1b:c4:1a:df:95:62:
ee:e7:69:dd:da:e2:75:52:8b:bc:f1:92:06:72:50:
1e:8f:15:37:ba:86:ae:e9:76:b6:0e:1c:ba:7c:c0:
3b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:BA:17:E1:6A:47:15:E3:39:8C:3E:A6:74:76:A1:E7:3F:9D:D5:07
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/pLoX4WpHFeM5jD6mdHah5z-d1Qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.224.0/21
Signature Algorithm: sha256WithRSAEncryption
46:e1:40:ad:c1:08:28:ba:8a:c9:cd:8e:72:a4:c7:84:5a:75:
67:ba:7d:61:60:9b:17:7f:4f:43:25:0c:1a:1e:99:ed:a5:e4:
24:a9:b2:90:1f:3b:75:c8:f4:8c:77:cb:9b:8d:70:f4:08:3b:
93:83:de:a3:bb:8e:c7:47:a2:89:fa:b1:7a:1b:59:be:19:44:
8b:0c:3a:76:71:3b:46:a5:c2:86:c8:5b:cd:6c:5b:7a:50:d0:
f0:18:7c:30:2d:82:9b:9a:03:e8:46:cd:fe:a5:3a:71:b6:59:
34:63:a2:2c:3c:28:05:97:25:25:71:ce:b9:f3:b8:b5:de:c2:
57:19:b5:ac:25:17:9a:44:71:9f:ed:94:5f:26:a0:59:88:d6:
ac:ca:91:e6:01:e8:c4:16:28:30:13:a5:68:22:b0:e6:7d:04:
33:41:22:9b:a6:74:95:be:0d:98:48:3a:5e:f6:d4:c7:1e:8f:
c1:33:71:e8:b6:d9:c8:9b:6e:b8:7a:a2:b2:0f:09:1c:7a:2e:
f3:b8:5c:97:92:9e:2c:d2:ad:3b:6d:c5:60:26:1e:af:4e:b2:
e8:50:4f:2f:19:25:84:8c:37:a8:ec:6e:46:bf:bc:f5:b7:83:
0f:c7:b5:3f:3f:a0:1c:b0:f2:38:12:0e:a3:d4:9f:32:7b:6b:
ac:2d:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:26 2025 by rpki-client