Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/AQyWHoTpIoD9YkmssqSGTmtU3kY.roa
File: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (raw, json)
Hash identifier: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=
Subject key identifier: 01:0C:96:1E:84:E9:22:80:FD:62:49:AC:B2:A4:86:4E:6B:54:DE:46
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 019425FDE71F65A9AE4575F0EE8C190A8038
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/AQyWHoTpIoD9YkmssqSGTmtU3kY.roa
Signing time: Thu 02 Jan 2025 07:49:44 +0000
ROA not before: Thu 02 Jan 2025 07:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 93.191.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e7:1f:65:a9:ae:45:75:f0:ee:8c:19:0a:80:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=010c961e84e92280fd6249acb2a4864e6b54de46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:99:d3:86:d1:58:ad:80:9d:fb:4e:0f:51:
eb:65:38:d7:05:6e:4b:8e:50:81:f5:61:be:14:51:
85:89:84:dd:2d:c7:21:e8:06:cb:8c:b6:6d:6c:13:
68:1d:94:a6:40:7a:65:99:c6:80:f7:19:96:df:e2:
4a:fc:13:8c:bb:25:41:a9:3b:c8:a8:39:5b:f3:15:
18:74:34:c6:06:16:7d:0e:66:3a:92:39:a7:96:4c:
1e:65:e5:b0:18:52:3d:db:65:13:39:9f:fe:97:a8:
de:30:ef:1f:b8:33:59:60:0d:1b:3a:6a:25:d1:7b:
af:83:f1:3a:88:41:11:97:38:b4:87:05:0c:7a:70:
cf:4a:25:bf:45:e3:f3:5a:91:e8:a5:29:9b:fe:ab:
43:12:70:dc:1b:db:83:79:da:a9:ff:a1:e8:4e:6b:
a1:b7:13:05:03:0a:91:8f:05:66:36:4b:20:69:40:
88:ad:6f:d0:fb:8d:14:d1:53:59:2e:3b:7e:fc:6c:
76:52:48:ae:41:ab:ff:00:ad:c6:c9:6f:a8:ab:22:
d5:5d:08:36:c1:1d:03:75:c2:6e:13:5c:f0:1f:7c:
4a:23:e1:08:ed:26:8a:ed:9f:ec:48:ce:c6:64:2d:
19:27:18:12:da:ca:6e:56:f3:69:ac:92:0e:75:76:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0C:96:1E:84:E9:22:80:FD:62:49:AC:B2:A4:86:4E:6B:54:DE:46
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/AQyWHoTpIoD9YkmssqSGTmtU3kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.148.0/23
Signature Algorithm: sha256WithRSAEncryption
76:02:57:4d:f8:63:e3:ad:26:e6:4e:e2:52:d1:ee:1b:ad:04:
86:52:40:5e:1e:8e:62:f5:3a:f5:19:f9:3b:5c:f8:2a:f1:12:
12:4c:87:4c:32:80:52:f8:dc:9b:5d:0b:e1:f9:32:62:91:70:
a9:c9:fd:f8:ad:f3:36:11:09:61:e9:dc:a3:cd:b4:ea:08:84:
1b:58:9d:f9:cc:33:e5:6d:93:fe:40:f4:ea:a3:d3:4f:9f:f9:
63:5b:f4:b9:f6:eb:75:65:c8:6d:2f:5f:4d:2a:ad:1e:10:7d:
84:66:d4:0a:7b:0a:5c:26:17:ac:9f:f7:ae:a4:70:da:b4:d3:
f2:8b:a3:f2:f9:54:ba:98:08:ae:b2:49:f2:ae:81:52:73:ae:
25:0a:a5:28:f7:27:15:4a:9b:09:e1:71:a7:2d:fe:4b:98:6d:
26:fb:24:3c:fd:0f:aa:cf:54:7b:48:64:8b:29:41:3c:94:15:
d1:24:db:f1:4e:3e:e9:4e:97:93:a7:0c:b3:4c:b7:27:fb:16:
48:c4:8b:2d:f7:01:57:3c:9b:10:23:26:c7:f6:94:ac:c0:0b:
94:8b:22:c9:f5:d1:83:05:b9:2a:5d:b4:9e:73:1a:27:6b:de:
c3:d2:31:6d:38:38:23:55:61:5a:d3:c7:d4:60:f0:77:ac:88:
e1:fc:83:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:28:34 2025 by rpki-client