Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/iVv9ozH_svAyWCz87404M3b3dOg.roa
File: iVv9ozH_svAyWCz87404M3b3dOg.roa (raw, json)
Hash identifier: B5ikMCrUQ9bNfvmS1tqxZLEZ9Uh8pGPtdisM2zHNixE=
Subject key identifier: 89:5B:FD:A3:31:FF:B2:F0:32:58:2C:FC:EF:8D:38:33:76:F7:74:E8
Certificate issuer: /CN=4456c14cd8724f9a909627b94e006cf69d12307b
Certificate serial: 01954CED12D9E3B01003CD5EDF40B3F25513
Authority key identifier: 44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/iVv9ozH_svAyWCz87404M3b3dOg.roa
Signing time: Fri 28 Feb 2025 14:19:20 +0000
ROA not before: Fri 28 Feb 2025 14:19:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 93.93.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:ed:12:d9:e3:b0:10:03:cd:5e:df:40:b3:f2:55:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4456c14cd8724f9a909627b94e006cf69d12307b
Validity
Not Before: Feb 28 14:19:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=895bfda331ffb2f032582cfcef8d383376f774e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:56:0e:ff:18:19:40:5d:ed:98:14:14:12:46:
f2:8f:c7:1c:20:4d:5c:80:db:33:09:1e:80:c5:a9:
b6:27:8b:b8:ce:7f:58:8d:41:03:50:58:ff:ae:f9:
75:fc:e8:40:77:90:ef:0c:5b:61:a4:5e:b7:3c:bb:
ae:5a:e3:d3:4d:a2:04:55:b1:dc:16:fe:fb:67:75:
a3:26:35:b4:47:8f:5f:08:c7:79:be:87:46:a7:19:
e7:a6:e0:4a:1e:84:ba:71:c4:86:13:7e:89:3e:3a:
79:ce:13:94:cb:60:bf:54:fd:f3:10:4a:d7:16:cb:
af:2e:51:d5:fb:fc:01:64:db:c8:5f:be:18:01:1f:
ad:01:ce:db:5b:b3:fa:00:07:e4:d2:cd:e6:97:b3:
e2:51:e6:94:87:26:e4:d7:c9:0e:00:3e:3d:bc:21:
d0:f1:5d:6f:48:3c:19:3e:9d:67:3e:e8:ad:5b:78:
55:d2:44:9d:73:43:6f:9c:e0:54:b7:bd:2b:77:f0:
f9:0b:f9:7c:2e:23:3e:5e:14:87:64:1b:74:02:b6:
dc:37:88:ee:8b:83:17:5f:1f:a7:ea:9d:71:a1:2a:
ff:df:e8:06:42:18:b6:86:96:ca:58:48:ce:c1:70:
dd:55:c4:8c:cf:4a:65:a3:f7:7c:a7:2e:d8:e8:8a:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5B:FD:A3:31:FF:B2:F0:32:58:2C:FC:EF:8D:38:33:76:F7:74:E8
X509v3 Authority Key Identifier:
keyid:44:56:C1:4C:D8:72:4F:9A:90:96:27:B9:4E:00:6C:F6:9D:12:30:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFbBTNhyT5qQlie5TgBs9p0SMHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/iVv9ozH_svAyWCz87404M3b3dOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ecfc2-da70-4333-8f96-5b87825c07ee/1/RFbBTNhyT5qQlie5TgBs9p0SMHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.96.0/21
Signature Algorithm: sha256WithRSAEncryption
54:48:8c:e9:f1:a6:39:69:ba:36:ad:90:3e:bb:08:19:59:8b:
01:68:c0:c5:1c:f1:c1:57:93:2f:c6:23:8a:dc:71:2d:51:9f:
1e:e9:67:56:8f:df:3f:50:73:d2:1f:3d:c2:95:d5:a7:bc:bd:
33:63:3e:63:8e:31:ea:55:78:cb:ca:ff:21:2f:3a:b3:15:93:
69:6c:8a:51:32:81:a2:94:9b:c3:64:e2:8e:c7:cb:f3:73:37:
f7:4a:11:cd:7a:47:76:31:49:d6:a5:46:fa:92:ed:09:3d:c4:
38:2e:ed:42:ad:30:7b:0c:0d:24:7d:1c:84:6a:16:0e:73:5b:
e5:66:77:62:a5:70:78:d3:65:4a:6b:33:21:90:a8:e4:d6:4a:
05:9a:ae:8a:d7:fe:92:a2:09:07:2e:8e:3d:57:ba:e2:df:6c:
5e:3d:ab:09:4b:3f:c9:5e:96:b1:86:ad:d1:f3:17:c5:35:6a:
1e:be:b9:5d:63:cd:d7:28:4b:c5:ae:70:88:19:34:a7:cd:6b:
d3:63:a6:87:a3:17:e8:ea:eb:a1:85:e0:66:02:74:eb:dc:1f:
26:38:eb:af:14:6c:a8:8e:ab:4f:27:56:a3:4c:72:5d:9f:ad:
a8:57:c4:80:d5:3e:39:bc:61:86:c3:02:a9:63:24:fa:ee:32:
c5:0e:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:38:58 2025 by rpki-client