Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QvabUGBtft9NU9QU68BKfDI9niY.roa
File: QvabUGBtft9NU9QU68BKfDI9niY.roa (raw, json)
Hash identifier: miujWozpW45rJn2XAoI0h0IxhGM/6ThljmgJdq0rgcg=
Subject key identifier: 42:F6:9B:50:60:6D:7E:DF:4D:53:D4:14:EB:C0:4A:7C:32:3D:9E:26
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0195B49098DA12A5D23BE8446DC08B4A5A0E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QvabUGBtft9NU9QU68BKfDI9niY.roa
Signing time: Thu 20 Mar 2025 17:18:49 +0000
ROA not before: Thu 20 Mar 2025 17:18:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395793
IP address blocks: 93.115.173.0/24 maxlen: 24
185.193.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b4:90:98:da:12:a5:d2:3b:e8:44:6d:c0:8b:4a:5a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 20 17:18:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42f69b50606d7edf4d53d414ebc04a7c323d9e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c0:68:b7:34:3b:e7:2a:b5:13:04:80:58:bd:
2c:49:8a:10:de:35:5f:24:c7:bf:58:3f:d3:76:38:
c0:a2:62:4e:5c:89:7d:ea:bc:1e:12:68:23:9f:ad:
f8:89:a4:2a:5d:ea:4d:d2:0f:0e:39:d8:e9:12:04:
27:f5:63:82:76:6f:1e:22:7f:91:0c:44:f8:b3:0e:
ab:1b:63:aa:9c:69:7a:ed:8f:44:db:7a:2c:71:26:
ca:7e:7a:34:dc:45:44:aa:90:d6:fc:76:59:7c:7d:
87:89:cd:75:e3:bc:b5:27:96:a9:70:bc:54:69:ca:
08:02:c7:aa:9a:80:bf:07:06:24:38:4d:dd:3d:43:
7f:e4:0d:af:23:fe:eb:6d:5e:a0:e2:1c:35:56:d8:
5b:75:91:9f:41:0a:75:bb:0a:41:71:77:4a:ff:28:
62:6f:30:68:65:f6:a3:26:9f:b4:6a:13:6c:bf:b0:
7a:67:75:69:a8:42:1e:4c:32:8e:18:8b:f7:e3:e3:
32:35:fb:37:37:06:d0:bf:46:23:ce:cf:57:39:c5:
a6:85:2c:c9:dd:b5:96:a9:ef:c8:2f:4c:7d:5e:e1:
6f:66:a9:d9:22:eb:fc:c4:e9:10:c2:a6:0f:7a:04:
89:ce:c5:d7:c0:b7:fa:a1:ca:2b:dd:f4:10:0a:b5:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F6:9B:50:60:6D:7E:DF:4D:53:D4:14:EB:C0:4A:7C:32:3D:9E:26
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QvabUGBtft9NU9QU68BKfDI9niY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.173.0/24
185.193.103.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:94:78:8d:47:e7:a3:8a:ab:38:7d:ad:87:99:33:30:4f:01:
50:41:be:2f:1d:64:fe:f9:04:58:6e:dd:09:39:50:fb:1d:61:
d6:ff:19:e0:e8:82:0c:41:6a:f1:6e:3f:95:39:0b:1e:11:e7:
68:76:16:42:87:54:7c:42:31:9f:ae:9d:55:a5:89:e0:fe:4b:
f0:29:87:5d:6a:95:4e:b0:d0:db:2f:b5:1f:4e:8d:33:9d:e7:
08:89:0c:f3:71:df:e9:2d:2f:92:38:a5:36:d4:a5:2c:9a:17:
0b:58:12:ea:5d:68:d9:01:24:43:b6:c1:78:a5:5b:f2:31:a9:
c4:66:73:d4:9e:94:01:68:f7:49:bb:a5:ff:0a:d8:b3:df:c1:
35:0e:52:04:3e:d3:4c:bf:05:89:1f:ff:75:1f:00:95:e7:20:
d2:ad:a6:24:28:30:c4:62:f2:88:b2:48:7e:02:6b:85:0a:f6:
8b:eb:4d:25:11:e2:28:9f:9b:11:02:93:cf:45:14:fe:e1:d7:
c9:8c:34:cb:7f:41:bf:02:01:09:0d:64:5a:d0:68:ba:37:73:
de:3f:b2:4a:09:08:f4:cc:9b:8d:14:ed:4b:45:69:e9:9f:8f:
71:f8:16:12:be:df:72:47:3a:6a:c3:20:e3:7a:76:dc:05:77:
a0:23:e0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:13:40 2025 by rpki-client