Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/_y3NM5_0f7MsfhtkcKzuJLDPoBk.roa
File: _y3NM5_0f7MsfhtkcKzuJLDPoBk.roa (raw, json)
Hash identifier: bwtNcBrGNEEfhGhbBMEoAmqI9q4hwa8bfh0IBzWlro4=
Subject key identifier: FF:2D:CD:33:9F:F4:7F:B3:2C:7E:1B:64:70:AC:EE:24:B0:CF:A0:19
Certificate issuer: /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial: 0195805C2F4E378BFE4E05B55ED8FBBD8DDF
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/_y3NM5_0f7MsfhtkcKzuJLDPoBk.roa
Signing time: Mon 10 Mar 2025 14:01:19 +0000
ROA not before: Mon 10 Mar 2025 14:01:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 212.93.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:5c:2f:4e:37:8b:fe:4e:05:b5:5e:d8:fb:bd:8d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Validity
Not Before: Mar 10 14:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff2dcd339ff47fb32c7e1b6470acee24b0cfa019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:26:c7:39:88:b8:7b:a9:32:4f:27:24:81:58:
a9:29:33:ee:d6:2f:70:ae:b1:94:4e:fa:4f:8a:cb:
af:54:f0:db:d0:d6:e1:79:ed:4f:e7:73:ae:13:5e:
b3:30:e7:51:dc:bf:2d:1d:65:58:3a:21:6c:39:d0:
22:0b:75:5d:cb:f5:fb:b8:0e:5e:f4:81:53:be:2f:
d3:90:e6:c7:05:1a:cf:2f:5d:6e:1b:72:11:fb:d2:
a3:7f:da:81:4d:ec:87:09:8f:07:83:3f:62:68:a6:
67:58:7a:9b:d9:56:a2:1d:18:40:7d:33:e4:12:70:
da:b3:6a:08:78:76:a4:ee:fe:70:83:2b:a1:3f:4c:
db:f5:fd:93:1f:09:b2:c3:42:53:31:95:13:ce:c8:
47:54:84:43:b2:33:f6:73:1d:83:15:eb:8e:a9:15:
bf:3e:6b:82:df:3b:1b:ee:ea:66:a7:37:d2:df:d7:
e5:9a:cb:d2:ec:01:75:8f:32:b2:da:81:21:d0:f0:
83:fe:8b:a1:ba:d9:5b:cb:7a:ef:96:1c:a6:6f:e3:
00:a1:30:5c:db:72:c3:d1:f3:c2:0d:a6:82:81:9c:
4e:c6:fb:35:25:a3:fd:b0:2c:a2:f3:d9:10:08:e1:
83:13:cb:b2:ea:da:6c:ee:56:36:76:4e:4e:64:80:
c7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2D:CD:33:9F:F4:7F:B3:2C:7E:1B:64:70:AC:EE:24:B0:CF:A0:19
X509v3 Authority Key Identifier:
keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/_y3NM5_0f7MsfhtkcKzuJLDPoBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.93.57.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:6f:7a:ea:44:27:3b:8c:e0:a0:7b:c6:11:94:75:14:aa:54:
7f:31:29:30:c1:83:77:1b:35:b9:15:d3:6c:c4:55:f4:d8:d5:
52:00:76:aa:e4:2d:af:d8:13:d0:52:83:01:42:36:82:42:7d:
b1:39:76:a7:2e:aa:ee:12:71:65:36:71:47:05:49:ca:d0:8e:
40:15:9d:cc:79:72:6a:22:22:f5:f8:17:e7:cd:4d:15:f3:32:
c7:c3:12:9d:26:9b:70:5e:ee:65:dc:bf:a5:73:1c:0c:57:e1:
19:b7:45:a2:27:5f:78:a7:c5:1c:ce:4f:53:ca:24:c4:aa:ff:
ba:f4:61:54:c6:f2:83:2f:c1:b9:cf:73:de:9a:b6:ee:db:84:
83:2c:81:cc:00:85:0c:2f:62:87:59:8f:a9:dd:97:bb:9c:62:
20:68:84:29:33:5a:3d:be:ee:99:e9:e5:5c:1d:4b:20:2c:0a:
ac:0b:9b:87:68:c8:55:e6:59:23:8e:b4:8d:16:0d:d5:f8:ec:
46:4f:42:e2:d1:a8:33:86:c0:d5:5c:ae:a8:7a:b7:77:ff:95:
31:30:e3:6e:a4:17:97:05:05:08:9e:39:ab:4e:05:cf:21:19:
74:76:5c:a4:c1:fc:d1:4b:28:27:7b:e2:bd:d0:f6:ef:9e:0f:
f4:33:a3:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWAXC9ON4v+TgW1Xtj7vY3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYjA3OGY3NWVhM2Q1MzU4ZmNjYTQ2NmM3NTVkNzVkMTIz
MGY4ZDgwHhcNMjUwMzEwMTQwMTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjJkY2QzMzlmZjQ3ZmIzMmM3ZTFiNjQ3MGFjZWUyNGIwY2ZhMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CbHOYi4e6kyTyckgVipKTPu1i9w
rrGUTvpPisuvVPDb0Nbhee1P53OuE16zMOdR3L8tHWVYOiFsOdAiC3Vdy/X7uA5e
9IFTvi/TkObHBRrPL11uG3IR+9Kjf9qBTeyHCY8Hgz9iaKZnWHqb2VaiHRhAfTPk
EnDas2oIeHak7v5wgyuhP0zb9f2THwmyw0JTMZUTzshHVIRDsjP2cx2DFeuOqRW/
PmuC3zsb7upmpzfS39flmsvS7AF1jzKy2oEh0PCD/ouhutlby3rvlhymb+MAoTBc
23LD0fPCDaaCgZxOxvs1JaP9sCyi89kQCOGDE8uy6tps7lY2dk5OZIDHKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8tzTOf9H+zLH4bZHCs7iSwz6AZMB8GA1UdIwQY
MBaAFO6wePdeo9U1j8ykZsdV110SMPjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMt
ODIxNzA3ZTJjMDAyLzEvX3kzTk01XzBmN01zZmh0a2NLenVKTERQb0JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hZTYwZmEtOTZlNS00ZjZhLThiOTMtODIxNzA3ZTJjMDAy
LzEvN3JCNDkxNmoxVFdQektSbXgxWFhYUkl3LU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1F05MA0G
CSqGSIb3DQEBCwUAA4IBAQCsb3rqRCc7jOCge8YRlHUUqlR/MSkwwYN3GzW5FdNs
xFX02NVSAHaq5C2v2BPQUoMBQjaCQn2xOXanLqruEnFlNnFHBUnK0I5AFZ3MeXJq
IiL1+BfnzU0V8zLHwxKdJptwXu5l3L+lcxwMV+EZt0WiJ194p8Uczk9TyiTEqv+6
9GFUxvKDL8G5z3Pemrbu24SDLIHMAIUML2KHWY+p3Ze7nGIgaIQpM1o9vu6Z6eVc
HUsgLAqsC5uHaMhV5lkjjrSNFg3V+OxGT0Li0agzhsDVXK6oerd3/5UxMONupBeX
BQUInjmrTgXPIRl0dlykwfzRSygne+K90Pbvng/0M6Ob
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:42 2025 by rpki-client