Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J7M4_DP5vPyCpQx_7xrGuIYQySo.roa
File: J7M4_DP5vPyCpQx_7xrGuIYQySo.roa (raw, json)
Hash identifier: QvoUqKdjGY1mrwvxC5JKX8tPtW92AI8vK3bJyczLzSw=
Subject key identifier: 27:B3:38:FC:33:F9:BC:FC:82:A5:0C:7F:EF:1A:C6:B8:86:10:C9:2A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824743EAD18E19CBDA9AA0FE6BA0F6A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J7M4_DP5vPyCpQx_7xrGuIYQySo.roa
Signing time: Thu 02 Jan 2025 17:51:05 +0000
ROA not before: Thu 02 Jan 2025 17:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 38195
IP address blocks: 93.123.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:74:3e:ad:18:e1:9c:bd:a9:aa:0f:e6:ba:0f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27b338fc33f9bcfc82a50c7fef1ac6b88610c92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:2e:fe:c3:b4:6d:68:31:4b:af:55:de:36:
cd:c2:da:04:a7:82:5b:a9:14:c7:15:63:9a:ab:6f:
81:ae:6a:cf:ed:41:0b:06:b6:22:ca:d7:1f:4f:76:
b6:07:9c:8f:a8:2f:8e:20:d9:cc:07:11:1b:d8:1d:
18:7f:a9:98:96:aa:d3:03:fd:cc:21:dc:2c:f2:b7:
0d:ba:ea:2b:de:b0:19:c8:ad:4e:6b:9e:57:65:7a:
2d:7e:aa:52:f6:cd:62:1f:f4:8f:4c:68:00:67:e3:
62:33:00:d7:28:19:19:dd:1f:84:8a:6b:ca:fc:ee:
00:05:59:6f:9c:fb:09:98:72:c9:f7:ee:35:ed:ec:
40:41:b6:40:ac:b7:87:13:b3:16:be:03:b7:4e:0d:
ad:f0:2b:60:87:39:fc:c5:95:7c:48:7a:8a:f1:6a:
63:46:2d:73:03:28:71:c9:1b:45:24:90:06:01:a6:
53:b0:0c:bd:b8:95:0c:c7:d7:e2:e2:6f:e3:52:8c:
a0:84:75:60:03:a4:98:4a:1b:24:1c:7c:0b:84:e3:
ef:d8:a6:2c:13:ae:f1:1c:e0:cb:4d:a6:68:53:98:
00:c4:7a:d2:57:b9:c2:aa:16:e2:4a:bc:25:eb:5d:
c4:48:75:6b:7f:4f:40:34:53:b1:48:96:c6:a2:9d:
59:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B3:38:FC:33:F9:BC:FC:82:A5:0C:7F:EF:1A:C6:B8:86:10:C9:2A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/J7M4_DP5vPyCpQx_7xrGuIYQySo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.114.0/24
Signature Algorithm: sha256WithRSAEncryption
00:48:eb:71:9a:fe:a9:b7:12:59:77:32:43:e4:4a:dd:d4:9b:
30:e2:d7:a5:47:02:cc:05:cd:69:b8:5e:f7:8d:05:9a:3e:b8:
ba:c6:f3:36:8d:ef:76:21:a3:a1:17:65:94:06:43:78:f8:a7:
ec:8a:cf:f8:5b:b4:44:a8:e2:7d:80:26:3a:d2:68:b3:e7:30:
a2:32:79:c6:72:17:87:65:67:57:fb:12:72:3c:71:5a:0b:92:
bc:9d:21:82:c9:bb:ae:36:70:bc:3c:f7:70:8c:01:89:18:d6:
59:4b:0c:0c:f5:1c:57:75:13:40:0e:ea:85:ae:04:a3:d5:c2:
31:ef:c0:87:ea:ce:76:09:a9:88:25:b5:d0:0d:79:18:1b:c8:
54:a6:c0:2f:a0:f2:44:c5:4a:26:bf:87:87:67:c5:bc:b2:85:
e9:ef:1d:2c:b2:d8:fa:9a:05:d4:ca:09:54:9a:a5:fd:ab:1e:
dd:5b:d7:32:19:22:05:5b:b8:41:86:e6:60:83:dc:1f:6e:7b:
12:29:5f:cc:b1:bb:11:0e:72:76:55:6e:3b:44:43:9f:72:a5:
fa:4a:bf:5b:27:89:46:c6:7a:b8:f6:57:91:98:fe:0f:8f:f7:
c3:9b:76:36:19:4b:3c:af:44:fc:ee:05:ba:34:03:ca:1d:cf:
3c:ae:0f:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJHQ+rRjhnL2pqg/mug9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2IzMzhmYzMzZjliY2ZjODJhNTBjN2ZlZjFhYzZiODg2MTBjOTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfAu/sO0bWgxS69V3jbNwtoEp4Jb
qRTHFWOaq2+BrmrP7UELBrYiytcfT3a2B5yPqC+OINnMBxEb2B0Yf6mYlqrTA/3M
Idws8rcNuuor3rAZyK1Oa55XZXotfqpS9s1iH/SPTGgAZ+NiMwDXKBkZ3R+EimvK
/O4ABVlvnPsJmHLJ9+417exAQbZArLeHE7MWvgO3Tg2t8Ctghzn8xZV8SHqK8Wpj
Ri1zAyhxyRtFJJAGAaZTsAy9uJUMx9fi4m/jUoyghHVgA6SYShskHHwLhOPv2KYs
E67xHODLTaZoU5gAxHrSV7nCqhbiSrwl613ESHVrf09ANFOxSJbGop1ZcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCezOPwz+bz8gqUMf+8axriGEMkqMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSjdNNF9EUDV2UHlDcFF4Xzd4ckd1SVlReVNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXtyMA0G
CSqGSIb3DQEBCwUAA4IBAQAASOtxmv6ptxJZdzJD5Erd1Jsw4telRwLMBc1puF73
jQWaPri6xvM2je92IaOhF2WUBkN4+Kfsis/4W7REqOJ9gCY60miz5zCiMnnGcheH
ZWdX+xJyPHFaC5K8nSGCybuuNnC8PPdwjAGJGNZZSwwM9RxXdRNADuqFrgSj1cIx
78CH6s52CamIJbXQDXkYG8hUpsAvoPJExUomv4eHZ8W8soXp7x0sstj6mgXUyglU
mqX9qx7dW9cyGSIFW7hBhuZgg9wfbnsSKV/MsbsRDnJ2VW47REOfcqX6Sr9bJ4lG
xnq49leRmP4Pj/fDm3Y2GUs8r0T87gW6NAPKHc88rg/d
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:34 2025 by rpki-client