Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PVu8erp8giI-1MkKldPjUgS0f-g.roa
File: PVu8erp8giI-1MkKldPjUgS0f-g.roa (raw, json)
Hash identifier: HERbwYqO3kVrBfm/mPG7Mo7Oa1468jt4LkJFD0mxS8s=
Subject key identifier: 3D:5B:BC:7A:BA:7C:82:22:3E:D4:C9:0A:95:D3:E3:52:04:B4:7F:E8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824A5A81D305B8658DACBCA958ED156
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PVu8erp8giI-1MkKldPjUgS0f-g.roa
Signing time: Thu 02 Jan 2025 17:51:17 +0000
ROA not before: Thu 02 Jan 2025 17:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199871
IP address blocks: 93.123.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:a5:a8:1d:30:5b:86:58:da:cb:ca:95:8e:d1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d5bbc7aba7c82223ed4c90a95d3e35204b47fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:42:3c:a2:8e:88:a6:dc:bc:1c:2d:46:24:c3:
7f:6d:da:45:21:2b:2d:1b:e6:bd:fb:20:32:39:1e:
dc:5a:15:0c:f3:12:41:fa:ac:77:60:78:06:2c:53:
0d:c9:47:84:78:e0:fa:cd:b9:ec:08:b9:3c:b7:54:
f8:aa:b0:6c:da:3b:67:7a:0f:a4:40:54:66:27:f5:
ae:fc:51:fd:42:e1:89:4d:ed:b3:75:6e:99:a4:ec:
35:9e:ed:db:93:72:74:c2:7f:60:3a:6b:84:cb:8b:
ed:4e:c1:8f:9d:a6:18:5d:6c:5a:e2:7b:1e:8e:98:
ee:16:20:49:e1:a7:46:19:42:43:c9:ba:59:f5:5a:
00:75:1b:9f:49:70:ab:65:33:55:15:d2:3d:d7:e4:
ad:bd:a9:3b:cd:34:bb:5e:7c:d2:2e:f3:51:94:f0:
58:d9:fd:85:37:5f:ea:11:4b:45:d4:0a:98:78:e4:
52:f5:d8:f3:79:4c:5f:e8:ac:5a:8e:52:07:60:0b:
14:40:0b:67:8d:e6:df:66:23:e2:a8:13:48:81:f9:
3e:ca:8b:a7:d4:14:cf:4f:69:12:4e:a1:7e:85:91:
fc:8d:f6:73:52:68:d4:a8:be:9f:98:ca:c6:33:6b:
a2:bf:28:67:7e:5b:4c:7d:7b:35:d0:2a:20:d0:04:
85:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5B:BC:7A:BA:7C:82:22:3E:D4:C9:0A:95:D3:E3:52:04:B4:7F:E8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PVu8erp8giI-1MkKldPjUgS0f-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.110.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2a:69:64:34:9f:4e:29:5f:45:b6:2a:19:3b:ac:26:a8:71:
3e:a5:57:45:61:40:1e:cb:66:45:7b:6a:e2:6b:bd:0f:05:ff:
23:63:96:a3:48:e9:a4:2f:53:a7:c1:78:45:c1:6b:87:f0:3b:
34:5e:96:86:b6:fb:31:25:ab:54:88:f7:65:ad:75:b9:76:27:
69:8f:69:5f:32:63:0f:95:9b:88:5d:ea:20:a9:38:39:1f:68:
f1:4a:6e:bb:93:08:5e:ab:3d:47:60:d3:0f:26:b4:f7:04:75:
0e:a0:a4:e7:d2:fe:e4:6e:7b:5b:b4:6d:2a:3a:c7:ee:76:40:
35:4f:c3:ce:a1:1e:af:b5:13:73:3c:6a:e2:71:8f:e8:a2:b5:
1a:08:c6:3b:74:48:1a:71:cc:2c:5c:b9:77:38:b5:93:46:ab:
b5:c4:9a:66:6d:88:02:2a:6b:e4:8c:8e:37:02:58:5b:59:af:
6d:88:12:5c:5d:9a:85:14:3a:22:6a:25:32:3c:22:b5:6a:56:
e1:3a:e4:28:2f:bb:ad:98:57:0c:28:fa:21:7b:8a:77:72:d4:
d4:a0:a0:2d:d1:0f:4e:4e:11:e3:3b:17:cf:36:f4:af:51:77:
31:57:c1:15:30:14:52:4d:c5:8f:b9:62:f4:c6:e8:ec:d3:12:
ab:2b:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:39:57 2025 by rpki-client