Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a8mBkbFpbmvVYguUNONd9WmWKns.roa
File: a8mBkbFpbmvVYguUNONd9WmWKns.roa (raw, json)
Hash identifier: 8W6eB/hSwi8IVJso5KS/zgnqiPkC2smQ3DMwcyrJBqY=
Subject key identifier: 6B:C9:81:91:B1:69:6E:6B:D5:62:0B:94:34:E3:5D:F5:69:96:2A:7B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824AF81BF28ABB0AA64FD7D857EB8CD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a8mBkbFpbmvVYguUNONd9WmWKns.roa
Signing time: Thu 02 Jan 2025 17:51:20 +0000
ROA not before: Thu 02 Jan 2025 17:51:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204755
IP address blocks: 93.123.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:af:81:bf:28:ab:b0:aa:64:fd:7d:85:7e:b8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6bc98191b1696e6bd5620b9434e35df569962a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:d9:bb:1d:64:83:f6:8c:1f:66:ae:29:36:
44:19:bc:7b:e2:c1:e6:92:f2:49:14:72:27:1b:8e:
dd:13:fe:53:22:5b:67:87:72:51:ee:59:f9:47:df:
ad:55:71:cd:96:4b:43:61:c6:2b:e3:1f:6c:38:4a:
66:30:6c:eb:3b:6e:d5:d0:08:3d:f3:70:30:7b:00:
bf:4a:b6:d7:d7:28:40:55:3e:7b:f0:21:51:d3:96:
7e:35:41:af:af:69:2b:fa:8e:49:7c:ae:d9:4c:55:
1d:6c:3b:ac:15:2f:da:df:b3:f5:f8:4b:94:8e:bf:
60:12:46:43:ae:1f:4f:23:de:57:e6:8b:f0:17:00:
a5:19:14:f1:91:29:c5:c8:9d:7f:df:8d:de:1f:67:
4d:32:cf:65:41:98:37:32:1c:23:6d:c4:74:7f:83:
d1:ab:fe:16:93:ce:3f:e9:71:e7:cc:0e:99:53:c1:
ad:44:ee:fa:25:8d:9c:cd:23:ca:e7:fe:7e:f3:75:
88:0d:7c:9f:04:e1:fb:32:77:cb:52:95:2e:fb:39:
8e:77:37:78:eb:d4:ec:9f:dd:ee:29:d4:f0:e1:a9:
2f:cc:01:cf:9f:87:78:fa:6d:fe:5f:99:af:78:dc:
82:5b:99:3b:df:24:e9:1a:b0:b0:b5:4e:e7:04:f3:
d0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C9:81:91:B1:69:6E:6B:D5:62:0B:94:34:E3:5D:F5:69:96:2A:7B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/a8mBkbFpbmvVYguUNONd9WmWKns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a4:a0:63:73:94:3f:d3:6b:e2:99:1c:bf:0d:15:f9:bd:09:
81:87:a4:35:d1:c7:a0:88:6b:7e:c3:7e:fd:00:63:b4:3b:70:
ac:84:48:4a:ee:5b:88:f3:59:9f:80:b0:d8:a0:b2:4c:e1:17:
44:23:71:e6:e9:f1:c7:33:56:82:9b:e3:ca:91:ca:48:04:a1:
3f:62:00:50:25:63:e4:4f:d1:fa:29:7f:ca:88:2a:a5:e0:c0:
8a:e2:d6:d4:96:01:59:34:95:41:66:fc:d3:95:d8:49:95:4d:
94:f3:c5:e7:46:a0:57:39:6b:73:f9:f8:6d:0a:cb:75:8f:11:
a7:2b:ef:cf:f7:a4:6b:06:65:e2:8b:08:3f:09:bd:b2:c0:e9:
84:c1:d1:13:65:32:d8:c6:93:33:b8:af:ad:4e:8f:3f:a7:80:
04:39:df:f3:82:63:23:49:39:74:2a:64:7c:f3:90:62:33:de:
91:0b:fe:89:53:bd:41:bc:80:46:3d:ee:13:ce:c1:29:37:06:
55:30:66:9f:af:b0:dd:cb:13:d9:58:fe:88:2c:04:3c:0f:b0:
a6:e0:e1:53:d5:71:56:53:c9:fd:1a:2e:05:73:3b:ea:86:0a:
f1:92:ad:70:c0:04:43:4b:ee:6c:c5:67:14:5a:d7:e9:51:95:
ce:f4:d9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:37 2025 by rpki-client