Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/al2gIEGdVZYNaP7iZlQ9mB2jWLo.roa
File: al2gIEGdVZYNaP7iZlQ9mB2jWLo.roa (raw, json)
Hash identifier: 2Cs3Vy805OGS1Cw1umVzYqFuJNeLM4F72w1e4DKQX8c=
Subject key identifier: 6A:5D:A0:20:41:9D:55:96:0D:68:FE:E2:66:54:3D:98:1D:A3:58:BA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195A96827C59B92E431E95C58F41F1FCA79
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/al2gIEGdVZYNaP7iZlQ9mB2jWLo.roa
Signing time: Tue 18 Mar 2025 13:18:50 +0000
ROA not before: Tue 18 Mar 2025 13:18:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 22653
IP address blocks: 93.123.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a9:68:27:c5:9b:92:e4:31:e9:5c:58:f4:1f:1f:ca:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 18 13:18:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a5da020419d55960d68fee266543d981da358ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:8f:9c:82:58:ee:19:36:1d:8e:f0:aa:78:
1e:a2:5a:5e:be:ad:36:c4:9f:09:b7:17:e6:77:f4:
67:b2:c8:64:b6:f0:81:0a:46:dd:59:72:0f:0c:5f:
4d:45:cd:94:6c:73:d1:a7:3c:a6:c3:15:93:54:d1:
a6:79:7e:ec:4e:c5:3f:27:68:87:61:f1:15:d7:b8:
45:e4:00:f1:c9:43:30:af:40:43:8a:d2:7e:64:30:
d7:97:0c:24:44:8f:06:85:9d:5a:e9:da:a5:c4:fc:
91:24:27:aa:60:03:62:bc:20:ba:77:95:b3:77:74:
55:e5:62:14:5f:bb:e5:d1:d0:08:b4:84:52:a3:97:
38:15:75:86:6a:b7:3d:2e:85:16:69:2f:12:67:da:
2b:8d:ed:51:2a:ff:f7:42:a0:6c:f4:16:e0:83:17:
40:81:cc:f5:14:21:be:44:92:0e:8f:7c:c0:7c:c0:
99:21:e3:fa:e1:d1:3c:4e:ba:3c:3b:6c:33:6d:78:
ad:d9:81:ae:55:41:4f:2a:8c:44:9c:5f:c4:5a:f5:
9a:40:29:3a:e5:91:a6:59:94:1b:82:26:65:6f:9b:
a1:a7:c7:2c:8c:a8:cd:63:97:58:d6:34:d0:0a:be:
85:46:85:c7:1a:70:5e:fb:16:a7:89:29:9a:8b:fb:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5D:A0:20:41:9D:55:96:0D:68:FE:E2:66:54:3D:98:1D:A3:58:BA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/al2gIEGdVZYNaP7iZlQ9mB2jWLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.76.0/22
Signature Algorithm: sha256WithRSAEncryption
90:38:b0:9e:f2:75:8a:65:c1:88:ad:80:4d:5d:b5:25:40:10:
b0:dd:4b:36:71:60:81:af:e7:7c:2c:ea:ac:cd:25:4d:79:08:
63:a2:cc:dd:8c:1f:e1:5b:0b:4d:6b:9b:8b:63:ac:06:fe:50:
7a:49:43:a9:65:12:05:f8:a6:e2:31:e2:ec:bb:65:1d:82:fe:
8b:a0:e2:6b:92:69:34:64:8b:20:60:e5:1e:2b:7e:f8:37:b5:
bc:87:1f:65:ea:7d:d0:1e:9a:64:c9:c9:3b:e9:87:79:a8:f5:
c5:fd:43:e8:b4:e0:bc:20:25:da:a0:61:6a:34:65:7d:04:f0:
aa:4d:b5:eb:12:5a:5e:7f:1d:7f:88:57:94:44:33:fb:3d:ea:
68:6d:1f:77:87:6c:67:da:78:9f:80:ac:dd:ad:a1:f8:c7:cc:
85:9d:75:9b:14:85:90:82:88:ed:b8:a0:b7:7f:27:9c:00:44:
90:d6:32:3c:14:c4:22:b0:39:cd:be:54:a3:eb:4b:13:d0:20:
12:50:c7:69:c0:05:cc:c3:1b:49:d3:12:08:b7:7d:63:f0:04:
01:16:3a:0e:c4:d6:cf:cb:c9:6f:1b:91:da:c6:3d:ed:3d:39:
a9:8e:62:37:21:45:f4:09:3a:fa:38:d1:1d:0a:0e:4a:ad:94:
74:67:d4:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZWpaCfFm5LkMelcWPQfH8p5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMzE4MTMxODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTVkYTAyMDQxOWQ1NTk2MGQ2OGZlZTI2NjU0M2Q5ODFkYTM1OGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eGPnIJY7hk2HY7wqngeolpevq02
xJ8Jtxfmd/RnsshktvCBCkbdWXIPDF9NRc2UbHPRpzymwxWTVNGmeX7sTsU/J2iH
YfEV17hF5ADxyUMwr0BDitJ+ZDDXlwwkRI8GhZ1a6dqlxPyRJCeqYANivCC6d5Wz
d3RV5WIUX7vl0dAItIRSo5c4FXWGarc9LoUWaS8SZ9orje1RKv/3QqBs9BbggxdA
gcz1FCG+RJIOj3zAfMCZIeP64dE8Tro8O2wzbXit2YGuVUFPKoxEnF/EWvWaQCk6
5ZGmWZQbgiZlb5uhp8csjKjNY5dY1jTQCr6FRoXHGnBe+xaniSmai/vAkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGpdoCBBnVWWDWj+4mZUPZgdo1i6MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYWwyZ0lFR2RWWllOYVA3aVpsUTltQjJqV0xvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXXtMMA0G
CSqGSIb3DQEBCwUAA4IBAQCQOLCe8nWKZcGIrYBNXbUlQBCw3Us2cWCBr+d8LOqs
zSVNeQhjoszdjB/hWwtNa5uLY6wG/lB6SUOpZRIF+KbiMeLsu2Udgv6LoOJrkmk0
ZIsgYOUeK374N7W8hx9l6n3QHppkyck76Yd5qPXF/UPotOC8ICXaoGFqNGV9BPCq
TbXrElpefx1/iFeURDP7PepobR93h2xn2nifgKzdraH4x8yFnXWbFIWQgojtuKC3
fyecAESQ1jI8FMQisDnNvlSj60sT0CASUMdpwAXMwxtJ0xIIt31j8AQBFjoOxNbP
y8lvG5Haxj3tPTmpjmI3IUX0CTr6ONEdCg5KrZR0Z9QH
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:06 2025 by rpki-client