Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dVQnYnKLxOEJ4unbO3i5DMlBlyg.roa
File: dVQnYnKLxOEJ4unbO3i5DMlBlyg.roa (raw, json)
Hash identifier: d5prERmjkvLTIzkjjSK/JlHAQC4SXrnPyyiBhawk/Fg=
Subject key identifier: 75:54:27:62:72:8B:C4:E1:09:E2:E9:DB:3B:78:B9:0C:C9:41:97:28
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428248C2FB4286F9D95ABEE1D626850C7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dVQnYnKLxOEJ4unbO3i5DMlBlyg.roa
Signing time: Thu 02 Jan 2025 17:51:11 +0000
ROA not before: Thu 02 Jan 2025 17:51:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55286
IP address blocks: 93.123.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:8c:2f:b4:28:6f:9d:95:ab:ee:1d:62:68:50:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75542762728bc4e109e2e9db3b78b90cc9419728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:35:6c:22:ec:78:99:6b:52:75:1f:ab:59:
f0:54:6d:6b:55:4a:a4:cf:56:36:49:01:5b:d8:99:
87:32:1f:55:6b:10:ee:4b:3f:a4:18:e5:aa:f3:f2:
76:b0:87:88:95:69:25:37:a5:c0:7a:56:74:f2:f7:
56:9b:fa:e9:a9:fb:ff:af:b5:a8:24:3f:a2:b2:94:
45:67:73:34:72:27:b0:90:ca:2e:38:2c:dc:32:f9:
cc:67:2c:6c:42:be:c9:ec:e9:90:d7:0a:4d:f3:89:
4c:f3:ec:45:5b:e9:41:fa:f4:69:eb:a9:83:99:8a:
5a:73:6a:7a:ad:0b:b3:87:8f:3c:3b:c7:25:63:4c:
85:be:83:e0:d9:d1:dc:cd:6c:af:e6:84:23:5c:d8:
62:4e:28:75:ff:67:af:a1:b4:ab:81:d9:79:60:99:
ba:c8:45:fb:8d:cb:1c:9f:96:66:82:b9:51:8f:a1:
96:93:b7:1d:48:a8:80:a1:72:de:f7:d2:ee:b7:e4:
0b:94:10:b1:93:91:cb:05:d9:f7:c1:13:15:a6:20:
8e:08:f7:d4:c9:62:4d:2b:f2:7e:bf:7c:89:cf:06:
5e:c3:4f:8e:b5:aa:85:b1:a4:0e:ad:f4:f4:b8:c8:
28:ff:e2:8e:db:29:2e:ed:35:5e:10:68:08:c2:10:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:54:27:62:72:8B:C4:E1:09:E2:E9:DB:3B:78:B9:0C:C9:41:97:28
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dVQnYnKLxOEJ4unbO3i5DMlBlyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:90:2d:8d:4c:df:19:cf:48:a6:87:7a:15:f5:8e:45:43:fa:
9f:af:de:cd:1d:41:45:86:f9:f5:99:e8:59:d9:57:30:13:7b:
ab:ab:4e:77:12:34:c9:29:e0:8d:5a:8c:74:fe:f5:2f:ad:d4:
12:dd:d6:25:9c:80:7c:2a:b2:8d:05:fd:cf:b8:d2:da:d7:92:
a8:e7:86:58:43:04:82:0c:96:74:7e:19:f8:1f:20:1e:b2:a6:
23:01:49:0f:07:b0:a6:f5:5a:f2:d5:a0:23:8a:20:6e:e5:8c:
bb:ea:3c:91:65:7c:5e:61:77:c5:81:2d:54:c7:6c:20:09:c9:
33:a2:f9:8c:0a:5b:ad:83:8f:db:cd:8f:b8:53:e4:e5:74:f2:
e1:d3:83:84:b0:6d:28:bd:94:f3:62:9b:fe:09:b9:ef:79:16:
8f:ce:34:88:6e:08:41:2b:82:df:ef:19:b5:2d:65:ed:9d:6c:
ae:67:fe:57:ce:fd:15:0d:57:42:9f:32:4a:47:2d:e8:90:78:
5c:8c:97:00:c1:f2:94:86:a6:08:e0:56:35:37:3e:a4:e6:0c:
b9:c0:6a:2f:7f:c0:64:8d:4e:b2:38:00:41:d3:e8:4c:d3:cd:
10:be:2a:87:55:bb:bd:2f:14:03:a8:ce:9f:0f:e6:f4:b7:61:
58:64:62:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:11 2025 by rpki-client