Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/15xabzkapAsSjIKERak6-4m1So0.roa
File: 15xabzkapAsSjIKERak6-4m1So0.roa (raw, json)
Hash identifier: FylhIFKLzVcHOQsVvyYerlKh6o6ajQeSyBB7cVFNmPU=
Subject key identifier: D7:9C:5A:6F:39:1A:A4:0B:12:8C:82:84:45:A9:3A:FB:89:B5:4A:8D
Certificate issuer: /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial: 01942144393A73AE78E50ACFB40C91451F96
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/15xabzkapAsSjIKERak6-4m1So0.roa
Signing time: Wed 01 Jan 2025 09:48:26 +0000
ROA not before: Wed 01 Jan 2025 09:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52209
IP address blocks: 185.93.89.0/24 maxlen: 24
2a13:9dc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:39:3a:73:ae:78:e5:0a:cf:b4:0c:91:45:1f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Validity
Not Before: Jan 1 09:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d79c5a6f391aa40b128c828445a93afb89b54a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:1f:4e:af:b4:33:50:fb:c2:85:dc:84:41:
a4:09:18:8a:b8:8f:2a:94:3e:d3:a9:90:58:ef:22:
c5:1a:1d:4d:60:9f:e0:09:82:85:32:70:94:4e:1a:
15:4f:2d:2e:4c:3c:40:7c:00:a3:03:22:dc:d9:d7:
86:29:46:90:44:47:51:02:35:ae:6d:be:58:0f:5e:
c9:f5:69:6c:d4:7b:bc:18:b3:a9:81:98:a9:ac:a7:
1d:6a:15:d7:f1:bf:d0:43:9a:a2:30:b3:6a:32:ba:
87:13:83:1d:62:2b:6d:a3:0f:23:cd:b8:8d:88:43:
c4:72:44:be:0c:c3:ae:a4:4d:fc:7f:6e:09:35:25:
c9:bf:81:7e:58:7b:d2:ef:17:16:03:53:ce:6d:aa:
3a:a9:2f:49:c9:74:2b:59:fb:a8:45:7d:d4:ee:2e:
31:00:74:78:6f:48:9e:69:af:95:96:2c:8f:e0:57:
5b:64:55:4f:03:f7:24:e8:96:bf:90:85:0b:a9:76:
7c:95:a1:66:38:cb:c8:80:8f:01:4a:bc:ab:19:a1:
81:e0:9a:80:0d:d2:c4:7c:39:24:b3:30:c0:34:48:
3c:4c:42:46:e7:89:29:d9:bc:30:6d:d7:7c:06:c6:
14:26:b3:ff:e9:06:63:a5:b7:dc:45:5d:5d:de:cb:
35:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9C:5A:6F:39:1A:A4:0B:12:8C:82:84:45:A9:3A:FB:89:B5:4A:8D
X509v3 Authority Key Identifier:
keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/15xabzkapAsSjIKERak6-4m1So0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.89.0/24
IPv6:
2a13:9dc0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:b3:eb:16:41:a4:0c:10:e0:5a:4d:0b:84:7b:15:ee:c5:03:
c4:20:b7:18:cc:9e:c8:6b:8c:2c:98:65:38:be:9e:f7:dd:d6:
c0:2b:fd:b3:3a:86:c3:40:76:c7:01:96:c5:52:04:a7:30:7b:
85:f4:14:1c:84:1e:4a:e1:00:7a:bb:b8:ca:46:54:2e:b6:eb:
09:59:2a:88:3a:8d:ea:38:16:85:d5:48:43:dd:ff:e5:c8:f2:
1b:b4:44:99:a4:b9:66:35:d3:48:05:9c:ac:82:46:59:4f:13:
64:de:fb:40:f2:2c:2e:ca:cb:85:40:f1:c9:39:0c:45:75:f3:
9b:20:5e:48:18:fd:fd:ec:9b:fc:55:41:19:98:25:c5:05:b2:
51:44:d1:bc:25:b5:8a:a3:46:9f:64:16:20:31:30:58:87:37:
78:3f:de:a5:22:da:98:c1:f4:3b:4f:23:66:a1:5b:cc:e9:01:
40:03:7e:7e:03:17:ff:83:2b:fb:52:2e:b8:13:36:72:de:62:
80:61:3b:46:5a:9b:91:93:98:08:29:9a:48:ab:f8:d2:5e:0c:
61:dd:ee:e9:ba:af:cd:1f:e1:5b:29:f7:82:bc:4d:8b:3f:33:
31:50:27:69:a0:fb:86:5b:47:a4:e7:1b:ef:d9:5e:3f:c7:9c:
b1:21:11:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:31:22 2025 by rpki-client