Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/SSLLWRxY0V4J6I9l65vEUaKwK4Q.roa
File: SSLLWRxY0V4J6I9l65vEUaKwK4Q.roa (raw, json)
Hash identifier: llqnu+z/IAMUkrZ/zCpWswAVAWND5pihVLoy0VRdDyQ=
Subject key identifier: 49:22:CB:59:1C:58:D1:5E:09:E8:8F:65:EB:9B:C4:51:A2:B0:2B:84
Certificate issuer: /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial: 01949A2CFB310498A1B2AD6FCEECA8B46E2D
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/SSLLWRxY0V4J6I9l65vEUaKwK4Q.roa
Signing time: Fri 24 Jan 2025 21:17:06 +0000
ROA not before: Fri 24 Jan 2025 21:17:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44947
IP address blocks: 185.93.89.0/24 maxlen: 24
2a13:9dc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9a:2c:fb:31:04:98:a1:b2:ad:6f:ce:ec:a8:b4:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Validity
Not Before: Jan 24 21:17:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4922cb591c58d15e09e88f65eb9bc451a2b02b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:cb:90:a8:29:cb:b7:bb:f5:cb:14:d9:01:
78:17:f5:86:68:f0:ee:f3:1a:a4:94:05:27:f6:66:
58:60:6c:48:d0:83:da:97:1c:03:56:72:bc:62:da:
a4:dd:3e:be:f0:4f:e8:c9:2c:4d:cb:9b:82:4c:14:
ec:87:f4:db:cc:1f:cd:25:19:26:98:7b:62:47:fb:
ca:33:ff:83:51:69:a2:b8:f2:5e:60:2d:7d:19:40:
8d:15:30:ce:e2:31:ea:db:0a:54:81:3d:aa:0a:da:
d9:aa:9a:97:c9:4e:ab:60:95:66:28:79:1a:74:49:
1c:36:bb:7e:3a:b6:19:df:26:e3:2b:f5:06:10:8e:
f8:97:6e:9e:3d:62:a9:56:25:7d:75:3a:4a:06:40:
fa:84:5a:7e:75:4e:a9:d1:6d:55:3a:e4:93:3f:16:
f8:97:a8:de:26:93:71:e1:b3:ac:0f:83:4a:33:e3:
e0:f6:c3:40:12:5f:f6:71:a3:df:68:6f:9c:63:9e:
f0:8a:d5:db:d5:9c:45:e6:27:2a:0d:c9:ee:34:db:
cd:e5:af:bc:70:58:6f:63:30:77:2a:98:1d:54:a6:
0a:1b:7f:d2:5c:b0:ca:51:f8:3d:22:d6:c3:a5:1a:
ff:27:5a:d3:83:df:89:47:91:90:43:06:7f:0a:d6:
80:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:22:CB:59:1C:58:D1:5E:09:E8:8F:65:EB:9B:C4:51:A2:B0:2B:84
X509v3 Authority Key Identifier:
keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/SSLLWRxY0V4J6I9l65vEUaKwK4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.89.0/24
IPv6:
2a13:9dc0::/29
Signature Algorithm: sha256WithRSAEncryption
59:18:90:18:2c:6b:a6:c5:69:ba:28:0c:a4:25:f5:0b:f8:3c:
dd:ec:83:21:9a:e2:f5:86:70:ad:7a:c0:70:8f:6e:b6:84:50:
dd:b7:b9:60:b4:65:f2:ef:df:60:ca:f3:f3:a0:0d:e8:05:04:
8a:b5:f5:7d:00:4c:b7:82:48:70:e0:ab:ca:e6:1d:8a:f8:fb:
0b:2c:5a:c0:ad:fd:a1:a7:2a:83:33:20:60:e1:c7:60:13:04:
10:6a:e3:65:76:dd:a2:06:ff:c0:58:e1:2a:a5:11:00:1c:e5:
46:5f:8d:7a:ef:25:95:16:62:18:73:74:88:ec:1b:ae:76:dd:
37:67:83:bd:60:d1:85:ec:1b:7c:bc:de:ef:42:03:04:19:4c:
dd:a3:6d:19:70:47:00:20:f2:46:be:cc:32:94:48:c5:63:48:
48:73:a0:87:c3:85:1d:64:4b:cc:90:24:17:8b:28:6b:fd:ad:
d1:65:9e:cd:ac:e9:c4:27:cc:82:57:22:81:e1:0b:19:ca:ad:
02:80:87:48:df:2a:ef:dd:9b:ad:6b:5b:0f:9e:19:0f:9f:05:
33:42:9d:04:da:bf:4a:9a:04:26:91:af:4f:6c:c1:02:f1:44:
91:ff:84:62:d3:f7:9b:8b:02:85:b8:cf:eb:52:84:8b:8b:d2:
d5:fb:a0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:14:12 2025 by rpki-client