Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/mY9DqP6sBYRDAuWwviu5NNB6lIA.roa
File: mY9DqP6sBYRDAuWwviu5NNB6lIA.roa (raw, json)
Hash identifier: Jpwfq6zWzFUKhEKM7+C1EDuHC9fqQSYeca6cvS8lEYo=
Subject key identifier: 99:8F:43:A8:FE:AC:05:84:43:02:E5:B0:BE:2B:B9:34:D0:7A:94:80
Certificate issuer: /CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Certificate serial: 01941F8C7F43DE662F077EA4D9A77E9B3CB2
Authority key identifier: 3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/mY9DqP6sBYRDAuWwviu5NNB6lIA.roa
Signing time: Wed 01 Jan 2025 01:48:08 +0000
ROA not before: Wed 01 Jan 2025 01:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50091
IP address blocks: 93.115.6.0/24 maxlen: 24
93.115.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7f:43:de:66:2f:07:7e:a4:d9:a7:7e:9b:3c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b376725200d8d8c00cf0f7514af25ff362310f0
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=998f43a8feac05844302e5b0be2bb934d07a9480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:5b:f9:40:e8:8d:8c:6b:ed:46:aa:63:37:
83:19:47:ee:e8:05:4c:af:3f:5f:d7:df:5f:38:33:
4d:7f:2d:31:33:65:9a:97:9a:a5:d8:c0:ff:ae:66:
1d:4e:45:50:cc:6b:d5:e4:0a:55:e7:ad:ae:8c:73:
35:79:9f:b4:63:52:bd:69:93:08:70:37:41:c9:a6:
4f:45:fe:7c:3e:73:e2:83:74:eb:05:a5:c0:d2:f5:
1e:38:4c:61:1b:c1:81:31:74:cb:4d:6f:5c:0c:b5:
b6:bc:5a:1f:a1:e7:31:41:8a:2e:39:54:5a:1d:d1:
f7:b2:f6:ed:f1:59:a1:58:26:f4:a9:4d:21:37:8f:
c5:44:4a:f5:3e:74:19:5a:38:f4:2a:41:58:cf:b9:
75:cb:ce:84:64:5f:37:ce:dc:b7:42:c9:07:e1:ea:
31:2b:d3:6f:04:4b:50:e1:b4:8f:c0:32:a7:28:94:
d2:5d:23:0c:73:2e:f6:fd:07:10:86:08:5f:2a:74:
e7:60:77:3c:dd:41:9f:06:a1:89:35:28:d8:59:13:
0c:86:6b:93:88:60:25:d1:0a:ce:d6:9f:33:5b:36:
72:37:51:bd:f3:cb:40:15:e4:a3:df:f4:26:08:23:
7f:4e:24:7a:24:ff:2b:76:e5:3d:69:b8:7b:c0:64:
d7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8F:43:A8:FE:AC:05:84:43:02:E5:B0:BE:2B:B9:34:D0:7A:94:80
X509v3 Authority Key Identifier:
keyid:3B:37:67:25:20:0D:8D:8C:00:CF:0F:75:14:AF:25:FF:36:23:10:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzdnJSANjYwAzw91FK8l_zYjEPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/mY9DqP6sBYRDAuWwviu5NNB6lIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e54a63-36b4-4684-9159-292098da2e39/1/OzdnJSANjYwAzw91FK8l_zYjEPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.6.0/24
93.115.108.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:16:93:2b:32:07:e5:1a:34:f8:90:a1:1a:f2:38:cb:29:9e:
64:f8:46:87:25:d1:13:34:f9:4a:74:ca:83:03:cb:37:48:8a:
4b:9e:dc:3f:77:b2:99:4f:a7:29:c3:22:d4:a0:ba:07:8c:9f:
d3:5c:5b:a8:49:08:cf:a7:a1:a2:59:6d:84:9c:76:d1:e7:62:
47:e3:ca:d3:c2:8b:83:d3:d6:6e:8c:6a:4d:3e:63:21:43:92:
d6:5a:2e:82:cd:5f:60:93:27:d2:53:c8:bc:63:48:ea:29:7c:
9a:12:5d:c9:58:07:01:4b:29:22:da:ec:a9:c2:ad:2b:c1:19:
9f:4f:63:50:70:f7:3e:47:0f:4e:72:67:12:7a:41:59:90:da:
32:d5:64:1d:1d:02:7c:06:f0:6e:15:d5:c5:16:92:c1:c7:25:
9c:4f:71:c4:8e:23:84:c0:cc:5b:75:4b:cc:f1:28:0b:e9:94:
00:d2:d0:da:c7:90:d6:07:68:98:6b:16:38:72:dd:bc:e7:c6:
1e:ee:92:78:0c:2c:72:76:33:95:84:58:b1:1b:ce:9b:12:43:
74:98:2c:b3:69:e8:f9:39:8d:7c:5c:4e:aa:35:09:84:38:e2:
79:a5:52:10:86:97:89:0a:10:ab:ad:ec:95:43:a6:57:1b:99:
fc:53:9d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:11 2025 by rpki-client