Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/WRbIUy7mvY94YTBWkNsmSXdiDe8.roa
File: WRbIUy7mvY94YTBWkNsmSXdiDe8.roa (raw, json)
Hash identifier: qg1bqvmEE+xpz4cQ/pMWtEHVYuohJyTtclXauFYTWH4=
Subject key identifier: 59:16:C8:53:2E:E6:BD:8F:78:61:30:56:90:DB:26:49:77:62:0D:EF
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 019422FBCBE1A4D8D5A6DE95B6886EAF8B67
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/WRbIUy7mvY94YTBWkNsmSXdiDe8.roa
Signing time: Wed 01 Jan 2025 17:48:34 +0000
ROA not before: Wed 01 Jan 2025 17:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209371
IP address blocks: 93.190.9.0/24 maxlen: 24
93.190.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:cb:e1:a4:d8:d5:a6:de:95:b6:88:6e:af:8b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Jan 1 17:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5916c8532ee6bd8f7861305690db264977620def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:97:21:0a:ec:02:fa:33:55:6f:4b:b0:cb:4e:
f6:57:5f:08:79:f8:63:9b:dc:24:96:b8:c3:37:23:
c5:84:f9:71:98:2b:5f:a9:35:22:3d:89:b6:86:01:
86:e0:3f:14:9a:b9:63:54:94:bb:b1:c4:b8:f5:68:
62:55:b8:b5:ed:b1:41:69:b6:d2:c1:28:48:3a:79:
d4:fe:93:6b:f0:db:43:4b:09:1e:7b:9b:4b:f7:03:
4f:9a:fb:72:6d:c5:38:39:8d:b8:22:63:ec:f1:da:
89:7e:44:ae:8a:0e:5f:3a:f8:27:ac:3c:23:74:13:
92:dd:24:f3:42:fe:fe:8a:3e:47:2e:0d:fd:1c:aa:
8a:39:dc:e1:fb:84:28:23:40:a9:d1:01:3e:c3:3b:
2d:24:3d:49:8c:38:d1:d8:a3:4f:99:e6:b5:96:25:
70:c3:9d:19:e5:3c:be:88:3c:00:d3:af:27:b5:f0:
7f:75:82:66:82:6b:f5:67:c5:71:d0:c1:79:30:19:
36:3e:0f:82:80:b8:92:31:7a:7b:3c:45:2b:39:70:
f5:94:4b:91:a8:6a:7a:b4:72:94:f0:51:23:40:a5:
e3:d4:3b:00:ca:14:29:e6:3c:c5:3f:ec:b6:8b:3f:
90:f3:bb:52:c1:c3:cc:b8:4f:bb:42:2d:e5:e5:9e:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:16:C8:53:2E:E6:BD:8F:78:61:30:56:90:DB:26:49:77:62:0D:EF
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/WRbIUy7mvY94YTBWkNsmSXdiDe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.9.0/24
93.190.11.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ca:cc:3b:a4:43:46:1d:44:be:27:08:ac:cd:a0:12:74:df:
e4:3b:17:34:25:9c:78:f9:55:2e:02:b5:96:ad:68:4e:fe:c4:
34:aa:0c:d0:c0:8c:90:53:38:5a:4e:4c:19:c7:49:e3:78:c9:
ab:2d:fb:a4:5b:72:20:5d:6c:27:7c:1b:c7:b6:e7:0b:ad:2a:
d0:36:24:e3:f0:6a:f3:61:cb:92:7d:6b:db:54:16:48:87:8d:
8a:08:f3:51:12:9d:b1:5b:f9:14:66:45:8b:7f:15:e4:56:9b:
a3:87:88:30:45:85:d9:f6:cb:04:db:58:97:e2:49:07:2d:e0:
16:3a:91:fd:dd:82:5f:a5:e9:b5:6a:17:4d:da:79:9d:56:03:
ea:96:47:fa:c3:b7:09:93:98:b5:f9:ad:f4:4f:c4:8a:26:f6:
a7:5d:73:68:78:9a:95:bf:d4:9a:1d:d2:f0:08:5c:3e:97:1e:
bf:13:5d:d5:d1:82:4a:7c:c6:7d:fd:54:02:9b:cd:d0:b7:e6:
d3:42:bf:c7:fa:1a:e7:18:6f:ef:55:ce:fb:83:ab:94:ac:4c:
35:cd:59:8b:01:36:3c:aa:e8:ee:2c:2d:75:be:8c:73:45:c8:
2b:47:21:9c:b1:63:dc:30:b6:98:a5:37:e7:74:13:7b:44:be:
3b:5d:d1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:45:22 2025 by rpki-client