Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/cS7rX3-8PapkI9DT9g3TvHYs0Hk.roa
File: cS7rX3-8PapkI9DT9g3TvHYs0Hk.roa (raw, json)
Hash identifier: 43RuxUiU0HH485JXiwD410QwI/i1F8dsZM6wnn4qkBs=
Subject key identifier: 71:2E:EB:5F:7F:BC:3D:AA:64:23:D0:D3:F6:0D:D3:BC:76:2C:D0:79
Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial: 0187600E639EC7367E3919B593E0B1B8E374
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/cS7rX3-8PapkI9DT9g3TvHYs0Hk.roa
Signing time: Sat 08 Apr 2023 08:49:28 +0000
ROA not before: Sat 08 Apr 2023 08:49:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11161
IP address blocks: 93.177.77.0/24 maxlen: 24
93.177.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:60:0e:63:9e:c7:36:7e:39:19:b5:93:e0:b1:b8:e3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
Validity
Not Before: Apr 8 08:49:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=712eeb5f7fbc3daa6423d0d3f60dd3bc762cd079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:a4:b2:b3:8b:42:13:f6:ac:da:0c:51:bb:
71:af:cc:6f:7a:49:a7:25:40:39:0c:fc:c7:e7:9e:
1f:ba:77:65:40:98:89:49:78:d4:37:02:5d:ed:1f:
e3:f2:a9:39:d2:02:7e:a8:18:8d:69:10:ff:68:aa:
77:6c:93:ee:21:6f:9e:d9:61:8f:fe:e2:a1:f4:b7:
ec:be:26:82:7d:4b:f5:ca:60:61:39:56:5b:08:68:
0c:d7:b2:8c:6d:65:1e:1f:ac:2d:86:52:be:cc:3a:
37:25:d4:93:10:94:26:cf:dd:ca:1e:c9:a4:83:ad:
13:9b:2e:8f:e5:a1:aa:2a:cd:01:3d:4b:69:6d:8d:
93:5c:1f:dd:c0:23:9c:27:3a:80:57:1d:a1:a0:74:
54:90:b3:c6:9e:5c:97:05:58:0b:53:90:35:42:9c:
13:ce:42:16:cb:92:57:f8:17:1b:77:8d:4b:d1:e4:
3f:7d:62:63:d0:6f:9d:46:d7:91:38:61:08:9a:c0:
59:eb:35:0c:52:99:6c:64:98:b3:bc:f2:73:e6:1b:
d2:58:18:04:33:89:31:67:0d:d1:6e:22:67:58:76:
22:81:3b:2f:f9:f9:5b:d2:5c:31:40:ac:ba:2c:73:
ba:cb:00:a7:99:6a:ac:62:28:b2:17:7e:82:6a:aa:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:EB:5F:7F:BC:3D:AA:64:23:D0:D3:F6:0D:D3:BC:76:2C:D0:79
X509v3 Authority Key Identifier:
keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/cS7rX3-8PapkI9DT9g3TvHYs0Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.76.0/23
Signature Algorithm: sha256WithRSAEncryption
36:f1:5d:f2:a5:13:33:f4:08:5a:f0:a7:76:9c:0d:28:c7:c9:
61:85:ab:8b:c7:2c:d8:26:eb:fd:eb:ee:f2:70:a7:ef:73:9a:
51:14:d5:a5:b1:57:59:7d:d2:4b:8a:5f:32:52:bc:b4:0d:6f:
8f:55:80:7b:c8:3a:3f:7e:14:7f:21:e5:ec:48:93:6f:80:ad:
fe:44:c2:c7:d4:12:b2:6f:b8:48:f5:00:cd:09:08:bd:b0:a0:
d1:53:7e:a7:69:ea:56:e0:d5:6d:c9:f7:fa:fe:be:c4:6d:62:
0e:98:79:36:f9:b8:46:b0:d8:18:26:89:a1:5d:0d:c1:e2:fc:
14:d8:cf:d1:f0:66:62:35:09:6b:95:e6:ed:86:79:92:51:1b:
40:1f:67:ad:95:b7:78:56:c5:9f:0c:77:19:2b:c7:a0:f3:65:
ee:c7:37:0d:80:dd:ef:6c:9d:bc:61:20:b8:fc:81:62:f9:b0:
c5:60:c5:e9:a4:67:57:c9:77:0d:11:90:88:4e:dd:62:d4:24:
29:ea:c6:e5:43:30:a6:fb:43:fc:cf:64:41:1a:57:25:c4:da:
71:0a:9a:b2:0c:3a:b2:2a:ed:5d:3f:dc:c0:02:ef:a2:d0:6c:
a0:cd:97:ef:9f:5e:bd:ee:e3:2d:6d:7f:1d:95:14:32:bb:b0:
da:fd:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:33 2025 by rpki-client