Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d3e6d2-adaa-4306-ad2a-9feb36cc2fcd/1/eHgZu2QkEY-F_4V0aI89eTWvtYQ.roa
File: eHgZu2QkEY-F_4V0aI89eTWvtYQ.roa (raw, json)
Hash identifier: eDddoWisLOBhT6ag3jesPkkXNvb08MBJdWxvGpG1L+Q=
Subject key identifier: 78:78:19:BB:64:24:11:8F:85:FF:85:74:68:8F:3D:79:35:AF:B5:84
Certificate issuer: /CN=afed142a9cd2b3d14f497b13ecc2126ba20015d8
Certificate serial: 018B749E57D4181114A7B4B3CAEF5B676321
Authority key identifier: AF:ED:14:2A:9C:D2:B3:D1:4F:49:7B:13:EC:C2:12:6B:A2:00:15:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-0UKpzSs9FPSXsT7MISa6IAFdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d3e6d2-adaa-4306-ad2a-9feb36cc2fcd/1/eHgZu2QkEY-F_4V0aI89eTWvtYQ.roa
Signing time: Sat 28 Oct 2023 04:50:15 +0000
ROA not before: Sat 28 Oct 2023 04:50:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47539
IP address blocks: 93.95.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:74:9e:57:d4:18:11:14:a7:b4:b3:ca:ef:5b:67:63:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afed142a9cd2b3d14f497b13ecc2126ba20015d8
Validity
Not Before: Oct 28 04:50:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=787819bb6424118f85ff8574688f3d7935afb584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:47:1e:13:8d:5f:7e:58:71:1c:d2:f5:58:8a:
d3:a9:3b:0f:2a:72:75:1f:32:62:53:db:dd:94:22:
fe:3b:6b:df:b4:d7:f8:ee:05:91:7f:99:b5:63:f7:
b2:61:16:df:9f:94:b6:7e:16:40:e3:c9:d1:c9:9e:
4c:38:aa:3b:9d:85:f6:d7:e7:8f:d3:5b:24:ba:03:
23:9d:3e:08:af:2e:66:8e:78:0b:b8:e5:91:8d:b1:
a3:9a:ae:bd:fd:77:d3:08:d3:b3:18:f7:7d:5b:3b:
eb:3a:c0:23:e4:dc:e3:8d:22:64:70:58:f8:21:53:
70:25:36:63:bb:d3:9a:71:ca:96:ab:cf:95:ee:38:
b1:c2:f4:cf:32:bd:d0:06:1d:b1:28:79:3d:36:6b:
70:f6:ca:57:23:b7:58:71:8f:3f:cf:f2:4b:81:45:
48:dc:cf:3d:a6:8c:24:99:ab:f2:d3:01:dc:53:3f:
da:e3:c2:58:49:c4:2a:2b:11:e9:11:18:1d:1b:87:
97:4c:50:11:21:8b:11:95:1c:5a:7c:26:43:d3:95:
b6:99:f0:9e:b0:f2:10:ac:9e:35:1b:19:c0:25:32:
e0:36:1f:65:ed:59:40:be:0e:31:76:9a:c2:d0:1d:
1a:98:0e:0c:e8:0d:97:1b:dc:1b:2e:bf:69:8b:75:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:78:19:BB:64:24:11:8F:85:FF:85:74:68:8F:3D:79:35:AF:B5:84
X509v3 Authority Key Identifier:
keyid:AF:ED:14:2A:9C:D2:B3:D1:4F:49:7B:13:EC:C2:12:6B:A2:00:15:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-0UKpzSs9FPSXsT7MISa6IAFdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d3e6d2-adaa-4306-ad2a-9feb36cc2fcd/1/eHgZu2QkEY-F_4V0aI89eTWvtYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d3e6d2-adaa-4306-ad2a-9feb36cc2fcd/1/r-0UKpzSs9FPSXsT7MISa6IAFdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.27.0/24
Signature Algorithm: sha256WithRSAEncryption
82:30:f6:a4:58:a6:08:ac:bc:09:d4:08:2c:fa:d6:65:d1:fb:
bc:27:d7:be:0b:d2:a3:32:4d:f9:ef:b2:45:e4:90:3f:69:72:
30:2e:0f:cb:f5:21:a7:01:98:fa:1d:d1:86:4d:b6:c9:5e:4a:
7a:b0:ed:00:06:2e:fc:dd:65:1e:05:c0:45:fc:0d:0b:64:0d:
ff:fa:fe:af:b9:44:a5:9e:8b:f9:ca:9d:20:c9:45:ae:b9:41:
32:e4:a8:b8:13:b6:eb:30:21:19:1c:af:ad:9a:0a:27:03:19:
62:c8:db:e3:13:88:e8:d9:4a:85:cb:e0:35:5d:28:e1:b1:38:
9a:61:95:19:9e:61:6d:78:88:a5:7f:1e:b5:40:e2:ed:4c:a8:
45:a7:37:fd:84:2f:86:2c:e9:75:84:3a:be:db:d9:eb:e4:8c:
eb:b2:04:48:b6:b7:3f:90:59:6d:81:8c:b4:4b:f5:ee:19:4c:
7a:20:49:78:88:6b:24:80:b3:09:a2:8f:f2:50:c3:5e:44:30:
8a:a4:60:85:9b:6e:51:d7:b8:df:8f:41:01:d1:76:c0:32:95:
ca:4d:d8:0c:ea:97:0f:4c:1c:30:db:d9:b5:27:8b:29:52:8d:
4d:23:c8:dc:e6:20:52:93:37:33:d6:df:c5:59:bc:ab:84:ec:
f0:0e:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:13:16 2025 by rpki-client