Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/pHrLP72axtMcDirAyoLsYQo7xD4.roa
File: pHrLP72axtMcDirAyoLsYQo7xD4.roa (raw, json)
Hash identifier: tv70i+rhPotsGc3/cdKPMwcsbs/FtawdDRkaToM5QuU=
Subject key identifier: A4:7A:CB:3F:BD:9A:C6:D3:1C:0E:2A:C0:CA:82:EC:61:0A:3B:C4:3E
Certificate issuer: /CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Certificate serial: 01942823F2EF788D8ADBC68CD5CE86FE40BD
Authority key identifier: 09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/pHrLP72axtMcDirAyoLsYQo7xD4.roa
Signing time: Thu 02 Jan 2025 17:50:32 +0000
ROA not before: Thu 02 Jan 2025 17:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205773
IP address blocks: 93.93.172.0/22 maxlen: 22
2a06:68c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:f2:ef:78:8d:8a:db:c6:8c:d5:ce:86:fe:40:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0962dc6940760b7fbc2ea4367cc53bc230a64f9b
Validity
Not Before: Jan 2 17:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a47acb3fbd9ac6d31c0e2ac0ca82ec610a3bc43e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:61:26:54:d2:21:2c:35:43:94:a3:ac:e1:
d0:4a:08:fc:bf:7e:7b:d8:b2:fb:ad:76:ad:47:1f:
21:76:db:a5:f0:bc:6c:b2:41:5c:72:50:88:e5:49:
fe:1a:ae:43:35:10:fb:10:72:24:1f:02:bf:19:de:
3a:51:3e:0c:b2:73:fb:f4:64:02:74:a0:9e:93:15:
1f:60:e6:9c:a2:57:d8:88:bc:10:f4:6c:1e:94:92:
ff:ca:e7:51:58:2e:8a:ef:00:64:fd:78:bc:68:d3:
a8:f2:01:41:69:eb:75:96:68:99:f3:8c:76:27:c6:
b7:c5:d2:1a:43:37:5f:23:d5:74:d5:fd:94:d4:0e:
3b:e0:60:89:32:46:fd:1f:f0:a5:8b:88:a4:88:a9:
cd:4c:09:96:64:7f:a6:91:d2:2b:5d:67:e7:b0:ef:
30:0b:12:6e:00:ca:12:91:bc:38:e4:23:61:5d:9e:
45:1b:6b:3a:35:9c:fb:92:cc:9d:4f:b1:0f:b7:f2:
4f:5d:84:f1:00:25:a1:1b:31:19:cc:64:56:3f:7a:
e2:a1:5c:37:08:df:00:12:50:35:93:fe:35:52:be:
f4:8f:c9:3f:2c:ca:fa:af:60:54:fa:f3:ca:9e:59:
54:24:8b:1c:74:6d:d4:f8:b0:2d:46:85:18:74:34:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7A:CB:3F:BD:9A:C6:D3:1C:0E:2A:C0:CA:82:EC:61:0A:3B:C4:3E
X509v3 Authority Key Identifier:
keyid:09:62:DC:69:40:76:0B:7F:BC:2E:A4:36:7C:C5:3B:C2:30:A6:4F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/pHrLP72axtMcDirAyoLsYQo7xD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/20ff0f-618f-4cb6-bc7f-6541977f65f9/1/CWLcaUB2C3-8LqQ2fMU7wjCmT5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.172.0/22
IPv6:
2a06:68c0::/29
Signature Algorithm: sha256WithRSAEncryption
d6:27:69:c7:67:d1:12:c7:68:c7:3f:3a:22:57:e2:34:0f:85:
da:07:ef:99:bc:7b:78:c1:2c:22:04:9b:a8:11:dc:48:db:6f:
18:e5:de:53:87:df:f3:7d:8c:6e:b2:90:60:e1:a3:b6:72:c1:
39:d8:4f:53:c5:7a:98:ca:c4:55:ff:e1:a1:06:39:96:31:97:
86:5e:39:15:d4:f2:e1:81:e7:ae:d3:d9:2c:c2:30:68:4d:86:
0d:07:70:1f:df:ae:a1:9b:13:86:3f:33:fb:63:1a:06:ee:6f:
93:4d:d3:0f:e3:15:ba:af:8b:ce:2c:7b:09:21:4b:08:1e:1b:
b2:10:79:b1:02:72:21:96:64:92:92:8c:72:33:13:00:53:ac:
e1:18:0c:e2:2e:96:45:d4:25:92:e2:c7:79:6c:db:1a:b7:de:
89:00:58:a4:26:81:39:19:f6:a4:42:98:b6:06:25:dc:1a:b0:
4c:c3:12:40:a1:90:b0:df:a9:87:5e:f1:44:42:f9:3a:a2:1e:
b7:97:54:94:a6:5b:69:23:9b:7d:d5:0b:20:79:df:72:3a:8d:
1a:00:05:42:18:0b:2d:cc:2a:ff:ef:0b:ee:cc:06:31:e3:0f:
3a:da:da:dc:d6:59:8b:12:70:65:0f:0d:ea:63:4e:47:84:dd:
18:69:62:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:32:14 2025 by rpki-client