Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/t987O0pDHzvcsP9c7cARqX9qeU4.roa
File: t987O0pDHzvcsP9c7cARqX9qeU4.roa (raw, json)
Hash identifier: hXKjhjrksvE7FwT6RC0bILWOybHNXPXiwbfxF18ramw=
Subject key identifier: B7:DF:3B:3B:4A:43:1F:3B:DC:B0:FF:5C:ED:C0:11:A9:7F:6A:79:4E
Certificate issuer: /CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Certificate serial: 019427B5C19B876FF81FCE610CA0245342D6
Authority key identifier: 60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/t987O0pDHzvcsP9c7cARqX9qeU4.roa
Signing time: Thu 02 Jan 2025 15:50:10 +0000
ROA not before: Thu 02 Jan 2025 15:50:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44973
IP address blocks: 93.88.224.0/22 maxlen: 22
185.130.8.0/22 maxlen: 22
2a02:218::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c1:9b:87:6f:f8:1f:ce:61:0c:a0:24:53:42:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a851d59356ca95d4ae78fa6936ba1b8a2b1c7a
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7df3b3b4a431f3bdcb0ff5cedc011a97f6a794e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:b4:6e:1d:51:2e:18:bb:43:6f:78:64:36:33:
3f:72:07:63:d9:b3:24:60:e8:29:f4:be:c6:35:fb:
25:42:69:c0:60:3a:9b:54:5a:8a:ab:01:7f:47:1c:
fc:87:4c:b0:ee:57:bb:86:62:1c:da:23:57:39:0c:
13:b3:6b:96:a8:5a:51:93:48:b3:8b:f4:4c:86:5a:
0f:7b:1b:07:d4:7e:96:08:b9:b6:bc:4f:9e:9d:30:
77:c1:2d:05:39:cf:76:70:79:61:e0:fb:38:a8:ca:
50:99:ea:d9:e5:4e:a8:db:26:21:ea:c8:86:54:9e:
67:2b:64:79:3a:40:eb:52:93:da:d7:9a:01:7f:40:
c6:fb:09:f1:c7:1f:a9:de:85:27:c6:50:08:ea:74:
59:08:69:7c:eb:bf:20:ff:be:ea:4d:fe:04:c2:2e:
8d:69:62:ce:61:18:9b:27:df:16:47:c5:87:26:81:
e0:40:ba:08:36:c5:4b:53:64:c3:60:33:7f:e6:25:
33:7d:59:f9:52:9b:b6:03:00:ad:bc:fa:fa:11:c2:
d0:53:87:93:b2:c0:e9:ac:a1:f3:1f:b8:80:24:96:
30:81:14:b2:1c:ae:01:59:fc:ac:50:6e:e1:9c:48:
8b:3b:0e:91:35:81:d5:34:4a:34:c0:af:90:67:d0:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DF:3B:3B:4A:43:1F:3B:DC:B0:FF:5C:ED:C0:11:A9:7F:6A:79:4E
X509v3 Authority Key Identifier:
keyid:60:A8:51:D5:93:56:CA:95:D4:AE:78:FA:69:36:BA:1B:8A:2B:1C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKhR1ZNWypXUrnj6aTa6G4orHHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/t987O0pDHzvcsP9c7cARqX9qeU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c97898-5e72-454a-be2f-548e7b7fa4e1/1/YKhR1ZNWypXUrnj6aTa6G4orHHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.224.0/22
185.130.8.0/22
IPv6:
2a02:218::/29
Signature Algorithm: sha256WithRSAEncryption
36:e3:4b:de:fe:0a:62:3d:42:89:97:70:5d:44:9a:32:2a:c8:
01:82:81:85:db:b7:2e:d0:08:9d:8c:73:e7:df:01:79:d9:9a:
52:a6:ac:8e:08:9b:e0:48:78:c1:21:12:b1:72:6e:05:df:23:
f7:a6:d4:de:27:7a:b4:9d:74:33:ba:5a:c3:d0:49:8a:a2:dd:
23:b7:ea:9d:ef:8c:fa:af:d0:dc:ca:4c:e1:61:3b:1c:05:7c:
a1:d8:44:35:27:a8:c8:20:a2:87:71:51:ee:18:80:2f:99:73:
5a:25:bb:4b:eb:be:07:59:98:70:ea:e6:7c:8f:23:c2:54:d0:
53:2b:ba:25:22:1e:03:cb:0f:1c:eb:00:25:f0:3b:cc:3f:c9:
65:5d:9e:61:ad:10:fc:23:cd:a7:ad:e1:42:4d:f5:87:f3:93:
51:40:f6:7e:db:9c:9d:73:a9:d3:dc:6e:4f:34:42:af:37:32:
26:6e:4e:9b:47:e2:cf:38:9e:1a:b9:58:3d:d4:af:d7:ee:d3:
2f:b5:ef:e2:8e:fb:bb:59:67:38:ed:cd:ed:ca:59:f4:34:d9:
ab:19:4c:1c:38:bd:14:ee:f5:94:0b:06:24:e9:48:f8:20:47:
66:e9:13:bd:01:69:94:87:c6:4c:7c:98:f8:44:81:02:51:6a:
92:29:46:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:40 2025 by rpki-client