Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/1fa9af-cc8c-402f-a1f6-4262f66adda8/1/9DxvpUY_AoJakXe3eZLUXfhfI9M.roa
File: 9DxvpUY_AoJakXe3eZLUXfhfI9M.roa (raw, json)
Hash identifier: OAYl7svKLGtJLWG1f4xif4DpH6o55oMRi1kMSL9iKjI=
Subject key identifier: F4:3C:6F:A5:46:3F:02:82:5A:91:77:B7:79:92:D4:5D:F8:5F:23:D3
Certificate issuer: /CN=6ba0638586f64cc0054e4e4e12021099c768ef80
Certificate serial: 33D0F263
Authority key identifier: 6B:A0:63:85:86:F6:4C:C0:05:4E:4E:4E:12:02:10:99:C7:68:EF:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6BjhYb2TMAFTk5OEgIQmcdo74A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/1fa9af-cc8c-402f-a1f6-4262f66adda8/1/9DxvpUY_AoJakXe3eZLUXfhfI9M.roa
Signing time: Sat 01 Jan 2022 15:56:23 +0000
ROA not before: Sat 01 Jan 2022 15:56:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44876
IP address blocks: 93.95.24.0/24 maxlen: 24
93.95.24.0/21 maxlen: 21
93.95.26.0/24 maxlen: 24
93.95.27.0/24 maxlen: 24
93.95.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 869331555 (0x33d0f263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba0638586f64cc0054e4e4e12021099c768ef80
Validity
Not Before: Jan 1 15:56:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f43c6fa5463f02825a9177b77992d45df85f23d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:4d:72:9e:4d:19:80:00:69:89:fc:2c:36:
f0:2b:ff:d3:ba:75:d8:32:c1:00:94:03:a3:4d:99:
9b:09:9a:5d:8f:58:28:b2:d4:a2:5f:be:19:fb:09:
90:ce:3e:e4:2a:fb:49:3b:36:78:ba:a8:00:8c:37:
73:b7:da:4a:5e:23:96:8c:56:51:e2:54:5c:7e:a1:
99:ee:35:31:05:d0:85:d2:bb:5b:4c:42:ca:c2:d7:
80:08:f5:8e:ac:19:5f:1a:3e:76:4c:fc:b5:a3:67:
4d:9d:f3:04:a8:df:fa:34:1f:29:c8:53:b4:14:24:
eb:de:f8:d0:7d:f1:31:1b:29:cb:f3:d4:a3:e2:5e:
b8:9c:f4:48:c1:1b:7e:c2:d8:9d:b6:39:23:df:9b:
3f:11:65:c5:57:a1:17:b0:5a:26:77:7b:74:b5:f3:
c0:5f:c4:e6:0d:a2:f7:8e:dc:8e:9c:25:07:cc:87:
60:52:42:54:27:3a:a7:b0:bd:64:cd:3b:40:34:bf:
97:0e:e5:63:ae:48:37:6f:db:d5:db:37:e9:81:68:
b5:06:62:31:91:1a:2a:d2:ad:02:6c:ff:77:a4:41:
b4:fa:e0:c3:1e:03:19:09:66:36:59:0e:3f:2c:1e:
9b:03:97:8f:3c:cb:fe:7a:56:30:04:e1:e8:4e:aa:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3C:6F:A5:46:3F:02:82:5A:91:77:B7:79:92:D4:5D:F8:5F:23:D3
X509v3 Authority Key Identifier:
keyid:6B:A0:63:85:86:F6:4C:C0:05:4E:4E:4E:12:02:10:99:C7:68:EF:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6BjhYb2TMAFTk5OEgIQmcdo74A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fa9af-cc8c-402f-a1f6-4262f66adda8/1/9DxvpUY_AoJakXe3eZLUXfhfI9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/1fa9af-cc8c-402f-a1f6-4262f66adda8/1/a6BjhYb2TMAFTk5OEgIQmcdo74A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.24.0/21
Signature Algorithm: sha256WithRSAEncryption
71:04:eb:1e:cb:32:84:bf:4c:5a:88:34:7b:46:e0:04:d5:98:
4a:c1:43:26:22:0a:81:39:c2:cc:62:e5:60:1d:a7:63:b4:9d:
39:f1:92:09:79:13:c1:c2:49:5b:2f:ff:da:70:b8:ff:e2:72:
f8:8a:05:c3:8c:d4:c0:3b:28:91:fc:a5:c9:13:25:27:3c:79:
5f:20:c7:84:c8:54:1a:5a:ac:6d:02:0f:9f:b7:fe:aa:df:d8:
c7:28:2b:0c:ae:d7:df:91:58:4f:a0:06:e7:09:56:df:ec:ed:
8d:53:9e:61:79:7b:2d:28:e2:63:77:5b:5a:5d:65:28:91:98:
dd:88:2f:a6:89:f4:eb:65:82:95:1f:c6:31:c7:18:c6:fc:c6:
b5:31:de:b7:11:e9:5e:0a:28:85:ed:4b:45:96:c5:42:ad:1f:
db:f5:1d:b9:18:2d:ac:f2:8c:08:ef:1e:07:fb:3c:35:af:dc:
ea:00:62:4b:87:66:ed:17:6e:3d:fa:3f:06:f3:1e:3e:45:a3:
c1:85:bd:4c:10:77:ef:73:f4:0b:c8:ac:e2:93:a3:93:be:17:
85:b6:5d:56:20:17:20:d9:66:a6:ae:9b:20:4d:98:92:c2:32:
84:9f:97:b1:5f:7b:d0:06:9c:f9:e6:25:f1:43:d0:a1:d6:99:
bb:da:5d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:12 2025 by rpki-client