Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa
File: 1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa (raw, json)
Hash identifier: HQEuN4LJBWfFoJpf0y8Vk5Lylzar8iK+h1oOEL9VILY=
Subject key identifier: FB:6F:8C:54:FE:A5:CF:74:13:41:4B:10:42:35:93:0B:72:0E:34:72
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0194266BA6003E3480B5937FCD192EE1EF95
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa
Signing time: Thu 02 Jan 2025 09:49:36 +0000
ROA not before: Thu 02 Jan 2025 09:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 93.177.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a6:00:3e:34:80:b5:93:7f:cd:19:2e:e1:ef:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb6f8c54fea5cf7413414b104235930b720e3472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:59:b0:93:7e:b4:1a:21:0f:c9:3d:52:06:
15:35:d4:cb:cc:e4:f2:f1:d5:a6:ac:eb:4d:ef:6d:
a1:e8:60:89:3b:f9:c2:44:39:2d:a1:78:86:82:e7:
2b:a7:ca:a4:23:22:53:9c:2f:0c:c2:d1:a6:54:56:
f3:de:91:3c:ad:a9:9e:d0:e5:90:f7:61:6a:ea:25:
e6:e4:3e:f7:18:94:db:65:43:6b:53:79:6a:5d:06:
d5:b8:e0:af:d2:17:0a:6a:8c:19:df:45:80:4e:6a:
e3:ef:cc:43:f1:52:f8:53:95:ac:3b:c9:4f:81:8a:
b7:eb:ea:02:69:c8:cd:de:ee:4e:c2:bc:e1:36:e4:
23:50:7b:5d:40:df:89:55:d1:d7:de:14:01:41:bc:
29:33:bb:c6:6b:7a:24:64:ed:83:2b:6d:85:77:c5:
4a:51:f5:d7:01:b3:bd:a8:25:42:83:74:e9:49:ab:
6b:e6:87:18:fc:42:57:e6:de:73:86:26:c1:23:a3:
ba:70:d0:aa:86:b3:c6:34:b8:74:42:43:dd:6f:f1:
83:88:38:ef:48:39:e7:60:ec:4b:ba:08:0d:5c:86:
b2:ca:a2:37:44:46:37:c8:a7:53:8e:ad:1d:92:14:
5f:90:96:08:84:1d:8c:fc:b5:8d:5a:0c:65:bf:fe:
6d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6F:8C:54:FE:A5:CF:74:13:41:4B:10:42:35:93:0B:72:0E:34:72
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/1-2-MVP6lz3QTQUsQQjWTC3IONHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.111.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:71:a2:3f:ab:f1:b8:f5:91:b6:51:30:a9:75:47:a2:9d:4a:
a9:75:98:7d:d5:d1:0f:16:11:4f:33:71:12:bd:5f:e0:ea:3e:
9c:99:09:a4:c3:f3:75:12:a3:8f:42:89:aa:85:d1:ac:ac:db:
45:81:c6:3a:aa:f2:2b:60:05:e3:05:0c:b8:57:ef:41:af:84:
0e:a7:a3:c4:72:44:02:f3:1c:d5:ee:92:63:f8:9a:f5:37:ad:
7a:3c:06:00:b9:db:2d:13:14:bf:f0:d6:c9:3a:d8:47:9a:ae:
af:b3:78:cc:3d:cf:db:8f:6a:41:76:b3:66:af:2c:e6:c1:ce:
6d:29:d4:d9:18:96:f4:27:a4:23:0a:b4:4a:6b:82:a6:42:7a:
e1:88:25:33:d6:99:64:d2:f1:f0:66:ff:2a:29:f6:7c:55:00:
a9:0a:fd:39:03:24:2f:65:f2:8d:43:d8:f7:5d:8a:ac:70:30:
21:d9:e7:b5:d9:39:cf:d0:c6:a9:de:a4:9e:4f:9f:00:cb:c2:
c9:20:8d:7e:ba:8c:5a:a3:7c:50:b0:37:6f:04:53:26:7f:f6:
64:1a:7c:fa:80:fc:2a:b0:1c:e8:83:2f:a6:42:09:19:1e:46:
ce:1b:b6:6b:21:23:a2:17:3c:a1:ab:bd:a0:8a:05:03:d6:52:
ff:a8:6f:4b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQma6YAPjSAtZN/zRku4e+VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjUwMTAyMDk0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjZmOGM1NGZlYTVjZjc0MTM0MTRiMTA0MjM1OTMwYjcyMGUzNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmlZsJN+tBohD8k9UgYVNdTLzOTy
8dWmrOtN722h6GCJO/nCRDktoXiGgucrp8qkIyJTnC8MwtGmVFbz3pE8rame0OWQ
92Fq6iXm5D73GJTbZUNrU3lqXQbVuOCv0hcKaowZ30WATmrj78xD8VL4U5WsO8lP
gYq36+oCacjN3u5OwrzhNuQjUHtdQN+JVdHX3hQBQbwpM7vGa3okZO2DK22Fd8VK
UfXXAbO9qCVCg3TpSatr5ocY/EJX5t5zhibBI6O6cNCqhrPGNLh0QkPdb/GDiDjv
SDnnYOxLuggNXIayyqI3REY3yKdTjq0dkhRfkJYIhB2M/LWNWgxlv/5thQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPtvjFT+pc90E0FLEEI1kwtyDjRyMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvMS0yLU1WUDZsejNRVFFVc1FRaldUQzNJT05ISS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMzgvM2YyNDliLWU4MzYtNDFiNC05YTNhLTk5NDgwNmYwODFm
MC8xLzRzSzROUHZKR3ZEc2F4MDBfV1FGVFNKcG9mMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2xbzAN
BgkqhkiG9w0BAQsFAAOCAQEArHGiP6vxuPWRtlEwqXVHop1KqXWYfdXRDxYRTzNx
Er1f4Oo+nJkJpMPzdRKjj0KJqoXRrKzbRYHGOqryK2AF4wUMuFfvQa+EDqejxHJE
AvMc1e6SY/ia9TetejwGALnbLRMUv/DWyTrYR5qur7N4zD3P249qQXazZq8s5sHO
bSnU2RiW9CekIwq0SmuCpkJ64YglM9aZZNLx8Gb/Kin2fFUAqQr9OQMkL2XyjUPY
912KrHAwIdnntdk5z9DGqd6knk+fAMvCySCNfrqMWqN8ULA3bwRTJn/2ZBp8+oD8
KrAc6IMvpkIJGR5Gzhu2ayEjohc8oau9oIoFA9ZS/6hvSw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:30 2025 by rpki-client