Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/1-LKbnborYnqYt9bd8lQpFxY-QRU.roa
File: 1-LKbnborYnqYt9bd8lQpFxY-QRU.roa (raw, json)
Hash identifier: 9UFCdINGJFL1JPouwkYh44hHrKHhrLWF/3Sb6P4vG60=
Subject key identifier: F8:B2:9B:9D:BA:2B:62:7A:98:B7:D6:DD:F2:54:29:17:16:3E:41:15
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 018BB921BA46196F6D54F6D2D65E7E6EA63B
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/1-LKbnborYnqYt9bd8lQpFxY-QRU.roa
Signing time: Fri 10 Nov 2023 12:07:57 +0000
ROA not before: Fri 10 Nov 2023 12:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209193
IP address blocks: 93.191.114.0/24 maxlen: 24
93.191.113.0/24 maxlen: 24
2a06:a546::/31 maxlen: 31
2a06:a544::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:21:ba:46:19:6f:6d:54:f6:d2:d6:5e:7e:6e:a6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Nov 10 12:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8b29b9dba2b627a98b7d6ddf2542917163e4115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:08:47:71:fb:c3:88:d3:2f:ad:3e:71:9b:7f:
2b:1e:f9:73:52:f0:1b:92:45:7e:ea:d5:40:ca:9c:
68:48:af:b6:42:fd:e9:d4:f4:61:60:52:0b:32:be:
73:b2:f7:82:db:ab:38:79:0f:f8:92:c9:15:7f:bd:
72:93:96:e5:54:87:a7:70:77:dc:1c:aa:2d:51:dd:
2d:42:a8:e8:0a:9e:3e:46:87:b0:47:c8:f5:b3:8b:
c3:03:a4:85:69:0c:49:cb:94:29:1a:50:f9:2c:be:
c0:2d:61:6e:be:47:8a:36:80:c3:55:76:e8:5c:d7:
ea:da:16:6c:46:28:12:d2:78:ed:3b:83:05:0e:30:
9d:96:5d:4f:00:1f:78:ac:f3:51:9d:53:ec:96:17:
20:18:dd:ac:2d:b2:7c:07:1a:7e:e4:86:b2:96:56:
9c:ab:16:77:08:8c:48:f7:5a:c2:8f:4b:88:42:f7:
6d:7f:fa:67:07:16:01:77:de:84:7f:d4:54:17:36:
4c:92:d6:b3:1e:e8:42:2e:83:12:6c:33:97:68:64:
c4:c0:1b:74:db:c3:be:ff:61:7b:94:12:f2:91:3f:
53:7f:38:d1:9f:56:0d:cc:b3:97:98:72:e6:f2:da:
30:ea:54:29:9e:6f:90:53:66:ca:2f:9d:79:20:55:
5e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B2:9B:9D:BA:2B:62:7A:98:B7:D6:DD:F2:54:29:17:16:3E:41:15
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/1-LKbnborYnqYt9bd8lQpFxY-QRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.113.0-93.191.114.255
IPv6:
2a06:a544::/30
Signature Algorithm: sha256WithRSAEncryption
3e:39:be:0f:f0:e8:f2:98:1b:ee:74:6b:8c:a3:27:8c:1e:7e:
e1:ab:71:45:ca:5b:77:22:ec:e0:4a:99:e8:1d:03:d5:0b:44:
cd:aa:2d:b3:01:a7:9e:f1:6e:16:8c:bf:81:4a:11:bc:0f:7c:
77:19:cb:cb:29:38:79:b6:90:a8:0e:7f:fe:98:11:cd:e6:cb:
c6:67:ee:3b:b3:91:5a:f1:ef:c2:80:5c:09:6c:09:9e:9a:c7:
26:c1:4f:10:ad:57:37:f2:39:97:5c:7c:ed:8f:2b:2b:93:5e:
16:86:5e:35:ea:72:17:a8:c0:0d:ed:94:99:8f:3f:cc:39:e7:
48:31:12:01:db:33:90:c3:91:60:d2:51:75:e2:b0:41:fc:18:
5b:b7:f4:3d:cb:1b:56:2b:1d:e0:25:f4:d6:f6:d1:ff:7a:05:
77:79:ce:31:b2:9f:d7:f0:0f:64:93:37:d4:d1:9f:25:9a:6c:
50:2e:c8:d5:9b:ac:67:1f:e6:2e:e6:58:e4:33:8d:83:91:e3:
42:a8:fc:b3:a1:8e:be:d6:ec:65:48:22:aa:0a:2f:2d:ce:f0:
a0:26:98:5e:e8:6d:f8:60:5f:65:08:09:67:81:14:83:c4:4e:
c2:06:db:89:65:e3:2a:6e:7d:48:f1:ee:7d:20:fe:41:64:41:
d6:0a:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:37:30 2025 by rpki-client