Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/esnretuTd8A4K-i2D813eChQxWI.roa
File: esnretuTd8A4K-i2D813eChQxWI.roa (raw, json)
Hash identifier: ab/MvvbbYTM6P8JM7/ccZAofqrUDU9VxL0YVWUav0TU=
Subject key identifier: 7A:C9:EB:7A:DB:93:77:C0:38:2B:E8:B6:0F:CD:77:78:28:50:C5:62
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 018BB90BC19607C669DC9F3FC9C61525A2A4
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/esnretuTd8A4K-i2D813eChQxWI.roa
Signing time: Fri 10 Nov 2023 11:43:57 +0000
ROA not before: Fri 10 Nov 2023 11:43:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201749
IP address blocks: 93.191.112.0/24 maxlen: 24
93.191.115.0/24 maxlen: 24
2a06:a542::/31 maxlen: 31
2a06:a540::/31 maxlen: 31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:0b:c1:96:07:c6:69:dc:9f:3f:c9:c6:15:25:a2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Nov 10 11:43:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ac9eb7adb9377c0382be8b60fcd77782850c562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:ba:92:76:f6:f7:b5:3e:ab:ef:c3:a6:a1:
27:1d:91:ee:91:dc:36:f3:8d:4a:0d:c1:5f:1e:6c:
c9:d8:10:cb:db:57:6f:c4:c4:d7:c2:cb:0c:9c:c8:
fc:5c:f5:b4:a6:ce:93:40:c1:34:fc:df:d6:d8:d9:
19:df:0a:91:66:83:61:1a:22:07:ee:ec:ee:aa:cd:
91:1b:a7:d2:db:0d:ae:4f:d8:21:f2:6e:0d:98:fa:
af:6d:97:88:f8:2d:f3:c5:de:b8:a5:65:60:4f:4f:
63:42:8e:d9:8f:61:01:f9:a2:2a:d9:7c:f7:f7:61:
5e:51:8e:28:5e:a1:e7:ee:07:96:9c:c6:76:2a:90:
d5:c3:90:d2:71:98:28:21:db:f7:75:d8:43:fe:94:
2a:33:26:35:81:a5:64:c1:39:ca:76:6c:e5:84:70:
d1:9a:ae:a0:42:67:5f:0b:cf:0a:4f:5e:34:6d:74:
05:68:d1:b1:d5:83:ad:17:de:51:e8:23:5b:65:8e:
ed:66:d0:02:de:7b:75:c7:9b:63:8b:a7:e5:fa:b9:
87:da:a0:3a:34:d4:55:a8:a0:33:70:f5:b5:9b:cc:
d9:88:2b:1c:c2:5c:07:dd:7f:07:2b:da:89:6a:cf:
d9:e2:e5:d8:42:40:80:68:fa:44:c3:8b:1a:0f:ff:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C9:EB:7A:DB:93:77:C0:38:2B:E8:B6:0F:CD:77:78:28:50:C5:62
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/esnretuTd8A4K-i2D813eChQxWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.112.0/24
93.191.115.0/24
IPv6:
2a06:a540::/30
Signature Algorithm: sha256WithRSAEncryption
58:7e:6a:b1:5a:b4:cf:bc:4d:8b:a1:dd:24:54:03:51:0c:6f:
49:70:06:80:62:ad:71:df:c5:e4:0e:06:7e:1e:62:bd:f1:b2:
6b:a5:2e:42:2b:c5:08:85:21:41:b6:1c:1e:21:43:54:2f:58:
93:00:2c:08:56:f6:69:b1:e1:b1:01:34:02:f8:4e:6f:fc:b2:
31:d9:f2:db:f4:e4:ad:ae:6f:63:78:40:91:bf:06:52:3b:ac:
18:26:8f:e8:e9:be:8f:3d:be:af:5e:e1:a3:66:17:a0:ad:16:
cc:14:9a:0b:8c:c0:2c:da:c7:65:a6:38:71:d2:1c:2d:15:e5:
48:e5:81:3a:3b:67:8f:c2:c4:69:49:ad:8d:63:db:0e:ab:ef:
17:1a:ae:1f:18:e7:d4:32:30:9e:fc:f9:61:b9:f8:52:ec:63:
33:6f:a6:b3:0f:07:25:fd:4d:b0:bd:4c:d5:c6:bd:62:41:fd:
3f:81:db:43:a3:32:9c:73:a0:29:72:a6:1f:63:35:e1:a3:d3:
cb:47:3b:35:57:98:e6:5a:4d:22:a4:fb:86:40:78:bf:0b:d9:
ee:a9:db:f1:a5:6a:27:24:bd:a2:0b:8d:f3:e3:ba:d4:1d:e4:
94:86:d9:93:74:56:a4:b9:3c:f7:a1:df:1e:57:a7:9a:dd:72:
9d:e7:a4:f7
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYu5C8GWB8Zp3J8/ycYVJaKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTdjNDZlYWZhMTBlYzVkOTA3YmIwNWUzNzEyM2I2OTJh
YjQ5NGMwHhcNMjMxMTEwMTE0MzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWM5ZWI3YWRiOTM3N2MwMzgyYmU4YjYwZmNkNzc3ODI4NTBjNTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL26knb297U+q+/DpqEnHZHukdw2
841KDcFfHmzJ2BDL21dvxMTXwssMnMj8XPW0ps6TQME0/N/W2NkZ3wqRZoNhGiIH
7uzuqs2RG6fS2w2uT9gh8m4NmPqvbZeI+C3zxd64pWVgT09jQo7Zj2EB+aIq2Xz3
92FeUY4oXqHn7geWnMZ2KpDVw5DScZgoIdv3ddhD/pQqMyY1gaVkwTnKdmzlhHDR
mq6gQmdfC88KT140bXQFaNGx1YOtF95R6CNbZY7tZtAC3nt1x5tji6fl+rmH2qA6
NNRVqKAzcPW1m8zZiCscwlwH3X8HK9qJas/Z4uXYQkCAaPpEw4saD/+8NwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHrJ63rbk3fAOCvotg/Nd3goUMViMB8GA1UdIwQY
MBaAFBaXxG6voQ7F2Qe7BeNxI7aSq0lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUt
NzY1MjJjMjA3YzU1LzEvZXNucmV0dVRkOEE0Sy1pMkQ4MTNlQ2hReFdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUtNzY1MjJjMjA3YzU1
LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXb9wAwQA
Xb9zMA0EAgACMAcDBQIqBqVAMA0GCSqGSIb3DQEBCwUAA4IBAQBYfmqxWrTPvE2L
od0kVANRDG9JcAaAYq1x38XkDgZ+HmK98bJrpS5CK8UIhSFBthweIUNUL1iTACwI
VvZpseGxATQC+E5v/LIx2fLb9OStrm9jeECRvwZSO6wYJo/o6b6PPb6vXuGjZheg
rRbMFJoLjMAs2sdlpjhx0hwtFeVI5YE6O2ePwsRpSa2NY9sOq+8XGq4fGOfUMjCe
/PlhufhS7GMzb6azDwcl/U2wvUzVxr1iQf0/gdtDozKcc6ApcqYfYzXho9PLRzs1
V5jmWk0ipPuGQHi/C9nuqdvxpWonJL2iC43z47rUHeSUhtmTdFakuTz3od8eV6ea
3XKd56T3
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:16:13 2025 by rpki-client