Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/onKNtOaNkub1YvUgqc4db-cDyG8.roa
File: onKNtOaNkub1YvUgqc4db-cDyG8.roa (raw, json)
Hash identifier: 8vyNYXMIKcOF8iuFg0A/SjJXHny/yX9HAK+g8Xky/uE=
Subject key identifier: A2:72:8D:B4:E6:8D:92:E6:F5:62:F5:20:A9:CE:1D:6F:E7:03:C8:6F
Certificate issuer: /CN=0a3e33cc6e43376ad6a110d851016ddcce783237
Certificate serial: 01856F824B2540426D4FBBE15E05A9BC09EF
Authority key identifier: 0A:3E:33:CC:6E:43:37:6A:D6:A1:10:D8:51:01:6D:DC:CE:78:32:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/onKNtOaNkub1YvUgqc4db-cDyG8.roa
Signing time: Sun 01 Jan 2023 22:44:47 +0000
ROA not before: Sun 01 Jan 2023 22:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 93.93.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:4b:25:40:42:6d:4f:bb:e1:5e:05:a9:bc:09:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e33cc6e43376ad6a110d851016ddcce783237
Validity
Not Before: Jan 1 22:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2728db4e68d92e6f562f520a9ce1d6fe703c86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:26:74:5d:33:5f:36:21:83:56:85:6a:00:99:
c1:2d:9f:31:df:d7:8d:74:4f:29:cf:9f:5c:f8:98:
c7:3b:04:f6:36:26:e8:f7:1a:d3:db:4a:50:f8:88:
62:f7:16:b7:cd:b0:77:5b:e8:b9:ac:63:ed:f6:70:
c8:3d:57:b4:6f:27:20:22:c0:8b:ad:dd:c1:ec:aa:
5b:18:4c:29:d0:ce:75:28:89:9d:c1:8e:d3:a4:7a:
8d:9b:9c:46:5c:64:2f:e6:25:c8:f6:3b:16:09:f0:
e0:88:7f:94:06:5d:42:74:c1:01:63:94:51:42:7e:
e4:1f:d2:f7:9e:1b:31:e8:36:1c:1e:32:f7:72:c4:
87:61:83:b1:2e:2c:34:3f:4a:03:78:d4:b0:a7:c1:
cc:e6:1c:f1:be:cf:57:ab:85:fe:67:34:f1:8d:41:
2c:20:fa:c4:0b:18:32:6a:b8:4d:f1:12:1c:c9:44:
50:f7:94:9d:e4:25:cd:ad:4b:ce:0a:d9:34:29:03:
6a:0e:10:93:84:cc:3e:bf:89:f6:43:69:86:41:cc:
48:6c:d8:41:ec:5f:31:34:c3:1a:36:cc:1c:85:01:
b5:37:49:a6:ff:01:a8:07:ac:1c:8c:fc:8c:08:b8:
f2:24:37:f1:af:72:c4:7c:a4:40:86:52:28:7f:98:
fa:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:8D:B4:E6:8D:92:E6:F5:62:F5:20:A9:CE:1D:6F:E7:03:C8:6F
X509v3 Authority Key Identifier:
keyid:0A:3E:33:CC:6E:43:37:6A:D6:A1:10:D8:51:01:6D:DC:CE:78:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/onKNtOaNkub1YvUgqc4db-cDyG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c40c2f-e148-43e7-a523-6aa3f141c6ee/1/Cj4zzG5DN2rWoRDYUQFt3M54Mjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.207.0/24
Signature Algorithm: sha256WithRSAEncryption
43:cd:8c:cc:1a:06:6f:b9:03:74:24:08:e4:52:6a:16:73:da:
59:af:33:7f:13:53:ce:46:00:c3:29:62:9e:7e:a6:d8:b4:99:
c1:44:83:1c:df:9b:55:97:b4:65:d7:ca:72:de:e4:90:0b:c8:
fb:a3:8a:2d:4a:8d:96:dd:b7:71:fd:ff:f5:e3:19:9a:5f:d7:
4e:76:a1:04:d7:1a:00:71:d2:77:47:dd:6b:39:f8:3a:7a:5c:
6c:a7:1a:d0:8e:8d:fc:5b:b1:4a:55:d7:00:f3:74:c0:d4:ef:
99:b8:0c:bf:8f:b6:16:7f:00:4c:96:cf:c8:a8:c8:bf:8c:94:
b6:18:05:52:46:8b:fe:09:e3:9a:18:8a:a3:f2:67:9b:5e:b0:
df:84:24:a3:a3:de:de:54:86:d1:d1:17:17:be:7b:8a:05:91:
c7:bf:c4:cf:19:1b:ba:24:a1:cf:66:18:e6:19:56:69:38:68:
a1:8f:ea:f7:da:0d:3c:83:bb:e0:e9:6b:a8:9e:d1:03:ea:06:
e5:df:ea:2d:46:e2:27:73:f0:c0:c2:9b:7b:04:31:9b:86:22:
61:69:13:38:53:51:f5:84:79:50:69:60:05:b3:bf:27:80:d8:
6b:a6:52:f5:51:2c:ef:87:cc:dc:90:77:83:f8:53:44:04:11:
c4:71:1b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:02:36 2025 by rpki-client