Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/k-lw29SWe8nnJweO2PFJyxCzbiA.roa
File: k-lw29SWe8nnJweO2PFJyxCzbiA.roa (raw, json)
Hash identifier: GY1efGTjxbn9/JJyWgve9NwO8JS6WaXp9FSTnk3q9LQ=
Subject key identifier: 93:E9:70:DB:D4:96:7B:C9:E7:27:07:8E:D8:F1:49:CB:10:B3:6E:20
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 019427472C7B40E3A548477555D8FC8212D6
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/k-lw29SWe8nnJweO2PFJyxCzbiA.roa
Signing time: Thu 02 Jan 2025 13:49:23 +0000
ROA not before: Thu 02 Jan 2025 13:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61084
IP address blocks: 93.190.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:2c:7b:40:e3:a5:48:47:75:55:d8:fc:82:12:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93e970dbd4967bc9e727078ed8f149cb10b36e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:a6:65:e1:dc:88:95:86:6f:44:c6:6e:e9:
2b:aa:0a:0d:be:ef:1d:b3:de:48:94:14:5d:d3:3d:
05:ad:89:f1:a0:28:da:79:11:99:e0:e4:c9:e0:b6:
7b:9b:25:56:c7:a9:ce:e4:50:da:b7:28:22:85:6e:
23:58:dd:65:85:ca:9a:78:7a:f0:82:2a:c7:cb:d2:
09:c5:24:32:a6:2f:26:97:65:4c:c8:59:17:88:8b:
ce:8a:62:5e:2d:b7:2f:08:64:6f:e9:78:ee:e3:e6:
d5:fc:41:28:c0:d7:e8:a7:d5:7d:d2:d5:ea:5e:68:
e5:56:00:43:2b:65:26:14:70:63:c5:ce:eb:26:9d:
8c:d6:b2:78:53:33:f9:74:54:91:97:89:38:17:81:
ac:ad:d3:9e:e1:ff:d4:f1:0a:4a:80:99:f2:67:6e:
42:02:e1:de:24:0b:2a:01:a1:fa:ce:72:07:34:03:
2e:57:96:e0:20:53:c9:41:ec:c6:9c:57:86:e5:95:
a0:b9:34:75:d3:41:6a:1d:b1:79:5b:e0:8d:b3:29:
96:c9:b4:dd:70:0a:47:75:b6:48:a6:12:3d:3c:38:
a0:c4:ea:55:34:85:45:67:09:f7:b5:77:0f:39:4d:
92:d7:b3:95:a6:b7:46:c9:99:da:ce:62:82:86:62:
e9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E9:70:DB:D4:96:7B:C9:E7:27:07:8E:D8:F1:49:CB:10:B3:6E:20
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/k-lw29SWe8nnJweO2PFJyxCzbiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:32:1e:62:4f:30:3f:5f:64:77:ef:32:8e:63:ad:08:bb:99:
13:4e:18:50:34:01:b2:c5:c8:c2:00:4f:0f:53:87:d2:e7:cd:
3d:dc:a7:2e:9a:87:2a:69:04:bf:96:1f:c3:65:61:6a:b1:1d:
db:43:51:28:fe:7f:d0:f7:b0:9d:56:40:d3:7e:a7:3e:65:99:
9b:31:03:8a:ae:6b:44:68:c5:e4:0c:ac:bd:b8:06:86:bf:1a:
f2:de:c1:0c:e5:82:63:92:e0:9f:d3:a9:a6:9c:80:da:3a:96:
5a:e9:8f:50:f2:61:d2:e6:40:7b:a2:80:53:72:bc:fb:a3:19:
95:c5:9b:8f:9f:2a:22:ff:35:fb:be:1d:59:c8:de:7f:f3:f9:
8f:c5:a6:00:d2:fa:61:ec:70:30:46:d2:e0:2b:5d:c6:8c:1c:
2a:5e:a9:bd:ef:d4:05:81:b1:1d:ba:39:e2:21:68:46:1b:fa:
e5:b6:dc:2c:b5:0a:a9:3e:ed:9a:80:61:6b:08:0a:ce:9f:f2:
3b:9b:18:c4:69:26:2c:47:6a:b6:f1:30:c9:23:a4:6a:39:02:
fa:f4:10:87:87:de:3e:e7:c9:8b:a9:c9:a2:63:0b:b0:ee:76:
8e:bd:d4:68:79:a1:34:d7:e3:93:d1:97:01:8b:bf:10:67:50:
16:c1:f0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:42 2025 by rpki-client