Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u-sf3A4ggE8lUTuZ4LPudnYrtMk.roa
File: u-sf3A4ggE8lUTuZ4LPudnYrtMk.roa (raw, json)
Hash identifier: /GG1uzCQusidir1jIKys0P+KeRNEmoSrCPqwxmc/WgY=
Subject key identifier: BB:EB:1F:DC:0E:20:80:4F:25:51:3B:99:E0:B3:EE:76:76:2B:B4:C9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194F8E67FAD5BF2E5E9E3B6D01B76EAE115
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u-sf3A4ggE8lUTuZ4LPudnYrtMk.roa
Signing time: Wed 12 Feb 2025 06:44:03 +0000
ROA not before: Wed 12 Feb 2025 06:44:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214794
IP address blocks: 93.88.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f8:e6:7f:ad:5b:f2:e5:e9:e3:b6:d0:1b:76:ea:e1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 12 06:44:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbeb1fdc0e20804f25513b99e0b3ee76762bb4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:51:d9:cf:13:27:20:2c:b5:8f:6d:e8:47:
1b:ea:36:b9:ff:66:1c:22:2d:72:c8:de:c7:3e:b4:
f7:3b:b2:85:33:c6:b0:f6:0d:94:0d:fa:26:20:1e:
61:d1:af:06:d2:c4:27:d6:65:34:e3:12:1f:19:8a:
16:00:0a:ae:8c:6a:14:11:65:d0:c8:d8:83:f8:60:
d5:bc:3a:2e:2e:d9:af:35:35:f6:1a:ee:e5:52:b6:
3f:d0:66:6e:04:91:2f:62:37:2c:7b:90:58:e6:a4:
26:32:e2:d4:c5:38:b2:9c:b3:e8:0c:36:e3:5c:2f:
1b:d2:5e:d5:88:16:eb:6d:27:b0:43:4a:c5:13:ba:
bb:90:b6:35:26:2c:94:b3:b6:d2:fb:ad:10:91:1d:
fd:03:be:59:68:87:c9:c1:b3:16:3f:f1:b6:92:49:
50:f5:20:3f:ff:f4:f4:e0:51:92:fa:50:47:b3:80:
65:fd:d7:cb:d2:f0:4d:2e:df:d5:eb:83:fa:c3:de:
7b:ce:d2:73:a4:2b:7f:b8:2e:4a:5a:3f:34:1c:97:
32:92:88:d6:f8:43:90:4e:91:cb:ea:dd:52:88:7c:
48:2f:06:e6:be:a0:bc:cf:04:81:e7:7c:be:df:8a:
f3:02:fe:1c:ba:e8:5d:37:d3:76:a7:1c:6e:40:da:
1f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EB:1F:DC:0E:20:80:4F:25:51:3B:99:E0:B3:EE:76:76:2B:B4:C9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/u-sf3A4ggE8lUTuZ4LPudnYrtMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ff:3c:ae:0f:28:b5:ec:6c:13:b4:0a:b7:4b:80:da:89:bc:
54:02:d1:cc:20:09:29:84:ef:ae:0b:77:e9:e3:bb:1e:de:0a:
66:1b:5a:2a:0a:c6:ef:10:c6:e3:f0:fd:92:e1:4d:a7:fe:48:
df:3c:9d:b4:1c:05:77:c5:d6:64:15:9b:7a:0c:4c:0d:27:da:
73:e2:ee:2b:05:ee:bc:e8:08:35:d4:a0:9c:79:6a:62:2a:ae:
69:af:53:ea:00:f4:5d:53:e9:b8:85:9a:d2:95:92:83:4a:66:
46:8f:9b:ef:d0:14:65:6e:7c:a0:99:3d:d7:2f:80:50:5a:92:
5d:0c:79:fe:4e:f2:27:d8:70:7a:37:7b:f6:97:e5:fa:ca:83:
bf:b7:94:fa:a4:24:7d:72:b2:86:3a:96:1e:cc:a4:7e:61:31:
6a:fe:6a:50:54:d0:1a:ee:dc:81:43:25:ba:d8:33:2b:65:e0:
b3:5c:6b:4f:5e:12:e5:11:97:de:e2:0f:e4:55:00:c6:f8:6c:
3f:a6:d4:70:d1:17:db:2c:42:4a:8d:b8:ed:de:89:2e:b1:8f:
48:ad:e7:ea:06:94:cf:c3:47:18:87:17:38:66:be:b3:9a:1b:
9a:d0:3f:bd:8c:fd:fc:aa:f1:87:08:2f:f7:63:71:b1:3e:cb:
a9:48:60:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:48:22 2025 by rpki-client