Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/lJr6G62hzSXy6tlHLI7JCY8QvKg.roa
File: lJr6G62hzSXy6tlHLI7JCY8QvKg.roa (raw, json)
Hash identifier: uLVWXgFiv4gaBe5aNBaShwFBlHmy+sveNuh6Nq4Dsac=
Subject key identifier: 94:9A:FA:1B:AD:A1:CD:25:F2:EA:D9:47:2C:8E:C9:09:8F:10:BC:A8
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 0438FA8F
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/lJr6G62hzSXy6tlHLI7JCY8QvKg.roa
Signing time: Sat 01 Jan 2022 00:50:45 +0000
ROA not before: Sat 01 Jan 2022 00:50:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 185.93.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70843023 (0x438fa8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 1 00:50:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=949afa1bada1cd25f2ead9472c8ec9098f10bca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:04:a1:5b:8a:98:24:06:c3:00:6e:59:17:77:
df:58:a5:d1:56:e1:ca:99:a1:bf:c1:75:04:f6:3e:
5f:2b:68:17:da:0d:a8:d1:17:f9:d8:83:6d:48:54:
2b:1f:67:48:cd:dd:e4:ab:13:54:05:2e:8d:58:03:
48:35:83:55:45:9f:c8:2a:72:d2:ed:7a:f4:65:51:
38:ef:1e:18:00:d0:9a:90:48:60:3d:5c:68:8e:26:
fc:3d:33:e2:d4:a8:0d:d0:6f:bb:de:97:f7:7f:76:
26:88:8c:87:17:14:d2:58:e8:81:60:db:43:76:55:
b5:ef:05:14:56:68:79:b2:d8:07:f2:b5:39:f1:da:
d5:95:e7:ba:d7:92:07:5d:85:98:14:db:b2:a2:82:
11:23:a0:3f:35:80:2f:0c:b1:7e:11:57:bc:31:6e:
cc:57:eb:e8:bc:dc:4b:f9:cf:54:1d:91:97:7d:74:
93:d8:32:96:a7:b1:78:9a:59:a3:3f:ef:f1:83:df:
05:64:12:85:ac:b7:2f:21:9e:ab:7f:83:4f:49:9c:
2b:26:95:62:79:48:bb:5b:bf:dc:70:5c:6f:1d:6a:
f3:4b:0d:db:31:13:ef:98:27:48:d1:57:e8:a6:ec:
2e:e9:98:92:04:51:5c:8d:e7:87:2c:cb:d8:d4:4a:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9A:FA:1B:AD:A1:CD:25:F2:EA:D9:47:2C:8E:C9:09:8F:10:BC:A8
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/lJr6G62hzSXy6tlHLI7JCY8QvKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.33.0/24
Signature Algorithm: sha256WithRSAEncryption
74:af:70:3a:65:97:95:db:b1:de:c8:bd:c0:b2:e4:01:d9:8d:
16:76:1c:df:a1:f8:c1:0f:0a:89:96:d8:46:0e:cc:8e:75:f4:
bf:8b:93:e8:da:12:2b:8b:cd:10:b2:29:be:4a:de:68:99:bb:
a9:8e:fc:88:c1:a3:a8:a9:cd:02:c3:80:2c:b1:cf:b4:10:5d:
7b:e1:80:52:0a:76:99:38:17:8f:52:b3:da:66:29:1e:88:35:
b8:10:1b:69:9d:4a:f6:11:d2:c7:88:38:b2:3b:6a:7e:63:0b:
f1:4d:5b:9a:7c:8e:5c:be:d3:88:94:c6:d3:e8:ed:df:a8:c3:
18:82:86:25:08:74:e3:48:33:1c:fa:39:7d:76:97:f7:a3:e6:
32:9b:bb:e9:06:30:d2:20:2c:46:2e:f9:c5:05:54:97:c8:8d:
9b:19:68:cf:38:51:ff:c4:76:c3:5c:a3:6d:39:77:04:45:ea:
3b:80:cf:94:91:29:44:35:4e:2e:d9:f5:40:03:f6:30:a8:af:
08:a1:ef:26:84:e7:89:5f:e9:ea:ba:f3:45:fd:f9:18:9f:aa:
71:55:6c:87:ba:58:3f:ba:08:3d:7e:8c:af:f1:2b:9d:26:d7:
5d:a6:be:32:00:39:a0:60:f8:a8:a7:9a:d7:d6:7a:c2:0f:6f:
d2:c0:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:40 2025 by rpki-client