Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/DHimsh5cf4B1cEow5B0sOoa89ZU.roa
File: DHimsh5cf4B1cEow5B0sOoa89ZU.roa (raw, json)
Hash identifier: 4QGyiwHML4yioXbByOLrPfTNUUAH8+dM2e00mLX0LYc=
Subject key identifier: 0C:78:A6:B2:1E:5C:7F:80:75:70:4A:30:E4:1D:2C:3A:86:BC:F5:95
Certificate issuer: /CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Certificate serial: 019427488C1241BDC6F00AF4644F86DAA750
Authority key identifier: 52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/DHimsh5cf4B1cEow5B0sOoa89ZU.roa
Signing time: Thu 02 Jan 2025 13:50:53 +0000
ROA not before: Thu 02 Jan 2025 13:50:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213002
IP address blocks: 93.95.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8c:12:41:bd:c6:f0:0a:f4:64:4f:86:da:a7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b12ccc7ea1068c30d78c955c56b9763bcf3b4d
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c78a6b21e5c7f8075704a30e41d2c3a86bcf595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3c:fd:48:0c:f6:c8:b5:4b:82:4a:95:cd:01:
65:93:50:f6:e0:ac:14:19:cd:50:ed:3d:43:94:5f:
d2:f6:05:68:5f:4a:e8:7a:57:99:d8:25:84:bb:40:
68:67:f6:b0:f4:af:bb:59:ef:b9:27:b4:5b:0d:b9:
ad:03:b3:64:a3:98:08:2b:0f:62:7f:62:c8:81:76:
d5:df:95:a9:ed:fa:64:a8:ff:fc:c4:8f:99:05:06:
5c:fc:ba:bf:3b:bb:a8:01:37:c1:23:7b:3c:92:95:
de:75:e2:bb:b9:2b:d6:05:60:ac:5e:2f:b8:23:36:
1e:c7:b7:9d:31:e8:be:ff:b9:04:29:71:d4:0b:75:
03:83:f3:33:df:f5:4b:24:f9:c8:0e:c2:2b:58:99:
f9:cd:74:71:3b:76:b3:54:37:78:91:10:d9:36:4c:
c2:10:12:05:fd:4f:0e:2f:84:df:2c:d3:f7:56:c0:
b2:4d:03:6e:56:92:60:5a:c9:12:ee:ea:f4:fa:a9:
4e:66:58:c4:37:bd:07:7d:02:02:cb:b1:b0:56:fc:
4b:d1:34:40:3b:c4:be:fb:73:b9:56:57:65:57:37:
c9:9c:6d:e7:b3:90:15:4b:7a:bc:b4:4f:54:03:aa:
77:dc:8a:34:50:cf:2c:53:1d:40:70:22:5f:79:e2:
fa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:78:A6:B2:1E:5C:7F:80:75:70:4A:30:E4:1D:2C:3A:86:BC:F5:95
X509v3 Authority Key Identifier:
keyid:52:B1:2C:CC:7E:A1:06:8C:30:D7:8C:95:5C:56:B9:76:3B:CF:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrEszH6hBoww14yVXFa5djvPO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/DHimsh5cf4B1cEow5B0sOoa89ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/fefb40-d14a-4c58-899b-a952dea2a651/1/UrEszH6hBoww14yVXFa5djvPO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.26.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:86:c8:a7:05:ea:76:39:10:ac:b0:ed:77:ee:c5:c4:8c:40:
25:e2:c4:e6:9f:a4:71:b8:99:8d:2b:31:cb:b6:fd:bf:1a:02:
b3:94:2d:43:e7:ed:00:41:d4:57:de:3b:ca:88:17:a2:0a:0c:
1e:74:4c:77:e4:f4:c0:07:97:a0:fc:bb:62:1c:a7:d7:08:08:
5c:31:60:d4:28:81:b2:71:d7:4d:e0:08:b2:18:e4:b3:55:c8:
16:a5:16:2c:f8:2e:bc:9b:fc:4e:cb:ff:77:01:d8:f1:d5:0c:
72:4c:4f:7d:75:e6:17:e6:df:1a:c2:29:d9:6b:17:e9:56:ad:
c1:88:66:b6:c8:f4:65:f1:f6:d9:ba:a1:09:aa:90:d6:dc:7b:
c0:b7:44:f4:6c:ae:39:18:ab:a0:68:7f:ba:31:78:8b:ed:43:
a2:83:d2:a0:9d:60:6a:63:a4:cf:3f:57:a4:ad:18:ed:cf:01:
e2:1f:f1:38:95:3c:6e:bf:11:3d:75:2a:16:48:d9:df:e5:4d:
69:fd:fc:9e:6e:2c:90:04:57:d9:24:9b:67:94:a3:28:89:8e:
e4:92:33:8c:2c:3b:90:6d:e4:f4:e0:dd:56:43:6e:96:b3:0c:
81:70:08:6e:e4:62:45:74:5a:67:3a:26:52:d0:12:e4:5c:65:
aa:1b:f6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:19 2025 by rpki-client