Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/5SdjSPyrrwXu3bCqEZtsY_QdVOc.roa
File: 5SdjSPyrrwXu3bCqEZtsY_QdVOc.roa (raw, json)
Hash identifier: RmoONNUVnkKGB2eULTjJQ4phaMhHX8XPPMMUN+/KHnY=
Subject key identifier: E5:27:63:48:FC:AB:AF:05:EE:DD:B0:AA:11:9B:6C:63:F4:1D:54:E7
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 018570705E6E2A7FA520C786E0094346D93F
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/5SdjSPyrrwXu3bCqEZtsY_QdVOc.roa
Signing time: Mon 02 Jan 2023 03:04:50 +0000
ROA not before: Mon 02 Jan 2023 03:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211432
IP address blocks: 93.127.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5e:6e:2a:7f:a5:20:c7:86:e0:09:43:46:d9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 2 03:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5276348fcabaf05eeddb0aa119b6c63f41d54e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:c1:73:32:3f:e0:de:0f:66:52:dc:18:7f:
a2:d5:f8:44:5d:b6:dc:41:73:9d:95:b6:6b:4a:55:
4b:e3:5a:64:68:d4:8a:e1:78:47:59:42:02:f5:c4:
5b:6c:65:a7:58:82:69:61:54:bf:07:35:5d:79:c2:
7d:8f:e3:f9:dc:e7:ab:9c:fe:60:c8:0f:a4:20:2b:
70:4b:fc:77:5b:d0:22:5e:3a:ba:33:9d:a3:01:79:
43:b0:f8:b0:0b:8e:4b:bf:93:59:6d:3a:8e:61:ad:
04:b0:f0:7d:1b:28:61:8c:fe:8e:23:14:57:bf:07:
90:8b:2b:d3:fc:6e:aa:cd:a6:ba:5f:23:af:e0:33:
da:f4:1b:c8:ad:19:bd:d7:b9:7e:e5:ab:c1:11:1d:
55:b7:70:f8:23:54:c6:47:ee:dc:85:bc:01:f5:90:
b5:e1:7a:da:92:42:a2:c5:74:d5:10:6d:19:32:1e:
19:ce:06:13:6d:f3:f8:82:b4:06:da:ca:0e:77:c6:
30:d5:1e:45:a0:da:c5:19:24:0a:d2:d7:2b:27:a8:
15:4f:c1:8c:e6:f7:20:58:e1:1c:fa:79:8a:9d:f8:
3f:99:7d:9c:db:af:20:1d:33:52:bb:48:a6:70:fa:
f7:24:97:49:39:24:82:40:a0:01:11:e4:58:56:2d:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:27:63:48:FC:AB:AF:05:EE:DD:B0:AA:11:9B:6C:63:F4:1D:54:E7
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/5SdjSPyrrwXu3bCqEZtsY_QdVOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.168.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d4:70:be:06:fd:60:27:b3:d1:96:df:71:bf:f4:bf:d6:39:
ec:41:a6:7b:0a:d2:ea:71:f9:28:21:63:28:6d:6f:7e:e8:a5:
82:fa:7e:05:fb:5e:d8:b4:76:ff:04:9e:1c:8d:b9:14:15:f4:
c2:fd:0a:7f:60:7f:68:ea:70:f9:9c:96:cb:36:97:03:ac:16:
40:10:65:dc:7a:24:71:97:bf:65:fd:34:4b:83:7e:5c:85:2c:
c3:e5:74:4b:c7:29:6b:b0:06:a5:69:45:92:62:6b:73:ff:ba:
17:90:8d:b9:cb:7c:e2:12:fb:96:17:c4:fa:5f:50:ee:b7:91:
51:51:da:b4:0e:4e:1e:08:72:5a:e6:62:85:34:1e:63:b7:bd:
09:c3:dc:71:e7:cc:a2:9f:54:e5:88:5c:74:2f:4b:4a:00:02:
d7:9a:99:b5:5a:dd:45:b6:ed:33:ea:6a:ba:49:9c:7c:76:96:
83:ea:7c:a2:16:27:9b:48:2a:87:99:c3:96:c5:9f:e5:48:d1:
62:d9:0d:e4:55:7e:67:25:1c:87:1e:18:07:47:ce:2e:5e:57:
13:f7:a3:c6:83:12:0a:36:c3:29:6f:1f:f4:e1:29:dc:e7:43:
f5:68:dc:77:0c:ea:17:42:6f:a7:79:4b:5b:7e:b5:34:a9:81:
53:55:72:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwcF5uKn+lIMeG4AlDRtk/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOGQ3MzVmMzQ2YzRmYzQyYTQ3OTJjZTMzODA4YTIyMTBh
ODJiYjUwHhcNMjMwMTAyMDMwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTI3NjM0OGZjYWJhZjA1ZWVkZGIwYWExMTliNmM2M2Y0MWQ1NGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0nBczI/4N4PZlLcGH+i1fhEXbbc
QXOdlbZrSlVL41pkaNSK4XhHWUIC9cRbbGWnWIJpYVS/BzVdecJ9j+P53OernP5g
yA+kICtwS/x3W9AiXjq6M52jAXlDsPiwC45Lv5NZbTqOYa0EsPB9GyhhjP6OIxRX
vweQiyvT/G6qzaa6XyOv4DPa9BvIrRm917l+5avBER1Vt3D4I1TGR+7chbwB9ZC1
4XrakkKixXTVEG0ZMh4ZzgYTbfP4grQG2soOd8Yw1R5FoNrFGSQK0tcrJ6gVT8GM
5vcgWOEc+nmKnfg/mX2c268gHTNSu0imcPr3JJdJOSSCQKABEeRYVi28RQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOUnY0j8q68F7t2wqhGbbGP0HVTnMB8GA1UdIwQY
MBaAFMCNc180bE/EKkeSzjOAiiIQqCu1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUt
YzNmMjU3ZWIyMGNjLzEvNVNkalNQeXJyd1h1M2JDcUVadHNZX1FkVk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9kOTcyODctZmQwMS00YTEwLTkwOWUtYzNmMjU3ZWIyMGNj
LzEvd0kxelh6UnNUOFFxUjVMT000Q0tJaENvSzdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXX+oMA0G
CSqGSIb3DQEBCwUAA4IBAQCr1HC+Bv1gJ7PRlt9xv/S/1jnsQaZ7CtLqcfkoIWMo
bW9+6KWC+n4F+17YtHb/BJ4cjbkUFfTC/Qp/YH9o6nD5nJbLNpcDrBZAEGXceiRx
l79l/TRLg35chSzD5XRLxylrsAalaUWSYmtz/7oXkI25y3ziEvuWF8T6X1Dut5FR
Udq0Dk4eCHJa5mKFNB5jt70Jw9xx58yin1TliFx0L0tKAALXmpm1Wt1Ftu0z6mq6
SZx8dpaD6nyiFiebSCqHmcOWxZ/lSNFi2Q3kVX5nJRyHHhgHR84uXlcT96PGgxIK
NsMpbx/04Snc50P1aNx3DOoXQm+neUtbfrU0qYFTVXKd
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:28:47 2025 by rpki-client