Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Ms9vGjkB6BvHzVHY3eRKiL-7TOY.roa
File: Ms9vGjkB6BvHzVHY3eRKiL-7TOY.roa (raw, json)
Hash identifier: dA7zrzsBVlSmBtpxXULRX69ruaS0cR7huoCF0znXsnk=
Subject key identifier: 32:CF:6F:1A:39:01:E8:1B:C7:CD:51:D8:DD:E4:4A:88:BF:BB:4C:E6
Certificate issuer: /CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Certificate serial: 33B03641
Authority key identifier: C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Ms9vGjkB6BvHzVHY3eRKiL-7TOY.roa
Signing time: Sat 01 Jan 2022 14:55:13 +0000
ROA not before: Sat 01 Jan 2022 14:55:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62255
IP address blocks: 93.127.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867186241 (0x33b03641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c08d735f346c4fc42a4792ce33808a2210a82bb5
Validity
Not Before: Jan 1 14:55:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32cf6f1a3901e81bc7cd51d8dde44a88bfbb4ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:de:4b:bd:e4:08:d1:e5:28:5b:50:1a:5a:6a:
3f:52:0a:13:76:99:d7:79:a1:8f:72:20:32:b0:69:
f5:67:1d:c2:11:68:ce:dc:d7:ee:5f:c8:7b:4e:76:
82:39:b5:28:da:9b:6c:b8:de:aa:f6:56:6b:ed:02:
57:4e:74:36:d9:9f:ca:1c:89:37:a6:9c:31:04:23:
e8:05:c4:9c:b5:14:00:d3:98:4e:9d:ac:b3:8f:a5:
bf:56:4a:ae:25:74:b2:04:72:a1:ab:49:db:0e:da:
f4:0b:7e:2e:b1:3e:31:55:d6:cf:fa:5a:ef:6f:e5:
ae:8f:9e:0f:3d:d8:3c:f9:40:e9:45:e1:b2:df:5a:
cb:de:c7:f0:9c:75:05:34:4d:24:30:42:38:d2:ec:
70:c3:b0:c4:84:e7:ce:b8:8e:90:08:30:9f:7e:f7:
15:24:96:e9:3f:c0:bc:5c:cd:ad:17:d0:9a:5a:4c:
6e:fc:7f:21:ff:03:51:a0:d3:25:80:a3:df:9e:69:
d9:17:46:ed:77:61:4b:04:a8:5a:72:ad:8b:2c:72:
1d:b5:a5:f3:d3:c2:79:67:a5:1d:73:c8:f2:06:06:
b0:6c:c5:f1:e9:de:f6:39:2b:37:db:36:29:2f:12:
53:62:c0:a5:0b:47:6d:f3:f2:47:c9:07:fd:5a:de:
bc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CF:6F:1A:39:01:E8:1B:C7:CD:51:D8:DD:E4:4A:88:BF:BB:4C:E6
X509v3 Authority Key Identifier:
keyid:C0:8D:73:5F:34:6C:4F:C4:2A:47:92:CE:33:80:8A:22:10:A8:2B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wI1zXzRsT8QqR5LOM4CKIhCoK7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/Ms9vGjkB6BvHzVHY3eRKiL-7TOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d97287-fd01-4a10-909e-c3f257eb20cc/1/wI1zXzRsT8QqR5LOM4CKIhCoK7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.128.0/19
Signature Algorithm: sha256WithRSAEncryption
20:b2:d7:02:99:d3:b0:18:e9:7a:aa:97:28:ed:01:4a:15:b0:
83:3b:65:95:8c:dd:0b:6a:d3:39:d0:3b:a1:a0:5b:7a:7c:73:
57:85:e3:14:68:ba:b8:0c:98:76:21:c8:12:fb:ac:66:cb:88:
ca:ee:03:0a:db:de:fe:73:f4:f8:0b:a5:ff:bf:b1:6f:e6:17:
fb:99:80:08:8d:f0:fc:d1:bf:57:65:0d:50:a5:7d:8b:83:0a:
da:fa:43:64:7b:51:01:9d:04:26:85:0a:3e:ba:04:98:83:27:
8c:74:26:87:16:eb:dc:a4:dc:0e:c0:33:ac:2c:b8:74:ce:64:
b9:8c:cb:05:b2:6e:44:65:8e:f6:f0:58:07:9b:cf:6c:d3:a2:
b7:49:10:b7:1b:87:4c:b9:9e:73:28:7a:42:c0:30:16:b5:85:
92:29:8c:29:d2:7a:35:ac:1d:51:2f:bd:0c:4f:5f:53:c4:02:
1c:9b:f8:63:c0:79:45:45:83:3b:ee:06:66:27:f9:d8:33:94:
7f:2d:01:ba:07:f1:bc:64:4f:f9:54:0b:eb:40:ef:b2:88:66:
5f:75:31:b8:76:ab:52:75:af:c2:cb:44:25:e6:b2:bc:0c:26:
a8:74:50:78:ac:d0:be:77:9b:51:4c:06:45:50:2f:c7:5a:e6:
58:02:2e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:32:18 2025 by rpki-client