Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/q5iwhkLWHaHzrsMDMRUmBmBn11k.roa
File: q5iwhkLWHaHzrsMDMRUmBmBn11k.roa (raw, json)
Hash identifier: 2neeMv5dtKfWXLBDuxY5lIZ8bbDinZSWs3Ol+x9qe8Y=
Subject key identifier: AB:98:B0:86:42:D6:1D:A1:F3:AE:C3:03:31:15:26:06:60:67:D7:59
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 019421B23208D9C6C668A1546CE85B5D5915
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/q5iwhkLWHaHzrsMDMRUmBmBn11k.roa
Signing time: Wed 01 Jan 2025 11:48:33 +0000
ROA not before: Wed 01 Jan 2025 11:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205937
IP address blocks: 93.94.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:32:08:d9:c6:c6:68:a1:54:6c:e8:5b:5d:59:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 11:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab98b08642d61da1f3aec303311526066067d759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:d5:3e:aa:5d:6e:3e:6a:d3:ec:8c:02:1d:
d5:d7:40:12:5d:54:4a:34:dd:65:e1:fb:8a:63:a6:
1e:fe:db:76:5a:e1:85:ad:5c:97:d6:75:46:5f:c5:
01:61:c5:2c:9c:13:f2:c2:37:12:1e:72:01:02:40:
4a:11:72:75:0d:ea:ca:bb:55:8f:c9:e2:6d:61:a0:
59:db:0a:40:6a:c8:7a:ca:b1:92:ca:66:f0:bc:79:
4e:a7:e9:3b:0e:5a:0c:b9:d7:d4:f9:17:c1:65:56:
45:6a:fa:17:d6:d0:07:34:cd:4b:86:4b:d9:2b:86:
1c:63:4d:2a:e4:11:aa:b8:d7:a4:c7:c8:3a:2b:60:
25:0d:61:b5:26:64:4e:30:cc:21:cd:48:8a:de:ef:
28:43:a5:e9:11:e1:9a:9c:34:50:95:48:5f:59:3d:
82:b2:84:23:d7:a3:3c:06:90:07:da:9a:50:95:dc:
43:d8:5d:3c:dd:94:79:9e:d7:e8:96:c7:b6:dc:b9:
2b:1a:04:5b:36:25:71:58:73:1a:62:f1:b1:1b:53:
33:82:5f:4e:24:dc:dd:00:c5:db:e9:b9:f9:de:0c:
6a:72:d1:4c:ea:49:03:92:16:22:4d:5b:15:56:78:
95:2a:91:cb:ea:b8:17:c3:d5:bf:e3:77:0b:45:51:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:98:B0:86:42:D6:1D:A1:F3:AE:C3:03:31:15:26:06:60:67:D7:59
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/q5iwhkLWHaHzrsMDMRUmBmBn11k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.139.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4b:d4:48:7c:48:90:c7:9f:f8:66:af:bb:cf:8e:4e:bb:97:
11:4c:06:cf:21:03:ce:19:36:14:dd:01:eb:eb:9d:e9:fb:7a:
7c:1d:33:38:51:ea:cb:e1:52:5f:a3:a2:03:25:89:ef:7f:df:
d1:28:a1:dc:e1:b2:1a:43:9a:3f:84:87:d8:e7:e6:72:d8:2d:
22:0a:ef:30:ea:a4:9f:d3:36:2e:97:3a:73:9b:3a:87:45:bf:
46:42:24:18:62:ec:d8:e8:79:e8:14:f5:7b:e3:55:82:7d:d0:
1f:88:32:ce:70:54:ee:ab:35:a4:8b:0e:53:bb:80:b3:0a:81:
a1:48:ba:7f:51:48:2c:0a:7e:b1:6e:d5:89:12:d7:30:b4:5e:
aa:ea:de:0e:27:48:07:4c:c0:e0:d6:0b:c6:5d:33:0c:af:fa:
19:bd:dc:f5:09:0e:44:51:17:f9:bd:6e:a0:b9:3a:12:6f:0f:
24:ec:b3:87:08:44:2c:ba:c3:b5:6f:50:1a:72:54:40:e5:00:
db:ab:77:f9:32:94:f3:59:a4:21:e8:28:31:b5:e0:da:b7:9a:
7b:3b:cf:5b:3b:98:16:92:f4:9d:e0:8f:5c:1a:32:a5:57:e8:
4d:b6:6d:f8:59:8c:b4:63:c7:61:b8:c8:99:b4:25:31:7a:10:
57:76:eb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:01 2025 by rpki-client