Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/q6nndH-33_BvniCUfqWUeidElOo.roa
File: q6nndH-33_BvniCUfqWUeidElOo.roa (raw, json)
Hash identifier: 5+tU60z4xUVT380UyCW3cKR+2ce//dNABUwK2R4ClCg=
Subject key identifier: AB:A9:E7:74:7F:B7:DF:F0:6F:9E:20:94:7E:A5:94:7A:27:44:94:EA
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018511206399C719C3D81A01A01C59870C4A
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/q6nndH-33_BvniCUfqWUeidElOo.roa
Signing time: Wed 14 Dec 2022 14:53:33 +0000
ROA not before: Wed 14 Dec 2022 14:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44814
IP address blocks: 93.94.137.0/24 maxlen: 24
2a01:4a40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:11:20:63:99:c7:19:c3:d8:1a:01:a0:1c:59:87:0c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Dec 14 14:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aba9e7747fb7dff06f9e20947ea5947a274494ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:19:e5:df:2a:05:1c:84:ba:d8:60:18:19:89:
0e:f4:6e:1c:75:6f:92:19:78:38:51:94:8a:d8:0b:
30:ba:56:7a:1f:84:03:48:60:ae:ba:c2:69:a7:f5:
f4:a1:fe:6a:53:5e:27:20:43:e1:be:7e:c4:52:38:
43:e4:bc:b4:da:cf:12:d3:03:37:bd:08:c0:0a:a4:
61:0b:69:b5:ff:bb:7c:91:4e:a0:21:1a:a1:57:fd:
71:8c:2a:f5:cb:4b:55:52:91:99:d4:96:b9:dc:6b:
01:50:5e:02:dc:c9:e5:44:da:cb:80:5d:33:18:a5:
ad:0d:00:ee:d7:53:8b:5d:9f:a7:bb:05:42:a6:b0:
32:a2:59:15:53:6a:cc:5a:a7:28:60:c8:26:00:21:
c5:75:d2:d8:f5:40:d7:13:a7:2d:11:87:49:a0:e1:
78:12:43:7d:21:e4:48:e5:01:b9:93:98:bf:2e:da:
45:b7:50:1a:50:f0:02:f3:48:92:d3:9a:0e:e6:33:
57:62:f7:49:f5:18:b5:ba:2a:85:3c:bb:9f:76:6c:
d9:0e:2d:6b:fe:e4:ed:3e:7c:99:8e:db:2d:23:b8:
7f:1c:b8:e4:1f:13:87:23:d0:b4:87:88:ab:df:c6:
83:e6:a2:51:5a:0f:3d:16:15:cc:00:0a:11:9b:20:
f6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A9:E7:74:7F:B7:DF:F0:6F:9E:20:94:7E:A5:94:7A:27:44:94:EA
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/q6nndH-33_BvniCUfqWUeidElOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.137.0/24
IPv6:
2a01:4a40::/32
Signature Algorithm: sha256WithRSAEncryption
92:55:76:78:75:86:26:61:98:bf:9b:cf:44:02:c3:08:d8:bd:
18:ed:f2:d5:13:a8:d5:87:fe:26:7e:e5:b0:e5:ef:3a:80:44:
46:70:56:cd:09:fc:01:15:f5:ee:39:9d:bb:6f:34:ad:66:b1:
78:b4:79:c7:f2:c8:77:0f:91:91:47:06:ce:66:14:2d:79:fc:
a1:ec:04:ee:d3:51:2c:1f:e2:84:9a:e5:15:0e:66:1e:75:3e:
a9:f6:d8:f9:76:48:b1:06:9d:eb:28:46:5c:a3:98:a0:a0:51:
db:29:41:bb:02:ad:9f:a8:8c:17:b0:d3:7c:73:be:1f:63:3c:
00:bf:49:50:00:b4:be:6f:9f:8b:b6:fd:dd:e0:01:80:fc:b0:
1e:c5:f6:34:ea:bd:b0:52:5c:ff:14:15:e2:cc:78:4d:1f:1d:
3f:b1:cb:00:c5:85:06:27:ea:09:41:4c:fb:36:0a:c7:c0:84:
94:47:d5:d2:81:ac:d0:24:20:1d:be:7a:9a:0b:d8:e0:c4:ea:
31:22:ac:1c:a2:48:d0:68:14:83:95:b3:63:6e:bc:d9:80:a1:
9c:f4:fe:92:bc:6c:7f:7f:b9:c1:8e:56:b6:28:97:b1:27:45:
fe:e4:c7:dc:1c:a3:fd:eb:ee:9f:af:22:d0:2b:10:e6:6b:21:
e4:13:9a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:30:06 2025 by rpki-client