Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/nDetrRMnL6bFIIch2EQ7KoxVi8s.roa
File: nDetrRMnL6bFIIch2EQ7KoxVi8s.roa (raw, json)
Hash identifier: K/EuvDzLNVr8qzbP7xz2D3CwoikPZSSAfGg+Wpnx03I=
Subject key identifier: 9C:37:AD:AD:13:27:2F:A6:C5:20:87:21:D8:44:3B:2A:8C:55:8B:CB
Certificate issuer: /CN=8eb045110c41edb25931f4a523c39dd4c941d718
Certificate serial: 018AFB446482C8A26CCBCAC74F9F070DFF08
Authority key identifier: 8E:B0:45:11:0C:41:ED:B2:59:31:F4:A5:23:C3:9D:D4:C9:41:D7:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/nDetrRMnL6bFIIch2EQ7KoxVi8s.roa
Signing time: Wed 04 Oct 2023 15:17:57 +0000
ROA not before: Wed 04 Oct 2023 15:17:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197143
IP address blocks: 93.93.104.0/24 maxlen: 24
93.93.105.0/24 maxlen: 24
93.93.107.0/24 maxlen: 24
93.93.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:44:64:82:c8:a2:6c:cb:ca:c7:4f:9f:07:0d:ff:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb045110c41edb25931f4a523c39dd4c941d718
Validity
Not Before: Oct 4 15:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c37adad13272fa6c5208721d8443b2a8c558bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ef:71:ed:ef:47:b8:a8:39:66:15:a3:07:64:
b4:f5:66:83:f4:33:9f:00:b9:4f:f9:79:12:1c:0c:
e7:26:42:f9:34:cc:6b:7c:95:50:0c:eb:31:4d:b7:
04:3e:73:16:db:8c:eb:63:7d:1c:ca:f2:9b:2d:28:
b8:44:43:8d:1a:10:ca:ec:82:e0:29:ca:66:95:44:
6a:2d:b8:01:10:9b:1d:6c:06:cb:40:00:19:d9:f8:
9c:93:56:ff:84:66:07:a7:da:cb:a1:f0:8e:8a:c1:
00:79:25:7a:60:f7:fd:27:69:a1:3f:60:0e:56:6d:
d8:95:a9:c5:a1:34:a2:cd:93:b8:bc:9b:3a:e2:27:
b1:22:0e:aa:ba:1f:cf:7c:e6:f1:b0:97:75:28:f3:
2d:ea:55:de:d7:9d:bf:fe:5d:db:bc:c0:6b:d7:31:
8a:1f:4e:97:0a:4a:2b:bc:12:e0:68:18:1a:8e:2f:
87:2c:bf:11:c6:f5:7e:52:8d:78:0a:e9:7f:bc:1e:
97:c7:f9:97:b6:a4:a1:17:50:7f:2b:29:88:39:ce:
8c:94:a8:84:cf:25:0c:9a:ae:6e:6c:08:fb:4f:8d:
d7:60:14:27:96:3f:a2:15:75:0e:04:b5:3f:9b:1e:
11:6c:b4:c4:f5:b6:b0:43:c5:16:b5:e0:0d:28:41:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:37:AD:AD:13:27:2F:A6:C5:20:87:21:D8:44:3B:2A:8C:55:8B:CB
X509v3 Authority Key Identifier:
keyid:8E:B0:45:11:0C:41:ED:B2:59:31:F4:A5:23:C3:9D:D4:C9:41:D7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrBFEQxB7bJZMfSlI8Od1MlB1xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/nDetrRMnL6bFIIch2EQ7KoxVi8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b17c49-2c0b-40e4-b8f2-04a4557c4858/1/jrBFEQxB7bJZMfSlI8Od1MlB1xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.104.0/22
Signature Algorithm: sha256WithRSAEncryption
28:55:21:ee:9b:f6:a5:35:69:68:ee:29:14:8c:9d:c8:fa:84:
70:87:bd:64:91:8a:f2:c7:8c:3c:c5:e2:62:28:58:18:74:b9:
f1:c5:17:1e:38:8c:16:01:47:17:3b:c2:91:cb:d4:e6:05:5e:
88:48:a4:9d:b6:28:86:fa:a5:1f:a0:97:2f:62:6c:f3:01:26:
12:6f:2b:5a:bc:92:40:3a:4f:de:1c:4a:01:ce:b7:1c:c4:a9:
29:7b:1f:bf:d1:f1:cd:68:5d:34:5b:2b:36:ea:d5:18:67:c7:
a2:5a:a7:e5:24:a4:76:b7:35:ad:9d:b2:14:ec:e8:c6:e7:05:
15:c8:9a:f9:b1:1c:49:35:ed:7e:41:60:dd:74:d1:59:07:2b:
67:dd:81:15:9b:1d:ce:85:1c:03:f9:33:ef:ff:46:24:02:14:
0d:c3:69:13:a9:87:01:d7:84:84:fc:0b:83:96:f8:95:0c:df:
87:59:5e:ec:f2:47:ee:22:99:d4:1c:81:8c:46:2d:44:7d:a6:
44:4c:ab:00:0e:cf:83:3f:48:fb:65:6a:05:69:1a:ee:9d:9d:
e2:d3:1f:ea:22:21:46:0f:8a:81:60:b2:36:28:18:0b:1e:f9:
e9:e0:83:26:d2:4f:d9:da:43:c5:d3:c7:0d:c6:85:57:c0:76:
d2:7e:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:57 2025 by rpki-client