Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/iJh1Is23v99aQPfxrEcoh2MYiyk.roa
File: iJh1Is23v99aQPfxrEcoh2MYiyk.roa (raw, json)
Hash identifier: ikHj3b0HVdlPn/fDTAvyzsQEcfh/VI9SfamWDsTtaRY=
Subject key identifier: 88:98:75:22:CD:B7:BF:DF:5A:40:F7:F1:AC:47:28:87:63:18:8B:29
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 0194CAB105868A34614187019DEE7FC4CAA9
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/iJh1Is23v99aQPfxrEcoh2MYiyk.roa
Signing time: Mon 03 Feb 2025 07:23:06 +0000
ROA not before: Mon 03 Feb 2025 07:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 93.177.114.0/23 maxlen: 24
185.212.204.0/23 maxlen: 24
185.212.206.0/24 maxlen: 24
185.212.207.0/24 maxlen: 24
185.251.80.0/24 maxlen: 24
185.251.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ca:b1:05:86:8a:34:61:41:87:01:9d:ee:7f:c4:ca:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Feb 3 07:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88987522cdb7bfdf5a40f7f1ac47288763188b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:64:22:eb:46:d6:ee:ce:f9:2a:23:5f:c8:
ba:97:ae:25:36:da:72:46:b9:bc:90:4c:5a:e0:8a:
33:46:9f:43:d0:fb:c3:35:16:31:ef:f4:e0:84:c0:
b7:eb:41:c0:35:62:e3:a2:3c:27:75:08:12:fa:30:
69:85:4b:fe:90:c0:ce:40:a7:b8:c6:01:0d:03:95:
92:77:4e:f4:8d:a8:87:95:5c:ba:d6:af:ee:19:26:
c1:57:cb:d2:68:21:b1:da:39:0a:1f:01:b3:2f:46:
74:60:08:52:6d:93:cf:52:d8:3a:0a:86:20:28:b0:
df:80:20:2f:06:01:bf:b2:09:a4:7e:3e:cf:d4:9f:
fe:33:c5:4e:03:80:59:5b:7f:ea:d7:fb:d7:f6:1a:
58:fd:df:aa:a4:02:ac:2d:ef:71:5c:02:50:76:00:
eb:b9:15:7e:36:96:eb:8f:73:46:d2:0a:00:4d:79:
71:5e:5f:eb:68:57:e4:c1:71:c0:a8:7a:ca:cc:15:
9a:ec:0d:f2:52:17:44:3c:80:14:d3:33:ff:73:76:
cd:7a:8c:4c:67:c3:74:fe:68:34:da:6f:2f:c2:21:
89:49:c3:00:80:90:2a:45:3d:ad:44:67:e1:85:65:
8c:af:57:ff:08:b5:ee:ea:2f:4b:96:8b:c0:9d:75:
af:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:98:75:22:CD:B7:BF:DF:5A:40:F7:F1:AC:47:28:87:63:18:8B:29
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/iJh1Is23v99aQPfxrEcoh2MYiyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.114.0/23
185.212.204.0/22
185.251.80.0/23
Signature Algorithm: sha256WithRSAEncryption
76:d2:fe:2d:50:94:58:61:06:1c:3e:8c:38:b1:7f:a4:7f:58:
3b:53:79:21:91:c7:0d:2c:31:1f:2d:31:b1:b3:65:1b:ff:17:
3f:3d:98:d0:b1:ce:b0:10:13:b4:92:de:3b:8b:f8:44:c0:2a:
b3:80:81:e4:80:85:e6:12:d6:9f:9f:22:7f:e4:e3:af:8e:65:
15:df:ef:f9:b7:63:cf:54:db:b6:9e:5d:f5:0a:e9:0a:b8:13:
12:0e:7f:24:71:9b:b5:74:cc:aa:62:b2:a7:93:2a:fe:da:b3:
15:64:10:69:4f:5c:7f:f3:da:31:ec:a6:72:d1:aa:87:ed:5d:
ff:87:26:2c:73:3d:15:3b:e5:c5:d3:d0:77:42:7c:d8:85:e7:
a2:0e:3e:e7:de:7d:4c:c6:16:de:c0:95:e4:08:ec:9c:f6:de:
f7:d0:3d:ba:83:fe:80:1b:b8:57:17:ef:2c:9c:65:4c:1f:91:
70:0b:de:d7:be:8f:44:12:8f:b0:98:a4:fa:84:3a:96:77:8b:
2b:a3:b4:2d:bb:e1:ef:34:81:67:7a:44:a2:f3:56:1a:31:96:
fa:e0:24:5d:f9:63:2c:51:75:13:20:06:6c:fc:ec:a1:b1:28:
e3:4b:67:bf:45:17:39:d2:72:f4:12:54:7c:d5:e3:a6:6d:92:
d7:a1:06:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:43:14 2025 by rpki-client