Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/TyMYdFoY7C8fAK_3IrmIf6PUG7Y.roa
File: TyMYdFoY7C8fAK_3IrmIf6PUG7Y.roa (raw, json)
Hash identifier: yxHBK/uIcqXpgm+BJtB+cHUxH1/roq8H1Ue2qjVKkDw=
Subject key identifier: 4F:23:18:74:5A:18:EC:2F:1F:00:AF:F7:22:B9:88:7F:A3:D4:1B:B6
Certificate issuer: /CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Certificate serial: 018A422F34BA5B736987CD1382F44EA34B03
Authority key identifier: 03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/TyMYdFoY7C8fAK_3IrmIf6PUG7Y.roa
Signing time: Tue 29 Aug 2023 16:45:04 +0000
ROA not before: Tue 29 Aug 2023 16:45:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 93.95.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:42:2f:34:ba:5b:73:69:87:cd:13:82:f4:4e:a3:4b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0399ecc09144146cc175b58a4de400c7659ae4f5
Validity
Not Before: Aug 29 16:45:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f2318745a18ec2f1f00aff722b9887fa3d41bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b3:6a:a8:f1:7d:5e:dd:5d:2f:2f:b5:61:80:
9b:11:41:6e:91:59:47:ca:31:2d:be:86:63:a1:12:
a1:55:ab:2d:5d:06:9c:a0:3b:79:b7:10:2f:85:51:
24:6e:e9:53:c8:e6:a6:33:56:df:ca:24:4c:2f:5a:
f3:ef:0f:fc:12:8e:e0:d5:77:0c:1e:0f:85:62:e3:
da:51:5e:77:45:b3:c2:7c:22:9e:ce:77:5a:7e:38:
7a:d8:d4:8c:ce:96:3f:14:2a:58:48:a2:17:75:a5:
16:ae:07:8b:ce:35:81:e2:fd:dd:f7:10:59:e4:31:
cd:2b:55:70:d0:44:3c:b7:0a:ed:8a:6b:b1:69:17:
1e:ed:22:c2:1c:72:db:2d:6e:54:76:a5:f6:31:6b:
04:a9:8d:9c:c4:61:75:12:b3:ca:a5:0c:d3:64:7f:
73:ef:d5:78:67:80:be:85:80:02:57:5d:68:bc:f4:
69:2a:ae:0d:9e:03:c5:55:4a:f9:2d:93:01:20:b2:
fa:60:ee:55:4f:3e:2d:af:49:54:53:1d:0b:4f:f5:
46:58:ef:9a:59:9e:d5:a0:f8:16:03:24:a9:15:ef:
37:07:58:4a:89:e0:2f:32:93:b8:05:25:db:19:3e:
ab:44:76:67:3a:17:25:05:f7:db:a2:1b:21:f0:c6:
d0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:23:18:74:5A:18:EC:2F:1F:00:AF:F7:22:B9:88:7F:A3:D4:1B:B6
X509v3 Authority Key Identifier:
keyid:03:99:EC:C0:91:44:14:6C:C1:75:B5:8A:4D:E4:00:C7:65:9A:E4:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5nswJFEFGzBdbWKTeQAx2Wa5PU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/TyMYdFoY7C8fAK_3IrmIf6PUG7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7aab20-06a4-4e1c-98e8-085c90211cd0/1/A5nswJFEFGzBdbWKTeQAx2Wa5PU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.115.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:08:25:6e:e2:9a:d1:1c:26:5f:38:df:b5:bc:06:aa:03:0c:
20:2e:44:ed:ee:5b:72:d0:ea:23:cf:6b:88:67:39:e0:2f:3c:
bb:64:27:11:75:d7:17:b7:30:d1:34:09:f4:f1:8d:36:de:3a:
f9:bb:09:f1:11:fb:19:85:0a:03:26:17:de:c6:6c:e5:c4:c7:
f8:c6:6b:f1:09:94:1a:1b:b6:0e:2e:15:a7:fa:48:6d:72:16:
91:a8:d8:f1:3d:03:00:d8:48:cb:e1:a1:3e:9b:c5:7a:fa:8c:
26:7e:7e:37:0b:50:d5:96:7d:a1:b7:b7:fa:3d:56:75:21:37:
42:dc:06:63:5c:a4:7e:3b:63:ba:d9:3b:d4:02:9c:ce:3a:23:
a3:eb:fb:5a:63:8a:c1:6a:e6:f0:4c:43:bf:43:7d:39:6e:dd:
d1:f3:22:a4:3f:f7:f7:18:b4:af:80:ba:04:cb:05:95:86:21:
00:31:58:bc:94:24:45:44:1a:4d:af:f4:bf:2b:80:b8:fb:35:
f4:48:bc:5a:d1:93:22:19:bd:d1:71:03:3f:db:45:74:39:82:
c9:4f:5f:39:f5:f8:23:65:b6:26:cb:66:d4:29:99:cb:fc:e6:
5f:24:94:82:28:67:2a:58:0d:94:81:f3:38:cd:4b:a1:64:d3:
f4:6a:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:34 2025 by rpki-client