Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/lEpdcOOSnqCtPstkDPmQZY9LdDw.roa
File: lEpdcOOSnqCtPstkDPmQZY9LdDw.roa (raw, json)
Hash identifier: xXnCJM6QOJ9sG4LIVJ7Xc9EaDGHbE2E7DOKKIFu713w=
Subject key identifier: 94:4A:5D:70:E3:92:9E:A0:AD:3E:CB:64:0C:F9:90:65:8F:4B:74:3C
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 019270ADD24195BBFC99A9704B6973020441
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/lEpdcOOSnqCtPstkDPmQZY9LdDw.roa
Signing time: Wed 09 Oct 2024 09:48:12 +0000
ROA not before: Wed 09 Oct 2024 09:48:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216127
IP address blocks: 93.185.156.0/24 maxlen: 24
93.185.158.0/24 maxlen: 24
93.185.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:ad:d2:41:95:bb:fc:99:a9:70:4b:69:73:02:04:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Oct 9 09:48:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=944a5d70e3929ea0ad3ecb640cf990658f4b743c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:0f:f8:cf:5d:26:60:dc:4a:6d:07:33:88:
cd:76:97:fc:23:40:fc:c4:68:d2:a9:56:76:79:8d:
47:13:aa:b6:82:61:bb:c9:a5:7f:79:9c:a3:89:13:
3c:7b:46:c4:75:d0:5f:ef:13:cb:72:c8:6b:60:ff:
ed:a5:0b:b8:35:2e:75:98:b8:87:d0:76:57:36:97:
6b:c6:3c:9f:19:98:e7:01:bc:2c:f4:21:30:59:06:
75:af:91:51:05:05:97:a5:49:2d:9c:92:19:a5:f0:
35:8d:dd:35:44:3b:4b:a3:07:b5:76:52:07:2f:97:
e1:f8:1a:5b:7a:fb:72:4c:35:9b:48:93:82:cc:f6:
1a:b1:51:6c:9b:0f:01:11:be:b4:a3:a1:c2:ba:03:
41:03:e1:50:4a:7b:27:47:f3:de:df:a9:b6:a4:69:
e2:c9:1a:2b:b4:61:ad:52:ce:de:dd:09:e8:54:7c:
bc:af:4b:fa:c9:af:34:1f:51:b9:39:5d:ad:d6:7c:
55:b2:6e:2c:69:b6:77:ba:d1:18:a3:e3:59:f2:a2:
22:6b:6d:e2:8a:a6:b6:31:b3:74:93:eb:ab:87:c3:
01:a1:68:67:8d:b3:18:25:7f:d0:f9:a8:54:8a:95:
14:4a:70:35:de:90:07:cc:64:6f:7c:b4:58:9a:94:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4A:5D:70:E3:92:9E:A0:AD:3E:CB:64:0C:F9:90:65:8F:4B:74:3C
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/lEpdcOOSnqCtPstkDPmQZY9LdDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.156.0/24
93.185.158.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:7c:b5:d3:74:29:70:a3:69:e1:9d:a0:e9:d9:ae:a8:f6:74:
ca:8d:b9:40:3b:82:fd:30:23:2b:10:6a:1d:dc:19:9b:f4:f7:
db:89:ad:80:d8:9f:c1:cd:d2:4e:2a:c3:ab:d5:d0:9e:06:b4:
24:48:90:62:2c:83:2b:e4:96:11:2a:18:37:4d:b0:5f:01:b5:
e4:1a:5f:9e:1c:cf:47:68:02:40:1a:79:03:31:34:df:36:d8:
22:43:f0:1f:06:e6:6f:29:28:63:cf:56:d7:c3:71:2f:14:9a:
32:dd:3b:aa:be:e5:fe:76:bc:fc:33:1b:ce:70:1a:47:a3:05:
67:0b:bc:1e:ac:b4:16:b5:bd:65:76:48:39:76:34:94:cc:57:
5a:ac:13:bf:e0:23:a0:07:60:eb:f1:1d:1c:8a:0b:8f:b6:11:
fe:c0:b8:7f:3c:ca:29:78:74:7d:45:0a:bc:fd:ba:08:4b:ab:
49:30:73:bd:12:10:72:0b:27:06:48:1c:6b:9e:4a:0c:32:40:
25:35:b3:b3:89:4b:2e:0f:4b:39:35:0c:08:db:65:66:a4:be:
50:82:28:8e:26:fa:8a:7a:5b:e0:b5:eb:fb:bc:d5:bf:81:88:
c1:5a:de:ba:46:10:ad:2d:51:74:b1:31:e2:cc:1e:83:f3:17:
47:ee:7f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:12 2025 by rpki-client