Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa
File: vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa (raw, json)
Hash identifier: aqC1tIrcI2MF2zcWVNBFSrIprB6SpbD2HGFhZaRj/MQ=
Subject key identifier: BC:8A:39:25:91:1B:27:2F:E3:D4:5E:C6:CB:4C:74:FB:85:D3:3A:6E
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 01942521776C7C9D881A966F69FCE8A33620
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa
Signing time: Thu 02 Jan 2025 03:48:57 +0000
ROA not before: Thu 02 Jan 2025 03:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 93.185.144.0/21 maxlen: 21
93.185.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:77:6c:7c:9d:88:1a:96:6f:69:fc:e8:a3:36:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 2 03:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc8a3925911b272fe3d45ec6cb4c74fb85d33a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:eb:bb:4c:bd:70:a2:50:fd:eb:9c:ac:b6:
3b:81:85:8b:3b:bd:3b:19:4f:1d:c3:af:6b:4e:1d:
58:38:a2:ac:be:7c:83:ba:e8:c7:2e:2c:c0:85:a0:
07:39:29:94:97:cd:a1:8e:98:09:82:43:8a:03:72:
f5:1b:48:7c:52:28:e6:86:c4:52:ea:f9:71:e2:85:
22:b7:3b:eb:65:df:4d:d1:85:cd:3a:c4:01:f7:28:
dd:74:9b:ce:f3:6a:50:14:46:91:7f:0e:df:41:47:
70:f9:97:3e:ea:47:34:3f:7e:69:9e:ba:b5:af:d1:
8e:49:3b:fe:6f:fe:56:c1:45:a6:53:40:17:a5:77:
43:1c:14:73:37:5b:87:a6:b6:74:fc:37:e3:a7:cc:
bf:18:57:b8:dc:29:62:e1:87:7a:50:4d:22:0b:33:
0c:8c:7d:1e:2e:62:eb:b2:f6:fe:a6:3e:78:dd:e2:
e6:bc:16:35:39:8c:03:f0:6e:da:f5:f5:d7:41:57:
9e:ed:a4:4d:8a:12:8f:bc:1e:e3:dd:b5:f6:cc:88:
c6:65:e2:0e:3e:ed:d3:89:c7:b4:1e:5c:2d:1a:54:
75:ec:ee:79:fe:48:4a:0b:de:7c:63:72:27:50:ca:
82:35:9b:8d:d2:f1:33:4e:84:3d:6f:b1:38:b5:54:
3e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8A:39:25:91:1B:27:2F:E3:D4:5E:C6:CB:4C:74:FB:85:D3:3A:6E
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/vIo5JZEbJy_j1F7Gy0x0-4XTOm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.144.0-93.185.155.255
Signature Algorithm: sha256WithRSAEncryption
5d:98:e7:3a:95:72:b3:ae:07:63:e6:15:20:d2:11:35:6f:c8:
d0:83:5e:c5:85:1f:8c:c9:5c:cf:70:54:65:c5:4f:a7:52:18:
be:ce:2a:d2:4b:27:dc:f1:7d:3a:f9:7f:fd:cb:c2:69:b3:47:
45:19:78:9b:9e:6e:63:09:8a:a0:f1:ad:4a:39:45:24:0a:b0:
98:84:0e:95:b2:c5:ec:98:54:10:fc:05:95:49:f9:0d:02:65:
58:25:2f:79:69:46:03:3a:ab:ed:30:87:f5:de:35:75:5c:be:
b3:e6:bc:ac:24:58:f7:ca:f6:3c:c5:71:58:6d:cb:3f:4f:a1:
81:c5:d1:84:34:34:ac:93:79:2a:c9:cf:bb:37:79:61:87:79:
e1:7f:72:e6:8b:4e:99:3b:35:15:5f:88:de:4a:eb:6c:5a:94:
29:66:30:31:42:6d:b6:43:37:1d:95:65:bc:b5:c9:ee:b7:99:
53:e8:43:e9:f7:62:56:25:89:d1:5b:61:b0:b5:22:c3:50:19:
31:ac:b4:1c:72:21:6f:3d:2d:02:bf:61:fc:2f:8b:a6:71:91:
26:a4:39:82:82:10:2e:f1:af:9a:aa:64:43:6d:5b:6e:3d:2f:
75:f3:1b:25:29:46:8c:a1:27:91:da:82:96:55:97:7e:6a:d1:
be:54:b9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:45:31 2025 by rpki-client