Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/7AEnLXSB1YaAfgMGKA-kT_KobA0.roa
File: 7AEnLXSB1YaAfgMGKA-kT_KobA0.roa (raw, json)
Hash identifier: 5AKbmZJGLK7UnAttUygeGitl8Ob/t23TtR2u6flJg/c=
Subject key identifier: EC:01:27:2D:74:81:D5:86:80:7E:03:06:28:0F:A4:4F:F2:A8:6C:0D
Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial: 019427B5344AA151E254223EF353A0C30130
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/7AEnLXSB1YaAfgMGKA-kT_KobA0.roa
Signing time: Thu 02 Jan 2025 15:49:34 +0000
ROA not before: Thu 02 Jan 2025 15:49:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44605
IP address blocks: 93.113.132.0/23 maxlen: 23
2a03:9c20:2000::/48 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:34:4a:a1:51:e2:54:22:3e:f3:53:a0:c3:01:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Validity
Not Before: Jan 2 15:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec01272d7481d586807e0306280fa44ff2a86c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:b7:b2:f2:de:91:89:e7:5a:86:34:9c:f2:
01:c4:48:9b:f1:82:ba:cd:64:f2:97:25:35:c9:80:
7b:96:1b:ec:c3:dd:e7:0e:01:9d:c8:5a:8f:8f:9c:
25:91:44:72:9d:d6:97:e6:d2:43:d0:51:25:74:27:
75:63:58:e2:9c:87:29:e8:a2:1a:f4:04:28:75:06:
ba:81:db:f9:4a:21:5c:40:8c:77:d6:7b:cd:45:6b:
ac:16:7d:77:3f:4e:83:22:aa:e1:7f:8d:88:af:ab:
1a:6a:ec:ae:99:04:e3:85:77:ed:34:7c:3e:94:45:
08:c5:ad:25:e0:eb:f9:4a:63:de:2e:a4:93:28:06:
62:78:e3:ed:a3:a1:5f:35:45:c6:35:62:55:b6:ab:
fc:34:5f:5e:22:ea:03:0f:08:67:8a:68:97:41:f8:
71:86:ae:55:96:8a:3d:dd:7d:57:40:46:07:9a:c7:
70:55:f4:4c:49:45:17:d7:b5:0f:42:6d:b8:ee:76:
14:5d:54:24:41:b8:3e:65:09:0e:ba:35:0b:9d:34:
39:87:2d:1c:87:e5:e9:b4:67:34:83:40:41:ac:f7:
48:23:29:f5:e3:81:2c:e1:89:97:87:a7:92:a9:0d:
f5:46:c2:80:c1:f4:85:b1:f9:c4:3a:ea:8d:04:e5:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:01:27:2D:74:81:D5:86:80:7E:03:06:28:0F:A4:4F:F2:A8:6C:0D
X509v3 Authority Key Identifier:
keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/7AEnLXSB1YaAfgMGKA-kT_KobA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.132.0/23
IPv6:
2a03:9c20:2000::/48
Signature Algorithm: sha256WithRSAEncryption
6d:6b:15:9f:78:43:33:44:2f:f7:4d:32:8e:c5:38:b2:12:ab:
d6:44:8b:91:87:ca:d7:f4:89:75:53:3c:fb:f0:1e:69:ff:30:
1e:c4:57:77:aa:6b:10:42:6c:35:d0:e4:9a:ec:32:e9:a7:b1:
5c:5d:29:c0:02:d6:db:45:bd:2f:af:cd:d1:e4:4c:be:06:11:
10:99:b7:ca:73:c9:8c:e0:41:a8:4b:53:c5:0e:4b:68:49:e2:
d7:23:ec:9e:5d:02:01:b9:19:98:80:25:f6:27:53:27:9f:81:
a0:c6:d0:88:68:ca:c7:d2:1b:a2:10:b6:55:16:94:3d:c9:1d:
6c:c1:88:f2:b3:57:aa:45:9d:70:7f:d2:7e:dd:7f:81:3f:54:
20:73:ae:b2:9e:91:6f:4e:47:55:41:3a:cf:c4:f3:a3:6e:e4:
f6:23:ba:c6:a0:a8:bc:ac:3a:f9:bc:91:8a:20:0a:0b:1d:bc:
35:11:d2:46:1f:97:67:51:ee:ab:8f:43:92:5c:c0:ce:fc:30:
58:42:80:28:94:18:46:8d:43:ee:72:5d:31:00:76:4d:f1:2f:
8e:b6:a1:00:9e:46:42:1d:78:e4:79:be:d8:99:93:60:88:e9:
ff:11:15:25:43:ce:01:23:2e:40:ec:97:5b:1a:9c:95:f4:dd:
d2:d6:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:49 2025 by rpki-client