Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/o90pOwyPTJq3ipoCJqnYBJG60tQ.roa
File: o90pOwyPTJq3ipoCJqnYBJG60tQ.roa (raw, json)
Hash identifier: Na/z/vBKAhxwYBPl3tg6qs5p0eBzlCQ1bMK6PBTkoFc=
Subject key identifier: A3:DD:29:3B:0C:8F:4C:9A:B7:8A:9A:02:26:A9:D8:04:91:BA:D2:D4
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B6842ED3DBE1A94000109C520CC470
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/o90pOwyPTJq3ipoCJqnYBJG60tQ.roa
Signing time: Thu 02 Jan 2025 15:51:00 +0000
ROA not before: Thu 02 Jan 2025 15:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49882
IP address blocks: 93.191.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:84:2e:d3:db:e1:a9:40:00:10:9c:52:0c:c4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3dd293b0c8f4c9ab78a9a0226a9d80491bad2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:0f:51:eb:08:0d:ed:26:a3:bc:4e:fc:38:
fe:9e:79:82:46:98:3b:97:8e:59:77:76:e7:ed:1a:
64:b7:4a:53:3f:a1:35:90:dc:1d:fe:22:be:fb:f0:
69:72:e8:a1:d4:e9:e7:a0:ed:47:f4:00:6b:64:f3:
2e:85:3c:12:9c:8c:6e:2f:0b:7a:83:f5:bf:73:40:
c9:63:51:68:4b:4f:bd:0f:50:d6:78:31:5a:e6:1b:
cd:61:ad:5a:1a:66:b9:5a:b8:99:6d:ca:85:b2:60:
46:38:c5:18:73:06:32:c0:3f:b8:bb:49:b9:36:c2:
2c:c6:8f:14:78:c3:ab:64:47:fe:c0:0f:db:25:73:
82:cd:e7:f5:da:3e:50:85:d2:08:80:09:db:29:7e:
ed:bc:32:5a:52:4b:6b:dc:95:51:40:89:c6:dc:a3:
12:7a:09:99:aa:c4:22:fd:62:f4:36:ac:5e:d9:15:
d6:86:fe:59:7f:cc:89:92:bc:0c:38:db:59:ac:78:
d7:15:cb:91:9e:2e:98:db:ee:ab:3f:48:d8:2a:fa:
c4:7d:05:2f:40:f6:e4:7c:11:e6:07:5b:31:10:08:
78:50:50:86:ea:ea:30:9d:e2:07:80:a7:92:85:95:
b8:1f:f5:69:21:77:00:a0:4e:24:53:91:82:95:93:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DD:29:3B:0C:8F:4C:9A:B7:8A:9A:02:26:A9:D8:04:91:BA:D2:D4
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/o90pOwyPTJq3ipoCJqnYBJG60tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.174.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3e:94:9b:62:f5:b2:55:6c:2d:41:95:28:d9:fe:ad:0b:ba:
1f:51:58:77:be:6e:6e:dd:83:6b:c8:d3:07:84:87:2f:55:d0:
0d:11:41:c0:af:9a:b0:bb:c9:05:07:71:fb:62:52:34:dd:19:
bb:93:ef:c5:26:69:cd:70:b2:3b:9e:f4:e2:b2:1f:2e:e2:f6:
9a:48:53:40:60:0a:4e:c9:9d:c5:e8:44:2c:ae:03:e2:af:06:
78:0b:74:29:cb:7c:42:b5:24:bb:3a:58:3d:4e:9f:ce:5d:b3:
4f:fa:20:e2:8c:55:99:af:4e:d9:65:0d:66:33:a2:5f:88:b9:
c5:e4:42:24:b4:f5:14:e8:7c:18:b4:da:dd:90:88:bb:32:ab:
50:64:b5:1d:ee:17:5b:17:35:1e:f8:fe:10:91:29:29:2d:1f:
c7:92:73:1e:f3:2e:50:8b:b7:97:9f:e9:e0:9b:65:7a:5a:73:
b4:a2:3d:1c:05:81:9d:c5:97:62:7c:90:72:91:8d:70:5e:96:
80:f7:f3:94:d4:60:fe:3f:a0:cb:05:f7:53:9b:88:95:42:5d:
f2:42:9e:b4:57:27:89:96:32:23:65:51:9d:7d:0c:9d:5f:00:
1b:ef:5c:a8:a7:8d:b7:20:a5:f8:25:0a:c7:76:34:4e:89:3d:
27:3d:9e:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntoQu09vhqUAAEJxSDMRwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjUwMTAyMTU1MTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhM2RkMjkzYjBjOGY0YzlhYjc4YTlhMDIyNmE5ZDgwNDkxYmFkMmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ4PUesIDe0mo7xO/Dj+nnmCRpg7
l45Zd3bn7Rpkt0pTP6E1kNwd/iK++/Bpcuih1OnnoO1H9ABrZPMuhTwSnIxuLwt6
g/W/c0DJY1FoS0+9D1DWeDFa5hvNYa1aGma5WriZbcqFsmBGOMUYcwYywD+4u0m5
NsIsxo8UeMOrZEf+wA/bJXOCzef12j5QhdIIgAnbKX7tvDJaUktr3JVRQInG3KMS
egmZqsQi/WL0Nqxe2RXWhv5Zf8yJkrwMONtZrHjXFcuRni6Y2+6rP0jYKvrEfQUv
QPbkfBHmB1sxEAh4UFCG6uowneIHgKeShZW4H/VpIXcAoE4kU5GClZM8WwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKPdKTsMj0yat4qaAiap2ASRutLUMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvbzkwcE93eVBUSnEzaXBvQ0pxbllCSkc2MHRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb+uMA0G
CSqGSIb3DQEBCwUAA4IBAQB2PpSbYvWyVWwtQZUo2f6tC7ofUVh3vm5u3YNryNMH
hIcvVdANEUHAr5qwu8kFB3H7YlI03Rm7k+/FJmnNcLI7nvTish8u4vaaSFNAYApO
yZ3F6EQsrgPirwZ4C3Qpy3xCtSS7Olg9Tp/OXbNP+iDijFWZr07ZZQ1mM6JfiLnF
5EIktPUU6HwYtNrdkIi7MqtQZLUd7hdbFzUe+P4QkSkpLR/HknMe8y5Qi7eXn+ng
m2V6WnO0oj0cBYGdxZdifJBykY1wXpaA9/OU1GD+P6DLBfdTm4iVQl3yQp60VyeJ
ljIjZVGdfQydXwAb71yop423IKX4JQrHdjROiT0nPZ5L
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:37 2025 by rpki-client