Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/qDeEtGfZREAKrCYzj77GIoMaflI.roa
File: qDeEtGfZREAKrCYzj77GIoMaflI.roa (raw, json)
Hash identifier: jq7FvsHAOWp3lpc3C+AgAEp5Bh6v65uQo2orXopz1i8=
Subject key identifier: A8:37:84:B4:67:D9:44:40:0A:AC:26:33:8F:BE:C6:22:83:1A:7E:52
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 019428258093DCFBAD9A992FF47DF8ACA8D5
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/qDeEtGfZREAKrCYzj77GIoMaflI.roa
Signing time: Thu 02 Jan 2025 17:52:13 +0000
ROA not before: Thu 02 Jan 2025 17:52:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196615
IP address blocks: 93.175.147.0/24 maxlen: 24
2001:7fb:fd03::/48 maxlen: 48
2001:7fb:fd04::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:80:93:dc:fb:ad:9a:99:2f:f4:7d:f8:ac:a8:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 2 17:52:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a83784b467d944400aac26338fbec622831a7e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:60:5f:f1:53:f1:74:38:d6:b9:4c:77:53:
a2:ad:12:56:dc:bd:bd:69:8a:d8:20:3f:39:c0:00:
79:c3:ac:49:6f:5f:20:4e:8f:13:2d:44:9b:b0:d7:
1b:ea:fb:7a:4b:95:1e:c4:fb:fd:28:fd:e7:92:a8:
11:bb:e8:fe:9b:5c:a7:cd:ec:fc:be:d4:f9:23:33:
47:f9:71:13:c1:78:5f:cb:3d:eb:92:0d:cc:a0:03:
76:79:e9:6d:c9:19:97:f2:35:d1:ac:95:8c:e3:bb:
56:ee:96:9b:a0:e5:e4:1e:e9:16:64:b8:be:29:e2:
7f:d1:b4:75:5f:70:ae:3c:2d:e8:85:08:cf:ad:7f:
20:52:98:09:1e:99:e7:54:cc:d1:35:55:6c:60:d1:
be:b2:fe:21:6b:1d:f1:4f:ce:14:03:0c:85:63:c6:
9a:24:31:47:9c:27:e4:3d:1b:61:b2:92:21:16:3a:
6b:05:da:5d:fd:37:53:09:74:be:7c:25:03:ee:dd:
a1:da:5d:ce:ce:b6:dc:a3:15:19:74:f5:04:ce:cf:
75:cb:f5:b6:7c:0b:7c:cc:c6:9b:62:67:7d:38:fe:
c3:3c:cf:35:d4:f6:ce:3c:97:c6:af:1a:27:c3:37:
c9:ad:0e:8d:b8:e3:a8:60:ef:f8:32:6a:af:ba:36:
90:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:37:84:B4:67:D9:44:40:0A:AC:26:33:8F:BE:C6:22:83:1A:7E:52
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/qDeEtGfZREAKrCYzj77GIoMaflI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.147.0/24
IPv6:
2001:7fb:fd03::-2001:7fb:fd04:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6e:84:8e:a4:62:5c:e1:eb:dc:d5:07:a4:2d:bf:4f:09:38:32:
ca:cd:b5:79:25:a8:7a:2c:11:8a:63:56:bf:f9:50:fd:13:dd:
16:45:34:62:e1:9d:a5:a6:a9:88:43:0a:68:8a:17:90:b4:e3:
f6:e8:8b:7c:a6:af:c3:3f:3e:df:76:f8:b2:2e:c1:6d:7c:eb:
c1:93:c6:de:e5:0e:20:ac:09:ef:ab:53:31:93:10:59:b5:6c:
5a:f1:02:07:82:d2:a6:3f:ac:01:f6:42:bc:2d:e2:18:61:9a:
2e:61:67:3e:1a:47:04:be:93:2b:34:e6:f9:b5:d3:ea:f1:55:
d8:5a:f2:ed:37:33:a5:b7:70:5b:0e:d7:7f:b1:3d:2a:63:1d:
37:5e:f8:c0:9d:f7:31:bb:b0:64:41:b2:db:c7:51:d3:08:db:
fa:e6:da:f5:70:c8:43:79:e2:5e:78:39:ab:a3:75:80:c7:10:
f0:ba:2e:c5:7f:46:fc:73:79:97:e3:fa:fb:b4:a8:27:0f:ab:
7e:32:f7:04:7e:57:cd:55:07:0c:27:c0:12:e9:2d:e4:39:68:
24:e2:ab:60:63:db:94:64:94:8e:25:1a:6a:bf:c8:c3:09:10:
40:6c:2a:27:77:24:d6:8b:b5:df:09:79:3c:63:11:c0:4e:55:
f2:3a:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:18:51 2025 by rpki-client