Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MjG8395d2CN_YLivp4U4kXIkDn4.roa
File: MjG8395d2CN_YLivp4U4kXIkDn4.roa (raw, json)
Hash identifier: Rw0GWVfci+4uxqsfhicC3jN932/KzB6qmLYNqjohRII=
Subject key identifier: 32:31:BC:DF:DE:5D:D8:23:7F:60:B8:AF:A7:85:38:91:72:24:0E:7E
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01942369A5D6D1E1983265CFBB8703CC6A8C
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MjG8395d2CN_YLivp4U4kXIkDn4.roa
Signing time: Wed 01 Jan 2025 19:48:33 +0000
ROA not before: Wed 01 Jan 2025 19:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57392
IP address blocks: 93.113.24.0/24 maxlen: 24
93.114.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a5:d6:d1:e1:98:32:65:cf:bb:87:03:cc:6a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3231bcdfde5dd8237f60b8afa785389172240e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:29:55:2a:42:59:57:11:66:b4:db:2a:14:9c:
ae:ec:c9:a1:50:63:57:a7:86:d1:3d:23:f9:b2:2f:
b9:1f:94:59:ed:97:00:1a:d6:6d:46:8f:1d:1d:5d:
d3:a6:9c:a7:13:b4:c0:32:2c:2b:11:84:36:a3:a6:
e8:97:a5:53:71:45:66:40:b7:b5:7b:87:6f:94:c9:
a5:d2:d7:dc:a7:42:79:8f:bb:52:80:4e:50:6d:9b:
a8:b1:ed:c7:15:9d:f8:51:db:c3:fa:85:31:99:0d:
bb:d3:4d:a7:09:be:ef:f2:b9:34:a4:51:9a:48:7d:
d4:ba:3a:91:1a:f9:ae:af:27:e4:96:61:bc:dd:57:
16:b0:94:c9:12:ad:57:42:51:f8:ff:d9:ee:1e:2c:
93:0b:27:3e:34:cf:4b:7c:12:53:c7:9b:c2:4c:99:
be:1a:21:ed:05:11:90:99:e9:fd:4d:23:7e:06:a8:
1b:81:72:82:49:8b:3a:5f:22:0a:f6:13:df:dc:ec:
9b:50:bf:90:b9:38:25:23:45:ae:c3:b8:40:fe:3f:
f6:0f:ae:1c:db:60:1b:73:b5:49:3f:ce:f9:85:51:
23:d7:d2:ee:17:de:0a:a1:65:87:19:65:04:d0:ed:
48:ec:24:a5:d3:8c:2b:bd:e3:70:94:a6:d0:a0:1a:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:31:BC:DF:DE:5D:D8:23:7F:60:B8:AF:A7:85:38:91:72:24:0E:7E
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/MjG8395d2CN_YLivp4U4kXIkDn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.24.0/24
93.114.50.0/24
Signature Algorithm: sha256WithRSAEncryption
e8:02:68:ae:22:13:55:6d:05:fc:cc:4c:11:a6:d7:3f:04:0f:
83:70:e5:71:8a:4c:12:97:14:28:9e:12:c6:71:8b:83:f0:51:
31:aa:bd:1d:87:f0:10:36:23:c7:4d:51:22:f9:67:d9:9e:83:
d5:26:24:d5:69:72:1a:d0:6d:f1:10:3b:9f:bd:2b:6a:67:a7:
d1:8b:af:51:19:ae:d7:17:7f:d4:c6:50:12:03:58:6a:fd:b1:
90:72:db:3b:3a:ab:1b:0d:6d:47:23:a0:65:38:6d:54:b4:b2:
de:37:59:46:69:08:be:19:e3:b6:4d:c6:cc:ad:4b:ea:93:1b:
75:db:9f:28:c3:1a:b7:4e:88:15:5a:7f:7d:eb:fc:e4:ef:4c:
28:c3:75:33:f4:65:b4:e4:17:77:0e:f6:13:cc:8b:b5:fd:8d:
d2:04:f1:22:0f:51:a4:8c:43:ee:8b:61:99:5c:76:12:41:02:
97:62:9e:cd:fb:b6:94:ff:eb:af:65:a7:10:d5:5e:8d:e7:9d:
a1:84:f9:8f:da:15:c7:56:41:df:20:c2:1e:2e:14:49:1c:ca:
2f:e5:bc:d0:24:cc:9e:d8:d6:f7:ce:72:c0:49:2d:0a:4b:ed:
58:71:1a:f7:fe:2a:40:a4:7a:88:29:f5:9b:69:c3:08:0a:5b:
eb:7c:83:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:33 2025 by rpki-client