Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NR5Yi1IUE2346QK0r0rSBxqMFEA.roa
File: NR5Yi1IUE2346QK0r0rSBxqMFEA.roa (raw, json)
Hash identifier: Li5PzGnnp7VocYF3MvxgX/CZd0ldFe3r2Q7CwbyV/bQ=
Subject key identifier: 35:1E:58:8B:52:14:13:6D:F8:E9:02:B4:AF:4A:D2:07:1A:8C:14:40
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0194236999479DBCC6B00BA4F4570F77DF88
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NR5Yi1IUE2346QK0r0rSBxqMFEA.roa
Signing time: Wed 01 Jan 2025 19:48:30 +0000
ROA not before: Wed 01 Jan 2025 19:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48808
IP address blocks: 93.114.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:99:47:9d:bc:c6:b0:0b:a4:f4:57:0f:77:df:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 1 19:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=351e588b5214136df8e902b4af4ad2071a8c1440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:f2:98:2b:6a:a3:d4:42:b9:b7:86:a8:1e:
01:a7:76:c0:2d:9e:85:df:3e:b2:d4:56:c6:b4:24:
ae:2a:03:8c:8c:f0:12:c0:44:2b:c9:d2:f9:fe:3f:
36:0c:86:cc:7a:2a:46:7d:e2:0e:a2:3d:67:62:ec:
2d:ea:6d:16:d9:5e:54:e0:b6:09:9e:4e:1a:39:07:
56:55:fb:b3:50:25:ed:26:a7:92:71:39:59:58:aa:
f6:c3:03:06:ec:cc:a5:98:7b:9c:e7:cf:98:67:c8:
26:49:87:3d:55:26:67:0a:70:58:e6:e9:48:2a:ff:
ff:a6:cf:16:1b:43:90:bd:a5:22:a9:6b:eb:09:0a:
91:5f:9c:9f:a6:cb:ae:46:6d:5b:82:e0:e8:d3:c9:
04:ae:72:65:eb:82:a3:61:91:2d:b7:66:a5:15:c0:
f1:02:3a:99:04:8c:db:88:22:de:14:17:59:5c:1e:
ec:f8:0b:36:cf:85:1c:ee:a1:74:10:50:f1:e7:74:
d0:70:d2:11:fc:ca:4f:93:10:75:f1:6b:c0:01:4e:
cf:26:6e:cc:9c:30:c9:c8:31:5e:f1:8b:f2:8f:f4:
57:b7:fa:b0:ea:a7:73:25:bc:20:f5:58:50:d6:f0:
3d:5b:36:e4:a8:59:52:7e:ab:ec:61:fb:e8:9c:c5:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:1E:58:8B:52:14:13:6D:F8:E9:02:B4:AF:4A:D2:07:1A:8C:14:40
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NR5Yi1IUE2346QK0r0rSBxqMFEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.186.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:86:e4:c3:cb:fd:c4:29:f0:0c:23:f3:f5:87:f7:4d:ad:73:
e3:23:ff:24:11:9c:b7:66:99:ca:41:43:73:32:84:2b:92:08:
4a:cd:c3:8f:fe:fa:a8:3e:af:d8:e3:9a:5c:92:d9:23:00:a0:
a9:9e:41:72:f5:a3:73:62:a6:0b:f3:f4:b6:85:64:ab:b4:23:
3a:eb:fe:c8:6c:fb:d5:38:4b:7a:5b:be:de:4e:4c:4b:55:fb:
43:64:d4:41:9b:fe:a5:76:00:d3:2d:8f:e7:9d:59:73:84:c8:
65:86:92:fd:d0:92:bc:39:a3:b5:c0:1a:8b:09:c8:dc:21:c8:
78:68:d7:71:24:1f:ce:46:1a:c7:15:c9:e7:50:ca:8a:e7:46:
db:13:ba:9a:f3:b8:87:3f:de:ea:50:fe:9b:f7:fd:4a:b4:3d:
62:ef:98:0a:c6:32:d4:a0:65:dc:00:45:85:1e:0a:1f:2d:7b:
79:6d:fd:54:50:c8:ab:0d:36:c5:49:a5:13:7b:34:77:58:db:
a0:bc:1c:21:df:c1:73:f5:c4:97:43:a7:01:2c:e8:64:57:3e:
de:e1:1d:29:88:de:a4:fe:a5:db:a2:cc:63:fc:65:48:2e:f8:
f3:ab:ab:71:da:6e:b8:77:38:87:b6:87:a0:98:dd:6c:99:32:
52:3b:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:15 2025 by rpki-client