Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/tVbXIsKonEYY3NQbCMNk-3GrQgw.roa
File: tVbXIsKonEYY3NQbCMNk-3GrQgw.roa (raw, json)
Hash identifier: C+asYh9Wc9bJHLCabAmtSAQY11vbwluQbmtmn754Gvc=
Subject key identifier: B5:56:D7:22:C2:A8:9C:46:18:DC:D4:1B:08:C3:64:FB:71:AB:42:0C
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019426D9F396EEE56965442742C01B40D330
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/tVbXIsKonEYY3NQbCMNk-3GrQgw.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25369
IP address blocks: 93.89.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f3:96:ee:e5:69:65:44:27:42:c0:1b:40:d3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b556d722c2a89c4618dcd41b08c364fb71ab420c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:1c:45:63:e8:a3:ba:90:58:8a:65:13:f6:
41:bf:19:43:a8:b4:2a:d7:1f:62:13:89:b0:0f:00:
25:73:3e:16:c4:2f:a3:9a:3d:b3:99:f7:9f:77:48:
2e:ed:bb:f3:a1:6c:99:06:4d:1e:67:29:f1:6b:1e:
4b:2c:e2:00:0f:46:34:fd:ae:ed:0e:ed:27:b8:4c:
67:67:d4:85:29:4e:6f:90:5f:d1:a5:bf:23:e2:b4:
32:9a:27:88:52:b7:c7:bb:4d:be:89:01:53:73:f6:
e0:bf:d1:8b:e2:26:c0:12:44:9f:a9:b6:35:4f:c9:
41:9b:96:c8:1a:48:18:24:4f:82:48:e5:ea:49:79:
a2:a0:d3:9b:23:24:a5:1c:79:55:be:54:7c:01:5a:
d6:0d:52:0a:d9:ec:8b:fe:96:e1:bd:a8:38:ae:7b:
99:b2:6d:bc:68:4d:da:76:01:aa:e0:5d:d0:fb:92:
b0:b1:8a:30:f0:ba:d5:46:c3:d6:41:d2:12:6c:88:
29:e1:50:f5:d2:49:fa:04:29:c4:14:4a:cf:19:79:
4a:4a:e6:bc:23:a3:49:8a:03:f6:03:d9:9a:b3:f4:
f7:7f:dd:73:7f:d5:6d:a4:90:c5:4f:a3:e8:5b:8f:
b8:bb:12:3c:8d:4e:be:01:d4:4a:1a:db:22:cc:9b:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:56:D7:22:C2:A8:9C:46:18:DC:D4:1B:08:C3:64:FB:71:AB:42:0C
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/tVbXIsKonEYY3NQbCMNk-3GrQgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.215.0/24
Signature Algorithm: sha256WithRSAEncryption
73:84:b1:56:56:1d:d3:61:e4:2a:40:af:6e:21:8a:4b:a8:e8:
78:20:4c:16:9d:cb:f9:cc:a9:0d:96:44:79:dc:91:f8:e9:55:
7d:e1:1e:eb:76:bc:4d:f4:3e:6d:60:cc:69:e7:7e:5c:9e:fd:
de:25:f5:56:83:bd:6e:3e:55:62:61:f5:21:70:e5:f4:9a:75:
50:50:7c:8d:e3:6b:8d:0e:ca:5b:61:ea:c2:1b:38:e9:25:31:
a9:10:6c:d4:2e:af:d4:dc:d3:09:fa:7a:19:e2:02:15:4a:3e:
41:b5:ed:5e:a0:8e:88:25:3d:f5:7f:fb:1e:22:98:c9:bd:a1:
e0:60:ad:95:e7:4b:ba:6e:83:22:01:7c:42:d2:9c:cb:b0:d5:
ab:56:f6:77:81:a0:44:87:61:ba:e6:3a:05:50:d0:3f:ad:38:
3a:0e:25:8f:d7:fb:69:47:64:e9:7f:b3:95:a1:21:87:ea:69:
25:9a:84:bd:3c:dd:e0:39:11:23:f1:2f:d3:c1:2f:4a:a5:05:
c8:9d:99:02:49:fb:a4:0b:92:c8:f5:4b:5f:95:6d:5a:67:e3:
14:54:55:fe:7c:52:64:88:7e:c8:36:e3:be:04:44:12:20:57:
ff:10:15:4a:b6:b1:c3:38:a6:9d:91:b3:ba:99:bb:ab:ae:6f:
45:54:c6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:26 2025 by rpki-client