Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/9i_s75RxYhA9YnsAgFsXCKDxqKo.roa
File: 9i_s75RxYhA9YnsAgFsXCKDxqKo.roa (raw, json)
Hash identifier: AREIcgz9JniX2zSWFW8rlIvL4scJZz73yn6DtvfpR6c=
Subject key identifier: F6:2F:EC:EF:94:71:62:10:3D:62:7B:00:80:5B:17:08:A0:F1:A8:AA
Certificate issuer: /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial: 01856FF058B3031D2EC36967640ED89FE387
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/9i_s75RxYhA9YnsAgFsXCKDxqKo.roa
Signing time: Mon 02 Jan 2023 00:45:00 +0000
ROA not before: Mon 02 Jan 2023 00:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60909
IP address blocks: 93.114.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:58:b3:03:1d:2e:c3:69:67:64:0e:d8:9f:e3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
Validity
Not Before: Jan 2 00:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f62fecef947162103d627b00805b1708a0f1a8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:93:37:74:b1:2e:81:45:57:9e:40:96:ce:
e1:91:a8:03:fb:21:3b:4f:2a:ee:04:08:c3:1c:57:
5c:b6:8c:c5:17:09:ec:2b:1d:5f:35:4c:c3:ac:bc:
e4:6d:6b:47:b8:1f:62:3f:31:33:82:04:8f:86:79:
8b:08:f1:6f:90:71:37:20:8b:a5:dc:34:fb:98:e6:
99:b9:c7:f2:57:d3:39:70:45:0b:69:19:4c:44:0d:
24:e8:28:b3:2d:9d:a4:cd:12:85:93:ab:3c:aa:73:
82:37:9c:e6:17:32:53:fa:20:8b:29:30:29:36:cb:
f2:31:e6:b7:49:9e:9a:bc:6d:21:bf:d2:db:0d:2e:
7c:e1:e1:cd:30:38:86:f5:5f:b8:0d:66:4d:ea:51:
fa:8c:30:0e:b7:07:17:85:c9:6e:c3:4b:4f:ff:70:
3e:67:d1:12:3f:39:13:d6:e5:df:81:d7:b7:eb:54:
7c:52:ad:b9:49:69:7b:11:37:0f:79:69:f3:1f:53:
ee:3a:00:d5:93:a7:66:a1:7b:c5:ac:b5:98:77:2e:
e8:ef:0b:60:90:fa:e2:f9:a8:f8:27:70:28:b9:cd:
d2:76:f7:87:70:fe:b1:14:99:de:c0:df:db:fa:48:
5d:6a:62:fb:d9:fd:7b:00:86:13:39:e4:e7:ab:07:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2F:EC:EF:94:71:62:10:3D:62:7B:00:80:5B:17:08:A0:F1:A8:AA
X509v3 Authority Key Identifier:
keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/9i_s75RxYhA9YnsAgFsXCKDxqKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.216.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:01:6c:ed:cf:d6:58:f2:43:65:5d:ac:45:b6:51:5a:c3:2b:
61:01:76:6a:7a:af:b9:be:01:f2:08:66:b9:78:33:a0:21:29:
3e:7e:47:ab:c9:9f:87:14:4f:ef:70:0d:98:df:a3:c9:4a:2b:
de:7d:ee:6f:3f:a5:de:cb:2e:ce:f5:c2:c3:77:08:f1:e8:c9:
23:ad:39:cd:77:0a:61:70:b4:d4:25:84:04:b9:d2:c0:c0:c1:
8f:c3:ff:6d:c5:20:db:3a:ed:ec:a8:ff:6a:46:58:0a:cf:d1:
21:12:f2:61:7c:47:d8:c2:65:39:6e:72:d8:4b:50:8e:68:13:
a7:7d:b9:d0:b9:39:a5:90:7a:dc:b2:0a:c6:d9:ae:4b:b3:64:
b5:aa:ed:36:7e:92:bc:b1:cd:ca:5a:5d:bb:c1:10:3d:7d:74:
c7:11:9b:bc:26:12:01:71:17:98:65:be:e4:a7:af:19:1a:69:
ef:5e:0d:75:24:88:02:07:1f:24:c0:57:05:f4:12:24:19:be:
82:04:41:2b:96:d3:74:29:7d:d6:1d:88:72:f0:6d:9c:71:6f:
7c:fc:a3:25:13:64:a8:a6:0d:0d:fd:a1:3b:79:e4:30:98:c4:
90:c0:33:6e:20:06:d5:84:2e:b8:f4:14:09:0f:ab:36:4c:fc:
05:1a:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:15:28 2025 by rpki-client