Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/kPZEIQD00f54ZqT4l8jT3U6aQnM.roa
File: kPZEIQD00f54ZqT4l8jT3U6aQnM.roa (raw, json)
Hash identifier: +0mivRqNtYBY/xMUeXXOLBAXk2BX+gr2q/xuFmdEA2w=
Subject key identifier: 90:F6:44:21:00:F4:D1:FE:78:66:A4:F8:97:C8:D3:DD:4E:9A:42:73
Certificate issuer: /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial: 019425FD50129623E090E221A56B6BBE4C2D
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/kPZEIQD00f54ZqT4l8jT3U6aQnM.roa
Signing time: Thu 02 Jan 2025 07:49:05 +0000
ROA not before: Thu 02 Jan 2025 07:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60909
IP address blocks: 93.114.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:50:12:96:23:e0:90:e2:21:a5:6b:6b:be:4c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
Validity
Not Before: Jan 2 07:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90f6442100f4d1fe7866a4f897c8d3dd4e9a4273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:19:b1:75:8c:b3:af:a4:de:01:f6:ce:2d:
7e:97:7d:70:48:53:07:ec:59:c4:e2:4f:fb:ed:87:
87:1f:98:53:2a:fb:ed:4f:8e:6e:8a:d3:1e:48:90:
05:a6:ee:4b:42:a5:cf:a0:fc:44:4c:6c:6a:a7:bb:
90:73:a2:20:98:cb:d5:64:d2:72:61:1a:b5:92:77:
1b:2c:ea:c8:2d:d0:2d:59:4d:a7:0b:c3:8e:e6:03:
3d:ae:79:81:d2:66:7b:05:fc:85:1b:3a:5e:7b:0b:
e7:c1:16:87:93:2f:bb:e3:e7:5f:68:6b:b0:9e:c5:
47:b2:45:53:7d:fb:f2:f8:6d:f4:7b:b9:cb:57:ac:
73:de:31:be:51:b7:6d:85:a0:ec:d1:bf:38:f5:2a:
0f:75:ab:71:94:ec:e6:ab:40:c0:4c:bd:a0:69:2f:
a6:23:fb:21:2c:95:ba:69:f1:d4:d8:04:99:96:8c:
d4:19:2d:d9:da:17:03:5b:a0:d3:a1:72:10:23:39:
85:a6:12:22:d6:03:6d:95:b1:9e:53:f3:c9:60:d0:
af:cc:0b:a8:9d:ef:6b:87:01:8b:c1:b2:b8:4c:78:
56:97:e7:f4:31:6f:89:79:f0:af:f5:cb:7c:1c:28:
c8:3c:68:30:04:62:a7:6a:cb:ee:7e:7c:04:98:1b:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F6:44:21:00:F4:D1:FE:78:66:A4:F8:97:C8:D3:DD:4E:9A:42:73
X509v3 Authority Key Identifier:
keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/kPZEIQD00f54ZqT4l8jT3U6aQnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.216.0/22
Signature Algorithm: sha256WithRSAEncryption
44:12:93:3d:42:e5:00:2c:10:d8:2d:fc:f3:36:c9:17:64:6b:
d0:ce:08:80:24:6a:2b:d3:1b:03:c4:d8:a9:e7:62:58:37:91:
5b:da:90:fd:64:5c:7c:20:38:ff:3b:bb:40:c1:78:8b:ad:f6:
f4:1b:a6:f0:26:ec:9c:1f:bf:15:d9:5f:4e:a2:11:dc:1c:31:
88:b1:ea:ee:86:22:2a:9c:23:56:cc:9a:a6:68:12:13:8d:8a:
22:fd:30:2d:08:10:83:a3:eb:ae:16:a6:cf:5e:06:6e:f3:8d:
50:b6:a7:7a:5a:34:18:02:4e:9d:fd:ef:d3:66:be:55:39:f7:
14:5f:8e:2c:48:d8:7a:2e:e4:c6:32:3d:1e:a9:67:48:f5:2b:
02:9a:54:3d:95:9f:8b:42:78:1b:05:9f:cc:d5:3c:dd:d7:25:
44:68:10:8f:8c:fc:60:c1:14:2d:90:3a:b6:e4:f5:8a:a1:87:
fb:45:b4:3d:82:dc:d4:c3:97:93:db:99:14:fc:02:b2:28:0f:
dd:39:e0:3b:45:55:4f:ec:cb:f8:94:ca:37:95:ff:96:61:d0:
62:19:08:2f:5d:f2:a0:a4:3f:e1:3a:38:79:91:dc:fb:8b:27:
6f:44:d4:13:b2:cd:3f:50:d4:7d:11:23:79:7c:72:f8:df:99:
9b:0d:35:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:51:20 2025 by rpki-client