Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/lRZKBrMZFoRgBAUx3wR7ehae3xY.roa
File: lRZKBrMZFoRgBAUx3wR7ehae3xY.roa (raw, json)
Hash identifier: f2Kg+/I4iWaTYch2NqYc5CQYPpgK7Qr1Ua8rvE+EK4k=
Subject key identifier: 95:16:4A:06:B3:19:16:84:60:04:05:31:DF:04:7B:7A:16:9E:DF:16
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 019421B1D92A0D4609A37210EAF44BC01A8B
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/lRZKBrMZFoRgBAUx3wR7ehae3xY.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48813
IP address blocks: 93.115.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d9:2a:0d:46:09:a3:72:10:ea:f4:4b:c0:1a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95164a06b319168460040531df047b7a169edf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:4e:6e:fb:47:de:51:9b:cf:9b:f4:7b:cd:
f4:02:dc:df:a4:73:d4:1d:6e:f5:7e:c1:f0:98:b3:
75:65:94:dc:7d:c3:fa:e7:dc:f1:92:6b:ce:4b:0d:
c1:86:63:df:fc:92:60:4d:12:a5:dd:55:d1:56:e1:
80:dd:ee:21:62:58:bd:c1:2e:bd:3f:ff:07:99:31:
60:2e:b3:84:55:5d:3c:18:37:1f:08:d7:6a:bd:7f:
57:c6:fe:4f:08:23:d6:ef:05:09:c2:71:fa:91:12:
c0:0b:58:5c:25:15:00:2e:d9:02:68:b6:30:8d:c8:
f7:ec:7e:7f:04:69:05:1e:09:f3:47:cc:27:d0:4f:
f0:61:cc:a3:5e:ec:71:77:02:c6:08:1a:33:fd:ca:
6c:5e:87:ce:1f:20:eb:9d:2f:c1:af:e0:6b:7c:2e:
15:eb:e5:75:51:cb:a0:cb:55:f1:1d:74:01:c6:99:
ac:b7:25:db:b2:6a:30:3d:9b:6a:44:f8:e2:f1:a4:
eb:4c:7c:72:f5:63:20:9a:28:a1:8e:7c:c3:4e:d9:
e9:0d:01:2e:fe:25:29:a1:07:2d:d1:fa:cf:45:aa:
7e:2a:39:bc:1c:d8:1a:97:ed:4c:e6:10:bd:b6:15:
15:45:bf:3f:e2:a1:f6:8d:cd:ab:12:6d:be:e2:22:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:16:4A:06:B3:19:16:84:60:04:05:31:DF:04:7B:7A:16:9E:DF:16
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/lRZKBrMZFoRgBAUx3wR7ehae3xY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.103.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:95:8a:57:95:06:4e:17:1a:1e:04:5a:19:10:e0:d8:59:35:
8c:2d:65:b6:5b:5a:e4:19:c1:71:4d:6e:a8:90:14:d3:35:38:
ac:7e:57:0b:50:77:6c:67:6f:b3:18:85:68:cf:6d:43:a4:88:
7d:d9:dc:80:bb:10:0d:85:82:7b:97:e3:ab:ad:58:36:df:c6:
fc:57:3d:fc:da:58:05:60:90:ef:7c:d3:0a:0d:be:f1:35:8c:
9c:18:0c:9a:35:93:1d:a1:9b:c1:53:f6:1b:ff:eb:d7:5d:af:
dc:71:7a:a0:09:65:af:cc:7a:2f:67:0b:0f:2a:41:c5:37:de:
fb:c8:ba:24:cc:92:18:41:92:b8:e5:c9:86:73:b2:ec:ec:fa:
85:4a:ab:61:c6:87:6a:46:8d:ad:53:64:76:44:97:87:36:0a:
2c:03:23:22:03:98:49:be:fa:79:c0:9f:d3:bc:b4:af:1d:2b:
0f:11:da:5c:40:d8:2e:e8:c1:06:15:82:e8:a0:c6:ef:b3:07:
d8:7f:d7:dd:0b:96:0f:9f:24:89:21:d2:3b:e4:f1:82:a1:aa:
cd:89:93:c3:14:75:18:e9:7f:3a:43:f2:cb:a3:a0:dd:4f:be:
59:09:d3:75:21:77:33:b3:53:6e:30:d0:a3:9f:93:0f:0a:a3:
64:94:92:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:16 2025 by rpki-client