Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa
File: s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa (raw, json)
Hash identifier: oInMskbU1ysq45NZWBKPFPJeOmbD2WauFvK9W3eBwaY=
Subject key identifier: B3:B4:B0:62:C4:31:C3:49:50:CB:53:82:53:20:DC:3C:0E:67:46:C4
Certificate issuer: /CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Certificate serial: 019498298921EAEC82E082331E875D87DEA7
Authority key identifier: A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa
Signing time: Fri 24 Jan 2025 11:54:06 +0000
ROA not before: Fri 24 Jan 2025 11:54:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 93.115.103.0/24 maxlen: 24
185.253.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:29:89:21:ea:ec:82:e0:82:33:1e:87:5d:87:de:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cc44d7f1d0dc0a5abf2776495b61de4819925f
Validity
Not Before: Jan 24 11:54:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3b4b062c431c34950cb53825320dc3c0e6746c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:51:a3:e7:5b:45:fa:fe:e0:0d:42:86:40:24:
5c:2b:33:d8:b5:ce:ea:df:6d:2c:b5:0c:ff:13:41:
53:f6:58:3c:82:58:3c:50:3a:41:1f:88:4f:be:a2:
0b:49:a7:5d:a8:97:d1:21:48:25:24:c3:d3:bf:b7:
03:fe:ef:05:c4:02:a0:a4:82:3a:df:b0:b3:32:c1:
d8:98:eb:3d:1c:d2:4d:81:cd:3a:20:8a:5a:42:d8:
65:8b:27:ea:ac:d1:bf:9d:f2:e2:c8:fb:2f:d8:59:
dc:ac:f1:20:40:99:5a:49:41:aa:8d:56:3a:24:52:
17:94:80:79:bc:5f:ee:67:ae:6a:51:f3:a0:26:c7:
e0:c5:eb:5d:3c:d9:a6:b4:03:2c:e2:23:3b:dd:7d:
84:19:3d:21:e0:ad:10:40:d6:ef:e1:ef:fd:c3:33:
6a:87:2a:5a:74:b6:a2:81:27:c3:de:ee:12:ad:76:
27:96:c3:46:72:17:58:13:a5:6e:91:1d:f3:dd:a9:
91:61:ee:d6:f9:92:e7:46:01:23:2b:da:13:ca:05:
f0:65:97:bc:a5:66:09:f8:c9:47:99:78:37:4f:1b:
c5:8e:04:1d:18:0e:69:54:a2:5e:30:b4:ba:c0:9a:
99:23:f7:e1:f9:82:0d:88:9c:80:a5:de:33:02:89:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B4:B0:62:C4:31:C3:49:50:CB:53:82:53:20:DC:3C:0E:67:46:C4
X509v3 Authority Key Identifier:
keyid:A9:CC:44:D7:F1:D0:DC:0A:5A:BF:27:76:49:5B:61:DE:48:19:92:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcxE1_HQ3Apavyd2SVth3kgZkl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/s7SwYsQxw0lQy1OCUyDcPA5nRsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/dab867-a579-4a95-aef7-1617f38a6dfc/1/qcxE1_HQ3Apavyd2SVth3kgZkl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.103.0/24
185.253.9.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:7f:ce:5a:67:0f:71:a1:95:83:ba:05:4a:b1:5c:5e:6b:d9:
5f:d3:d8:fb:15:66:aa:a8:9b:90:69:7d:e7:22:51:96:99:63:
70:21:02:93:82:03:9e:5b:7a:f4:55:7a:bc:ae:3d:ef:b9:6b:
cc:f0:e5:ae:e4:1b:b9:d5:38:49:12:79:9f:e9:fd:ff:be:18:
41:0d:a3:6f:ac:75:47:43:53:bb:93:03:0d:11:5d:e8:60:16:
12:6a:1c:28:89:b2:7b:80:03:d1:c3:b1:07:81:7e:24:3a:c9:
45:dc:71:bc:e5:65:4d:22:94:59:89:06:64:a5:ac:73:2e:b5:
1a:d7:63:4c:c0:66:94:31:ff:bc:cf:a5:aa:51:ea:af:72:49:
96:e2:8c:5e:38:64:7b:3a:7a:47:73:78:6c:24:df:80:45:14:
f2:1b:49:3e:6e:35:e9:4b:ae:ce:44:45:21:a3:51:4f:84:44:
d1:65:46:ff:24:7e:2e:99:36:02:05:5e:7f:72:13:2d:16:77:
87:44:eb:47:6b:07:13:61:94:22:4e:aa:c5:f6:68:2b:20:a1:
b4:be:50:7c:81:4f:6b:96:96:4a:cd:9b:d4:34:ab:6c:40:31:
50:b0:92:b7:ca:f6:fb:98:93:25:5a:63:d7:ec:92:f8:c6:72:
6c:f9:16:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:32:42 2025 by rpki-client