Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa
File: ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa (raw, json)
Hash identifier: PI5B6WLLqm2nRRO9H4EAqJlM029iVGAmWpJwVurAldQ=
Subject key identifier: 65:E2:F9:6C:FD:57:4A:70:37:60:10:2E:96:4F:F9:B3:4B:17:83:06
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01941FFA64927E398F4BF1A7930D072364A4
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa
Signing time: Wed 01 Jan 2025 03:48:10 +0000
ROA not before: Wed 01 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 93.126.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:64:92:7e:39:8f:4b:f1:a7:93:0d:07:23:64:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65e2f96cfd574a703760102e964ff9b34b178306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:aa:25:6d:7b:fe:ee:66:c5:64:90:89:96:
c8:ea:80:97:c5:5e:0c:09:a1:32:41:58:ff:94:b8:
28:f4:87:88:be:65:f5:11:3c:90:e8:a2:17:c2:0a:
ab:7f:02:55:b7:6a:66:7d:0a:7c:75:53:c6:f3:96:
ca:67:93:51:96:c9:64:01:03:fd:b3:f3:7d:04:a0:
c3:84:37:ee:5a:a2:c4:fc:35:b2:1d:20:8a:21:14:
83:3e:2d:92:95:4c:f3:9e:fe:73:b5:8e:c3:bc:3d:
87:7c:4b:19:47:40:e5:c0:7e:04:fb:49:2d:81:2c:
07:f5:4e:c9:ab:39:07:fb:a0:57:44:1f:4e:72:59:
b0:6f:93:cf:3c:6f:8b:f1:91:7b:df:ec:71:5c:00:
30:fe:d3:76:9d:b6:1f:07:27:92:29:30:38:d4:ef:
85:30:86:e0:13:fd:c6:61:c4:ba:20:15:21:ae:ab:
0b:78:56:01:e5:1d:0f:ad:6d:b3:45:ad:48:01:c1:
69:38:20:fb:36:c5:69:a1:2e:27:28:b6:47:34:b5:
db:8f:e8:9b:14:24:96:76:a0:58:63:87:0c:5a:15:
ab:c9:a2:78:ca:ea:04:4d:fd:8f:b4:a9:9f:3d:ac:
d4:35:90:46:89:6a:52:6f:33:64:01:70:55:08:34:
de:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E2:F9:6C:FD:57:4A:70:37:60:10:2E:96:4F:F9:B3:4B:17:83:06
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/ZeL5bP1XSnA3YBAulk_5s0sXgwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.50.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f2:c0:82:1e:a2:61:22:03:7b:9c:a8:31:fe:64:b4:3d:79:
c8:a6:ea:ae:e8:72:9f:85:9b:5a:e2:64:f9:9e:47:f0:94:fe:
35:58:0d:c2:fc:27:6d:56:d2:72:ae:d9:4d:31:db:85:16:bd:
8d:42:d3:54:9b:7e:6c:fa:17:85:ba:8b:2d:ab:f1:13:ad:b9:
b3:7e:f8:97:36:0c:81:04:70:f4:96:a9:c8:92:5c:22:ed:71:
26:d1:22:77:f3:ec:4d:3c:55:0c:ee:d8:2f:2b:86:3d:a4:a2:
72:13:16:ff:58:39:6f:23:5a:4f:28:05:d1:35:ed:f4:7c:17:
72:a3:be:dc:2e:bc:c2:aa:77:51:54:a2:92:b3:01:aa:23:e9:
9c:b3:66:dc:cf:39:e0:c3:c0:98:12:99:d0:8e:3b:e4:e0:ca:
66:54:40:ed:3e:67:5e:1c:53:d3:bb:8e:8d:8c:06:24:b4:23:
1d:76:cc:3b:88:b0:77:4c:bf:a1:6e:56:6e:9f:7e:e3:9f:f2:
25:99:10:b6:85:66:59:52:1c:03:8a:af:19:7b:cb:58:5c:9b:
c2:50:f1:ec:7a:1d:99:28:4e:0f:11:44:59:b2:87:bf:12:93:
a8:4d:ee:d0:af:48:44:ed:ef:45:9f:bb:b8:61:03:a7:c3:dc:
3c:e5:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:51:26 2025 by rpki-client