Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/HdSf7jxZaH01dUDGuwQ5_CAc8SM.roa
File: HdSf7jxZaH01dUDGuwQ5_CAc8SM.roa (raw, json)
Hash identifier: vOZ90+a3LR4dhFjRdZIzUR1sgVMd52zRpkbxFOcgn4g=
Subject key identifier: 1D:D4:9F:EE:3C:59:68:7D:35:75:40:C6:BB:04:39:FC:20:1C:F1:23
Certificate issuer: /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Certificate serial: 019425215B19437FC3498898F3D6BF1FBB5B
Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/HdSf7jxZaH01dUDGuwQ5_CAc8SM.roa
Signing time: Thu 02 Jan 2025 03:48:50 +0000
ROA not before: Thu 02 Jan 2025 03:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201120
IP address blocks: 93.187.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:5b:19:43:7f:c3:49:88:98:f3:d6:bf:1f:bb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Validity
Not Before: Jan 2 03:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1dd49fee3c59687d357540c6bb0439fc201cf123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6a:39:b4:24:12:a7:5f:f1:ef:f4:3f:29:f0:
64:64:34:29:b6:b3:b7:59:5a:bb:a0:b0:d3:d0:b4:
4a:63:9e:78:ca:d1:41:7b:08:23:58:23:32:4b:75:
5b:62:81:1c:0d:64:f2:12:8e:7b:55:0f:00:48:17:
25:8f:0f:98:54:43:26:de:7e:56:a0:8c:d7:72:4e:
3e:77:93:0b:ae:44:29:66:c3:7c:0f:30:da:95:a8:
27:1b:56:68:ec:2b:44:b2:83:46:bf:99:c2:ae:64:
fc:d7:ce:63:87:b2:5a:d3:3a:d0:27:8f:b8:40:8e:
fd:78:cf:bd:44:65:52:ee:23:49:4f:48:ef:18:e5:
02:c8:14:ac:54:ac:66:73:cb:b0:b7:ab:01:20:66:
8c:4c:f9:37:36:31:2d:bd:9c:20:ab:38:83:30:2f:
ae:04:59:86:96:02:dc:09:23:a0:17:ef:c4:52:ad:
d0:29:6f:1d:e5:be:4e:e1:a0:ac:27:8c:d9:aa:01:
87:20:b9:90:ae:bb:82:25:a8:2d:d0:37:c9:f6:f1:
a8:56:5d:cb:f4:4f:4b:99:6b:f2:75:8d:fe:40:a5:
68:5e:5e:1b:54:66:46:e7:2c:e7:7c:aa:2a:fa:1d:
b3:b1:ca:ef:93:74:f8:10:af:bf:3d:48:10:27:4a:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:9F:EE:3C:59:68:7D:35:75:40:C6:BB:04:39:FC:20:1C:F1:23
X509v3 Authority Key Identifier:
keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/HdSf7jxZaH01dUDGuwQ5_CAc8SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.65.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ae:ca:c8:39:20:a3:e8:cf:af:1c:06:df:77:4e:bc:72:a1:
ae:08:0e:b0:d8:65:af:89:d8:5c:e0:f8:b4:18:28:00:2e:6f:
4a:c0:bc:5b:09:05:b7:03:d1:a7:d6:4d:62:83:e2:36:b4:5f:
53:d2:12:a1:e6:28:ed:8c:1a:ee:19:26:96:2a:4c:5e:23:1d:
53:54:c7:b4:92:d7:7d:8a:ad:3d:f4:88:4a:b4:06:0c:25:13:
67:8b:c4:8e:fa:69:5c:ab:c0:09:8e:b3:41:22:5a:e6:89:26:
69:2a:57:f1:64:be:fe:91:74:95:3a:1a:16:07:dc:ee:a3:22:
2d:d2:26:51:f7:9a:2b:db:1f:f5:bb:6a:49:4c:7d:64:48:4e:
06:36:c2:0f:0c:8d:e5:1f:37:c5:b4:9a:c9:2d:97:06:98:fe:
43:3f:28:7f:3c:9f:90:d2:77:97:9e:58:c7:20:c8:5a:d5:87:
ff:c2:7f:cb:46:f3:89:a0:39:17:75:82:d4:c4:5d:36:37:55:
5c:a8:81:72:e5:41:08:f4:1d:cb:57:c4:3a:ef:9a:e9:d9:d4:
3a:57:74:66:39:62:6f:68:14:c9:0f:44:cf:8d:6c:72:e8:e4:
1a:79:c1:5a:51:56:6c:22:fc:90:01:7d:7e:72:4b:1e:50:ea:
3f:d0:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:37 2025 by rpki-client