Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/flYbOaZUTMSub8BsHu2rfjttzDE.roa
File: flYbOaZUTMSub8BsHu2rfjttzDE.roa (raw, json)
Hash identifier: HL0djvSGG70J3+l3P1WRT3IniXpCn0S8s4R5hQdBqTY=
Subject key identifier: 7E:56:1B:39:A6:54:4C:C4:AE:6F:C0:6C:1E:ED:AB:7E:3B:6D:CC:31
Certificate issuer: /CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Certificate serial: 01941FFAA1C39422D2F26B5F1ED1427F1641
Authority key identifier: 93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/flYbOaZUTMSub8BsHu2rfjttzDE.roa
Signing time: Wed 01 Jan 2025 03:48:26 +0000
ROA not before: Wed 01 Jan 2025 03:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 93.177.84.0/22 maxlen: 32
2a0d:6440::/29 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a1:c3:94:22:d2:f2:6b:5f:1e:d1:42:7f:16:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9382bdfc9b1b25002039123779ffaf2473f851b7
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e561b39a6544cc4ae6fc06c1eedab7e3b6dcc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:3c:c3:4e:18:77:a9:c3:a6:af:64:33:ef:
18:d7:0f:1c:4b:68:1d:09:f4:48:1c:cc:3e:fc:10:
0a:db:15:7b:37:54:40:31:15:74:69:8e:07:40:80:
82:33:a0:2e:54:10:84:98:ff:2e:82:c8:c3:5a:9c:
28:ab:82:27:57:2b:9c:eb:21:09:07:45:7b:37:14:
88:f1:f3:10:45:21:af:82:fc:4c:4d:a4:ab:f7:ea:
fb:97:fc:50:21:ad:5c:72:aa:4b:65:8f:9d:b0:c8:
4b:73:7e:b1:56:fa:bd:d0:b7:1c:00:6b:de:4e:55:
18:8c:91:4f:db:41:5a:79:a4:b7:80:28:02:17:a7:
3f:5b:aa:64:57:d5:4e:27:98:9e:e2:9b:b2:cf:a3:
b0:9a:c5:c1:d9:91:ec:d3:c3:f8:e8:ab:55:62:32:
58:00:7b:c4:8d:4d:0f:3e:72:e7:a0:59:e2:38:40:
4e:c4:3a:ba:67:28:b4:6c:b5:e1:41:3f:a0:38:93:
98:9d:3e:72:7a:41:d5:8e:5b:d4:cb:07:f5:13:26:
46:5c:e2:03:6a:5e:a9:26:c8:db:8e:07:68:f4:4a:
c7:39:d4:5a:93:1d:71:83:43:b6:dd:6c:15:5d:42:
00:e1:af:96:9f:12:cd:cd:fe:74:7f:56:21:85:5f:
39:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:56:1B:39:A6:54:4C:C4:AE:6F:C0:6C:1E:ED:AB:7E:3B:6D:CC:31
X509v3 Authority Key Identifier:
keyid:93:82:BD:FC:9B:1B:25:00:20:39:12:37:79:FF:AF:24:73:F8:51:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4K9_JsbJQAgORI3ef-vJHP4Ubc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/flYbOaZUTMSub8BsHu2rfjttzDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bef200-22c6-4417-a896-24bf40c1308f/1/k4K9_JsbJQAgORI3ef-vJHP4Ubc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.84.0/22
IPv6:
2a0d:6440::/29
Signature Algorithm: sha256WithRSAEncryption
34:20:63:fb:40:85:7a:9b:a5:a7:88:3f:58:86:d2:ec:4a:92:
63:e4:3a:01:08:75:7e:5d:b0:0a:64:d9:55:5a:57:87:93:2a:
09:3b:0c:10:82:16:83:50:57:89:ad:d4:da:4a:f3:22:44:70:
44:ac:a0:b3:86:46:56:91:04:29:4a:6a:ba:d9:ea:fd:19:5a:
a6:fb:6a:bd:0b:6e:da:8e:c6:6c:d2:6a:5a:74:eb:00:ee:31:
d6:46:c2:e1:1f:08:c3:29:ea:82:57:d4:7c:f7:f6:6e:75:f4:
34:90:e4:c8:3e:3e:c9:69:5b:11:a1:98:ba:f8:16:2c:a5:b2:
71:68:90:f6:d7:7d:f6:15:13:d3:a2:12:06:4a:a5:37:91:14:
f0:32:22:01:6b:9a:b2:19:01:db:5d:1e:94:28:27:fd:22:37:
27:53:9f:7d:aa:fa:ce:0c:ca:a0:62:fa:f9:1d:0e:86:0f:03:
81:ca:e6:dc:ec:7e:81:90:5f:f6:9c:60:eb:39:6f:60:88:bc:
ba:a2:62:32:a3:57:83:da:ed:ef:7f:d3:20:59:4a:74:44:6a:
55:7f:99:4c:39:9a:f5:f2:a3:43:02:42:e5:2d:1c:1c:d4:3f:
3c:12:2d:cb:34:e4:e8:4c:86:ba:8e:ae:0d:d0:8e:48:a8:fc:
d5:ea:4c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:34:58 2025 by rpki-client