Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/9UM8FSmqX3ypfyYRITgcfoo3MII.roa
File: 9UM8FSmqX3ypfyYRITgcfoo3MII.roa (raw, json)
Hash identifier: 7AYEVJ44R6iucLCGLujqdcTtJ2KCtAGBgl7HYJmR2TU=
Subject key identifier: F5:43:3C:15:29:AA:5F:7C:A9:7F:26:11:21:38:1C:7E:8A:37:30:82
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019224418F28189776E4D90EE931A903D13F
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/9UM8FSmqX3ypfyYRITgcfoo3MII.roa
Signing time: Tue 24 Sep 2024 13:38:49 +0000
ROA not before: Tue 24 Sep 2024 13:38:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 93.119.232.0/24 maxlen: 24
188.208.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:24:41:8f:28:18:97:76:e4:d9:0e:e9:31:a9:03:d1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Sep 24 13:38:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5433c1529aa5f7ca97f261121381c7e8a373082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:83:2d:8e:da:82:06:b2:fe:13:c0:62:d7:20:
be:ed:93:35:67:f3:15:28:a7:36:fb:f6:84:f0:a4:
73:fd:29:82:e6:f5:a0:4f:be:23:20:a9:0f:36:39:
9d:e6:f5:20:4c:58:e8:e3:69:00:f2:3b:2f:ce:b7:
68:3f:84:39:74:91:b3:e0:30:19:47:e9:b5:f4:01:
e4:d3:c1:f1:50:63:b5:75:a8:87:17:e1:a0:e1:8a:
db:bc:b0:30:98:7d:81:04:17:1a:ca:bd:1e:f7:a3:
a6:67:24:39:e6:2b:96:35:aa:e6:8b:6a:5c:34:f0:
2b:75:95:87:2f:7c:4d:82:6f:ad:f7:6a:87:ce:8d:
05:2e:b3:ba:b2:45:3f:eb:52:b1:72:cc:eb:cc:57:
0f:cc:31:38:96:1d:92:b9:26:73:e3:c6:4f:f4:2b:
d3:75:98:31:95:08:c5:d3:b0:04:7f:fa:3f:1f:8a:
a5:4b:81:d2:32:91:89:08:eb:26:40:27:f6:67:12:
4d:02:41:93:a4:d2:24:ed:ea:48:a0:91:d6:cf:ad:
25:34:72:2d:7d:cc:aa:90:cb:7c:28:93:47:94:fe:
21:56:a4:5a:bf:67:82:e9:9b:51:0f:cf:97:c9:d4:
bf:a7:e7:26:15:dd:2f:3f:e5:9d:72:74:42:2e:b8:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:43:3C:15:29:AA:5F:7C:A9:7F:26:11:21:38:1C:7E:8A:37:30:82
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/9UM8FSmqX3ypfyYRITgcfoo3MII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.232.0/24
188.208.124.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:13:0d:a5:ef:f2:c5:ab:b2:58:5f:3a:25:c4:a8:b5:26:e9:
bf:53:79:03:f5:70:9a:c4:72:fa:5f:1c:25:d5:e8:15:6a:1c:
ca:47:54:f3:6c:79:d5:b0:fb:92:e0:a0:43:e8:12:58:97:9d:
a9:02:6f:5d:2b:21:10:64:83:40:14:ab:05:ae:69:43:1d:7a:
b4:59:d0:53:b0:6e:48:90:6d:8e:bd:1b:d4:ef:b9:24:1c:f3:
80:3a:7a:1a:fc:c6:83:39:25:19:03:21:9f:d3:2e:62:51:ee:
0a:77:05:75:9b:a2:1e:8c:74:93:02:7e:b8:6b:35:01:c0:8f:
8b:f1:e2:5c:1b:d9:f5:20:40:fc:bf:e9:8d:60:5c:8b:59:21:
49:5f:d9:d2:fe:46:a6:be:4b:f3:bd:f3:f3:1c:30:40:10:79:
01:aa:39:a6:72:fd:49:7c:a3:17:d1:15:35:fa:17:42:51:c4:
bc:ad:a3:73:03:65:a9:83:8e:ad:d0:8c:bc:c8:0e:bc:72:51:
63:61:5b:63:e6:aa:2f:ef:87:24:73:94:9d:06:6e:dd:06:07:
a2:5d:28:81:28:f6:ba:6b:b3:3f:d2:b1:1e:dc:b9:77:27:28:
d5:5f:97:79:98:7e:76:99:2e:46:c6:f5:64:ea:98:b8:68:57:
66:80:25:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:40:49 2025 by rpki-client