Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/jnyRXygD_Queoo1gL7DsXgxcytY.roa
File: jnyRXygD_Queoo1gL7DsXgxcytY.roa (raw, json)
Hash identifier: 2cUVWnF2RLvMUzjPvm7wqjbGnTZmbmh9L5itHnQD17s=
Subject key identifier: 8E:7C:91:5F:28:03:FD:0B:9E:A2:8D:60:2F:B0:EC:5E:0C:5C:CA:D6
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 01857130A2AEBF0EF741960CE32F06A5B127
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/jnyRXygD_Queoo1gL7DsXgxcytY.roa
Signing time: Mon 02 Jan 2023 06:34:50 +0000
ROA not before: Mon 02 Jan 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42724
IP address blocks: 93.177.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:a2:ae:bf:0e:f7:41:96:0c:e3:2f:06:a5:b1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e7c915f2803fd0b9ea28d602fb0ec5e0c5ccad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:09:23:97:5a:c5:65:81:31:73:26:17:e4:
36:e6:a0:0c:cd:ef:15:a2:15:32:8b:37:50:58:cb:
d3:3a:bc:43:8c:fc:6f:23:76:b7:54:6b:b6:d2:1b:
2b:d4:2b:77:5d:12:3a:43:e5:40:87:b7:9d:ee:c3:
77:a4:c0:16:e6:d9:73:0f:52:00:ee:5e:9d:57:9d:
1c:20:72:b6:6e:04:63:32:64:29:11:4f:d0:b1:84:
71:3e:ba:08:33:7f:db:77:38:37:1d:23:ef:ba:c3:
67:d1:dd:e7:0c:e2:bd:98:e1:c8:49:1e:01:6c:22:
6d:73:69:b2:5c:a4:33:c3:4a:61:f7:61:b1:7f:d8:
da:88:ab:8c:99:f6:03:fc:b8:1a:6c:84:77:36:62:
ba:2a:06:88:40:6a:34:65:2b:2c:d4:3d:c5:23:45:
40:4e:61:57:69:98:88:63:ab:2d:ab:ff:a0:1d:7b:
b6:24:eb:27:68:54:f0:f7:e5:de:54:ae:55:d9:b1:
93:24:59:f5:1c:df:4d:c1:9f:8f:24:1b:13:e5:2a:
16:4f:7a:07:38:e1:9d:53:72:94:ec:0d:e2:98:53:
54:88:6c:68:27:17:d1:8c:60:d3:28:9b:a2:b3:d5:
86:69:3d:28:3c:ec:d4:53:0f:cb:8d:64:0c:91:89:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:91:5F:28:03:FD:0B:9E:A2:8D:60:2F:B0:EC:5E:0C:5C:CA:D6
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/jnyRXygD_Queoo1gL7DsXgxcytY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.100.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b3:d5:5e:fc:3d:c9:b5:08:fa:b7:a9:70:66:b4:6f:92:5a:
d9:58:a3:e4:33:c5:cd:c3:43:eb:62:68:98:b3:aa:2c:12:08:
d8:6f:2f:2c:36:ee:a1:96:f2:5b:ac:31:a1:e4:fa:80:c5:79:
c1:b2:3a:34:43:eb:53:82:3b:50:5b:fa:27:ca:e5:22:80:af:
0b:5b:56:ea:22:10:a2:a3:59:50:95:11:31:4d:04:ca:a1:b2:
57:cf:4e:df:38:38:8e:33:98:80:87:f4:f9:29:2c:c4:e6:f7:
ba:23:f6:74:58:8b:7a:7d:22:7f:2a:ce:2d:47:b8:87:49:d3:
53:f3:3f:ff:e0:1e:cf:ea:bf:16:46:3f:43:06:f8:46:48:c0:
d5:73:df:62:2c:20:cd:e6:7d:30:75:73:ac:c6:8d:d7:24:21:
13:1f:1b:5a:9b:c0:a7:e0:b3:68:10:53:26:84:5b:e5:e5:f4:
ba:19:17:e0:a7:37:67:65:49:0c:79:e8:be:73:90:5a:e8:bb:
c0:cc:6d:4e:78:0b:8a:ef:39:7f:bc:c7:cc:66:1c:dc:9a:e4:
5f:11:75:12:6b:d8:c4:c9:88:ea:12:19:35:1f:87:7e:df:7f:
d9:24:fc:6b:96:f0:af:23:ea:6e:79:f7:a0:34:e3:6d:e5:4d:
a7:68:a8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:36:25 2025 by rpki-client