Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/9fGQxsuW9o57MuSnTQw97jZkBOE.roa
File: 9fGQxsuW9o57MuSnTQw97jZkBOE.roa (raw, json)
Hash identifier: YnRNIOwoiTRXwdxivY6tYKVNEPgEv0Qon+zlyQpniFM=
Subject key identifier: F5:F1:90:C6:CB:96:F6:8E:7B:32:E4:A7:4D:0C:3D:EE:36:64:04:E1
Certificate issuer: /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial: 0195805D1A5D0DF653F25CC1A92BC677C3B6
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/9fGQxsuW9o57MuSnTQw97jZkBOE.roa
Signing time: Mon 10 Mar 2025 14:02:19 +0000
ROA not before: Mon 10 Mar 2025 14:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 212.93.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:5d:1a:5d:0d:f6:53:f2:5c:c1:a9:2b:c6:77:c3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Validity
Not Before: Mar 10 14:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5f190c6cb96f68e7b32e4a74d0c3dee366404e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:6d:60:e4:a7:3f:13:62:c9:ca:c8:83:5e:
1e:e8:f4:4b:a0:24:0c:bd:4b:38:71:2f:3e:d4:34:
45:39:8f:a2:74:b9:09:66:19:ff:ee:0f:69:d9:cf:
32:dc:b0:e7:5e:be:b1:f1:6b:98:61:d8:ef:1f:ea:
63:8f:a9:6f:79:d5:7a:20:20:a2:c4:7f:71:49:69:
3d:93:a3:3c:2f:df:7f:91:a5:86:b0:8a:77:db:20:
a4:a5:50:e3:7e:d7:bf:29:4e:2a:5d:d0:a5:1e:5e:
cd:a9:2f:de:ac:99:4c:a8:c8:64:43:e6:f3:e0:38:
0a:26:93:41:15:29:99:13:c9:60:1f:33:0d:12:90:
28:bb:32:5f:b0:74:7c:85:ca:02:0e:09:2a:20:7e:
55:57:71:09:83:ec:6d:88:56:6d:9a:25:f1:1b:4d:
20:97:72:ac:ce:e0:27:05:c2:e4:de:da:ab:96:c1:
88:63:08:8b:b3:e3:91:ed:d6:c1:26:06:41:92:47:
cb:fb:5a:ce:70:5b:6a:3c:26:06:cc:0a:44:16:ec:
95:37:27:e0:f9:b4:cd:ea:8b:59:f8:00:15:5e:e4:
a8:c6:11:b0:89:d2:a3:e6:f8:e5:9f:06:5c:19:de:
b9:6a:c4:90:dd:76:6a:b8:d2:3a:3f:e6:38:15:d3:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F1:90:C6:CB:96:F6:8E:7B:32:E4:A7:4D:0C:3D:EE:36:64:04:E1
X509v3 Authority Key Identifier:
keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/9fGQxsuW9o57MuSnTQw97jZkBOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.93.57.0/24
Signature Algorithm: sha256WithRSAEncryption
84:e0:37:71:93:34:a7:f1:4f:47:33:5e:f9:83:53:62:f4:4e:
15:2b:78:59:34:8c:da:91:e6:d5:6c:b3:3d:13:8f:56:5a:99:
a9:52:56:61:d3:75:02:08:53:4b:20:0a:ba:14:e7:96:60:24:
47:5d:05:2e:e0:bb:e1:9a:1c:3d:8e:e8:64:4c:8c:2c:a8:3b:
48:82:54:42:3d:85:17:6f:37:97:0a:44:9d:32:a8:05:b1:66:
7a:98:69:12:77:5b:e1:3f:f0:d2:c3:3d:d5:ef:d3:5e:6c:ab:
02:be:81:47:2e:29:91:76:a1:f9:2e:76:98:36:3e:89:16:9a:
f3:6e:ad:94:b9:de:4b:57:a7:66:ec:45:30:8c:32:94:1e:f4:
98:65:9c:98:82:a9:76:2d:eb:bb:54:55:69:fb:2a:3f:86:e5:
27:04:60:7f:e2:ea:1c:78:d1:a7:fc:84:4d:6f:ae:c9:09:7a:
cd:17:2c:ea:e6:1d:e0:77:88:56:47:47:2c:9b:6a:77:28:89:
5a:e1:35:5a:45:62:7d:1e:34:56:cb:e7:e5:68:bd:e2:05:a7:
d6:c7:97:7d:5c:01:2f:57:22:02:1c:ed:7a:7f:91:a1:92:d6:
91:c4:b8:c9:e7:86:72:fd:89:74:b4:a7:5e:b5:5a:ea:2d:05:
c2:05:22:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:41 2025 by rpki-client