Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa
File: ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa (raw, json)
Hash identifier: xlJGrnQ3RAzHyUU8Evq1z4uBR31JBslascWxforueJ0=
Subject key identifier: 66:92:0E:C7:9F:F0:50:B4:3A:7E:4F:EE:DC:5A:16:CF:B2:84:D1:84
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0194266C39D8EFFE3BB67197A830814067C4
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7018
IP address blocks: 93.114.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:39:d8:ef:fe:3b:b6:71:97:a8:30:81:40:67:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66920ec79ff050b43a7e4feedc5a16cfb284d184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:94:2a:db:31:25:fc:9b:d1:60:ea:e1:49:40:
02:59:1f:c5:d0:15:b0:d5:d4:00:21:bf:d1:f4:5a:
e4:c9:b7:9e:83:38:e9:d7:e6:83:45:4f:77:e4:c3:
3b:e4:9e:de:64:59:ce:7d:96:ea:81:65:e4:cd:0a:
67:d7:a7:f6:ed:96:a1:e5:0e:f6:7c:02:e2:ee:c2:
00:cf:a7:a3:eb:54:51:3a:28:f5:bb:49:00:43:8b:
7c:9c:4c:18:6d:13:25:60:9b:cc:38:61:0a:55:8c:
03:27:ee:af:89:ee:96:2a:68:6d:3a:12:44:25:ef:
fc:15:aa:e2:ee:48:75:0b:05:1a:8d:26:0c:48:9a:
10:a3:85:07:ad:3a:b7:f1:36:94:52:8b:c5:62:62:
86:5b:03:c5:97:32:f7:9d:96:85:39:9c:4f:1a:51:
6b:6f:9e:bc:c5:db:86:31:73:73:64:78:e3:86:48:
cb:62:21:f2:df:ec:24:5d:50:f3:ee:a4:2e:1b:f9:
7c:b6:c7:11:6a:da:b5:4b:af:86:be:1a:67:97:b6:
6e:14:92:81:52:c4:ea:3c:f7:e1:4a:06:94:cb:2b:
ba:f8:fd:9d:db:57:3c:4c:18:19:8d:80:e3:ff:c1:
24:62:39:da:17:9f:92:b2:59:61:0a:b6:c1:75:a7:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:92:0E:C7:9F:F0:50:B4:3A:7E:4F:EE:DC:5A:16:CF:B2:84:D1:84
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/ZpIOx5_wULQ6fk_u3FoWz7KE0YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.54.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f9:3b:a7:7e:15:0b:29:2a:9f:db:0c:16:d2:f2:5b:64:2f:
fc:f2:9a:af:1f:a6:34:4c:24:fb:02:d8:51:6f:57:8f:ef:1f:
92:6a:47:ad:82:c7:0f:3e:1e:3b:4a:02:34:38:12:5b:79:af:
10:9b:86:97:66:f7:84:07:f5:28:39:c1:9f:11:61:cd:c0:ed:
9d:d5:25:3f:6f:bc:5e:b9:0d:ca:5f:c7:3b:c3:af:fb:3a:cd:
a2:c0:ab:d7:98:9c:2c:88:71:30:4f:03:dc:c0:c0:9a:9d:88:
a2:72:34:8e:73:89:35:d6:09:8d:d8:72:22:cf:06:00:4f:51:
e6:10:54:7a:0b:d4:40:64:a3:32:15:84:b5:53:40:09:47:3e:
43:0c:66:90:f7:73:3e:05:f6:5f:6f:10:e4:69:ec:6e:ac:a1:
c0:2e:36:38:97:99:06:e6:03:ba:b8:37:e8:eb:ad:8a:b8:19:
d6:79:43:f2:c2:a9:54:80:bb:5d:15:8f:33:20:fd:4e:c8:ea:
d2:0f:f1:a1:6a:bd:34:5e:64:92:98:ad:f2:af:13:61:81:98:
b0:ca:49:a1:1e:f1:12:86:21:7e:a5:dd:25:f0:b2:c0:80:91:
07:fa:4f:25:c4:af:ca:9c:5f:c9:c0:bd:a9:d5:2d:ec:1f:30:
1f:11:b7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:55:04 2025 by rpki-client