Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0TfO50pSGKCDVcjVxCiBF5vH8do.roa
File: 0TfO50pSGKCDVcjVxCiBF5vH8do.roa (raw, json)
Hash identifier: q2A95u4eMQxdXz5ijrfXjCmzlOE7a1Mtj4DZQg8RaYg=
Subject key identifier: D1:37:CE:E7:4A:52:18:A0:83:55:C8:D5:C4:28:81:17:9B:C7:F1:DA
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6BE4691C1DE184280BFE627830BFD
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0TfO50pSGKCDVcjVxCiBF5vH8do.roa
Signing time: Wed 01 Jan 2025 21:47:43 +0000
ROA not before: Wed 01 Jan 2025 21:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48948
IP address blocks: 93.114.160.0/24 maxlen: 24
93.114.161.0/24 maxlen: 24
93.114.162.0/24 maxlen: 24
93.114.163.0/24 maxlen: 24
93.114.164.0/24 maxlen: 24
93.114.165.0/24 maxlen: 24
93.114.166.0/24 maxlen: 24
93.114.167.0/24 maxlen: 24
2001:4d18:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:be:46:91:c1:de:18:42:80:bf:e6:27:83:0b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d137cee74a5218a08355c8d5c42881179bc7f1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:59:a3:77:f9:5d:bc:05:2e:f3:76:fd:fb:92:
ae:d0:97:53:51:d7:98:18:fc:b1:42:8f:30:72:a0:
81:ec:d4:6d:17:92:79:45:38:4e:58:fe:9b:d7:17:
04:f6:12:68:56:47:7a:9f:22:ca:dd:5b:08:d5:92:
0e:06:b3:37:9b:99:3f:e2:5a:3b:4c:6b:51:38:25:
93:59:a9:bc:f4:e0:ea:44:cf:f0:c7:b2:a8:47:73:
fe:18:b7:03:06:74:55:96:d9:19:30:e9:68:48:4b:
bc:8c:26:bd:dc:41:47:74:f7:1b:de:3a:7b:da:ae:
00:dd:0f:33:18:87:42:b4:df:b8:ae:13:7d:9b:f2:
a7:6f:ae:f3:bc:ab:36:aa:de:ec:2c:08:a6:0e:61:
fb:cd:37:d2:b8:5f:11:a3:51:31:fb:5f:18:9f:ac:
05:02:fa:d3:89:d8:c7:4b:e1:1e:c6:4d:9d:61:dc:
ea:06:f0:8c:12:70:cf:ec:69:0e:c7:99:73:63:d1:
75:14:69:e1:4b:e3:4b:85:96:4f:f5:18:4b:51:f7:
fa:a8:a0:5c:28:d8:3b:2a:cc:a9:de:4e:98:4b:7a:
0f:7d:a0:1f:f6:63:02:5d:e0:4f:93:cf:65:3d:92:
37:4e:3a:e8:dc:d4:35:d6:58:c6:84:65:02:6c:42:
1e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:37:CE:E7:4A:52:18:A0:83:55:C8:D5:C4:28:81:17:9B:C7:F1:DA
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/0TfO50pSGKCDVcjVxCiBF5vH8do.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.160.0/21
IPv6:
2001:4d18:3::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c0:48:ea:15:85:a4:e7:b6:c7:a3:25:32:21:ac:ca:3d:7c:
40:48:ec:64:95:af:35:06:de:ae:aa:a5:af:89:db:5f:dd:3a:
02:a4:ad:23:06:66:7d:54:f5:b6:b4:df:6c:fb:7a:d0:73:11:
15:ad:53:30:cd:2c:d8:23:fc:10:5c:c8:31:1f:91:a7:33:24:
cb:61:b6:98:c5:dc:1b:16:9f:18:c2:8e:eb:8f:a7:2c:87:95:
c1:d4:f3:7c:3e:02:18:bb:c4:a8:ee:e5:a2:5a:f9:0c:22:61:
75:b5:5c:be:ea:fb:7f:d4:81:20:44:63:c6:25:b9:72:5f:5e:
0f:a5:94:c2:50:2a:87:46:1d:29:9f:66:42:97:e1:9a:92:a9:
74:36:ab:15:09:a9:a4:a6:3b:ea:07:26:67:be:63:51:7c:51:
2d:ed:18:f7:2f:e1:98:8b:9d:93:0a:7d:5b:bc:9b:f9:9a:c1:
d9:98:ee:1a:24:c8:ae:77:55:eb:09:54:e9:4b:46:9e:7a:f3:
3c:e3:c9:77:06:67:e1:5c:b8:6c:4e:fa:0b:79:34:f2:db:65:
84:91:05:da:1c:09:af:fb:ad:c9:cd:1e:f7:35:1b:8f:b5:c6:
6f:4a:32:ef:ca:07:1f:4f:86:44:a7:76:12:9a:ef:c9:d0:94:
72:48:5b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:12:24 2025 by rpki-client