Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2aC0yK1R3S_bQSZCY3NXZGS1cb0.roa
File: 2aC0yK1R3S_bQSZCY3NXZGS1cb0.roa (raw, json)
Hash identifier: FDSSRLiUZU+U8vwLxDDW2w/LX9+tSIISqC+kOFDnsrU=
Subject key identifier: D9:A0:B4:C8:AD:51:DD:2F:DB:41:26:42:63:73:57:64:64:B5:71:BD
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6CF066125F7C6066EF088DFE0BEFD
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2aC0yK1R3S_bQSZCY3NXZGS1cb0.roa
Signing time: Wed 01 Jan 2025 21:47:47 +0000
ROA not before: Wed 01 Jan 2025 21:47:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215703
IP address blocks: 93.113.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:cf:06:61:25:f7:c6:06:6e:f0:88:df:e0:be:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9a0b4c8ad51dd2fdb4126426373576464b571bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:29:29:3b:81:25:06:11:3a:e8:63:56:b5:
f1:76:fe:5b:23:e1:8f:a2:18:1d:87:01:70:06:54:
13:1f:7c:92:e2:48:aa:d1:81:24:74:69:9f:85:a5:
ed:9f:48:b3:a3:f7:19:8a:75:85:e3:d6:d8:21:2c:
b4:e5:5a:dd:a8:d2:8d:12:5b:ca:89:e7:f1:d5:54:
ec:36:11:1a:7c:38:c7:6d:3d:f6:01:59:7a:6f:af:
c1:10:0a:85:42:e2:da:af:49:c1:e3:a1:62:75:35:
3e:56:4c:ba:c1:d7:f5:af:9e:39:2e:31:b4:9e:71:
92:e9:37:32:52:d6:af:a6:07:3c:a2:8b:8b:ef:10:
38:0c:76:09:25:f6:3f:5e:23:d7:09:a5:d5:07:c5:
5c:45:fb:34:41:ff:5d:08:84:13:61:da:85:22:fe:
27:10:40:4c:b9:a5:81:d5:eb:5b:b4:7c:18:6e:9f:
d1:c8:dd:dc:fc:6b:6b:f7:7e:11:e4:35:f8:b0:af:
e3:24:60:15:1c:a8:05:14:11:ae:19:4c:e2:bc:b2:
de:36:c6:7e:9a:2b:72:4b:b6:eb:2e:6b:96:3d:22:
d3:76:87:0a:19:e9:69:95:83:9f:f1:62:fd:9e:ff:
1f:d5:77:86:eb:b0:4f:85:a1:1a:ad:9a:74:83:da:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A0:B4:C8:AD:51:DD:2F:DB:41:26:42:63:73:57:64:64:B5:71:BD
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2aC0yK1R3S_bQSZCY3NXZGS1cb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.180.0/24
Signature Algorithm: sha256WithRSAEncryption
22:0d:99:0e:4a:c7:84:18:fc:5b:3a:df:c7:7b:8d:94:41:ee:
7d:3b:7d:a2:5d:48:c7:4e:91:3b:9f:54:36:db:7b:c4:42:88:
ec:60:01:f2:e4:8c:b0:15:96:12:6d:9a:bb:cc:a1:77:7f:e0:
77:cc:f9:91:53:79:9e:41:e5:ef:8b:f1:24:5b:fa:20:d0:ef:
f5:70:b9:ef:bb:e4:29:e0:23:c8:0b:21:cc:ce:95:d7:e0:b7:
8b:13:96:ae:b7:25:53:e0:1c:a7:19:ef:99:6c:2a:81:48:f7:
d0:9d:c4:16:46:ae:83:ce:ef:d6:5d:d8:9e:66:53:85:fd:b6:
f3:27:7a:32:13:79:65:4e:6c:cf:bb:3e:53:3f:07:d8:d9:c2:
a9:b7:15:2e:14:4c:d5:1a:bb:bc:1f:9c:a9:77:26:23:9b:c4:
8d:22:fd:a3:c0:58:b9:18:6b:27:ac:0b:46:59:ec:8c:1c:42:
4a:3c:2d:7e:50:9f:30:3d:a7:ae:c1:a7:e3:51:03:aa:62:5a:
ce:c9:23:b5:39:ce:e1:f9:b3:ac:15:9d:85:21:4e:cc:82:15:
65:3a:8d:a6:df:44:74:1a:59:f9:6a:d5:ac:a0:43:cf:51:5a:
84:2b:ef:c9:5d:ef:0f:7c:12:b2:f7:59:2f:f4:a4:9b:e6:c7:
51:12:d4:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1s8GYSX3xgZu8Ijf4L79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTAxMjE0NzQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWEwYjRjOGFkNTFkZDJmZGI0MTI2NDI2MzczNTc2NDY0YjU3MWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6YpKTuBJQYROuhjVrXxdv5bI+GP
ohgdhwFwBlQTH3yS4kiq0YEkdGmfhaXtn0izo/cZinWF49bYISy05VrdqNKNElvK
iefx1VTsNhEafDjHbT32AVl6b6/BEAqFQuLar0nB46FidTU+Vky6wdf1r545LjG0
nnGS6TcyUtavpgc8oouL7xA4DHYJJfY/XiPXCaXVB8VcRfs0Qf9dCIQTYdqFIv4n
EEBMuaWB1etbtHwYbp/RyN3c/Gtr934R5DX4sK/jJGAVHKgFFBGuGUzivLLeNsZ+
mityS7brLmuWPSLTdocKGelplYOf8WL9nv8f1XeG67BPhaEarZp0g9rRPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNmgtMitUd0v20EmQmNzV2RktXG9MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvMmFDMHlLMVIzU19iUVNaQ1kzTlhaR1MxY2IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXG0MA0G
CSqGSIb3DQEBCwUAA4IBAQAiDZkOSseEGPxbOt/He42UQe59O32iXUjHTpE7n1Q2
23vEQojsYAHy5IywFZYSbZq7zKF3f+B3zPmRU3meQeXvi/EkW/og0O/1cLnvu+Qp
4CPICyHMzpXX4LeLE5autyVT4BynGe+ZbCqBSPfQncQWRq6Dzu/WXdieZlOF/bbz
J3oyE3llTmzPuz5TPwfY2cKptxUuFEzVGru8H5ypdyYjm8SNIv2jwFi5GGsnrAtG
WeyMHEJKPC1+UJ8wPaeuwafjUQOqYlrOySO1Oc7h+bOsFZ2FIU7MghVlOo2m30R0
Gln5atWsoEPPUVqEK+/JXe8PfBKy91kv9KSb5sdREtQQ
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:14 2025 by rpki-client