Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JrLBFYXY1HoEy0C6thDcs_EQsIg.roa
File: JrLBFYXY1HoEy0C6thDcs_EQsIg.roa (raw, json)
Hash identifier: yoItWj2gP/ptORqiiSpZByWNzb3+Tc07BLo2bTrBpB4=
Subject key identifier: 26:B2:C1:15:85:D8:D4:7A:04:CB:40:BA:B6:10:DC:B3:F1:10:B0:88
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 01950B610619A93831D72E55C0152B4DCB03
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JrLBFYXY1HoEy0C6thDcs_EQsIg.roa
Signing time: Sat 15 Feb 2025 20:51:02 +0000
ROA not before: Sat 15 Feb 2025 20:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 93.113.183.0/24 maxlen: 24
93.119.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:0b:61:06:19:a9:38:31:d7:2e:55:c0:15:2b:4d:cb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 15 20:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26b2c11585d8d47a04cb40bab610dcb3f110b088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:b2:30:5b:c5:f9:ca:69:e5:cd:02:e0:ba:
8c:2b:ca:ee:3c:d5:ea:00:6d:bb:ef:3a:52:78:32:
ab:0d:4c:06:bb:91:32:3d:cf:a6:bf:e0:5f:6d:a1:
5f:e3:e4:c5:2f:ea:92:26:e4:d7:ec:db:fa:0f:bf:
85:76:75:33:a8:4b:41:b9:6b:9e:2f:8c:6a:4f:67:
48:85:36:6b:27:e1:86:3c:73:00:00:70:45:d6:ba:
fc:7a:b8:0b:8f:cc:27:8f:1e:e2:3f:bf:55:5f:3d:
ac:b7:4a:8b:63:3f:d1:34:ab:51:a2:dc:b8:17:44:
a9:5e:c2:ec:5e:5f:8d:6d:57:68:78:1c:de:26:01:
96:26:c4:32:56:f7:2d:30:7b:a1:9c:1b:9d:34:74:
86:ce:3d:e4:c9:a8:ec:16:16:33:ce:40:07:96:a4:
4d:c8:4e:a6:76:7e:24:6b:9f:1e:62:19:25:45:f9:
1f:72:df:14:d2:02:4d:ae:a6:87:cd:c7:2e:b2:13:
d7:2e:48:0b:98:26:78:0d:45:5f:f0:82:6b:3d:34:
c2:88:f3:ee:72:4b:84:ff:c5:17:de:fb:a7:15:dd:
cb:04:05:ca:4e:52:17:41:1f:14:92:0a:38:57:fa:
5e:0b:21:26:68:a3:b7:d0:fe:8f:50:b6:2a:f8:91:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B2:C1:15:85:D8:D4:7A:04:CB:40:BA:B6:10:DC:B3:F1:10:B0:88
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/JrLBFYXY1HoEy0C6thDcs_EQsIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.183.0/24
93.119.106.0/24
Signature Algorithm: sha256WithRSAEncryption
74:9e:89:bd:67:ba:e8:21:ef:4a:f3:82:8b:bf:38:c3:c4:9b:
e5:87:af:89:e1:0b:a4:0e:98:87:2d:9d:87:8c:52:e6:a5:ae:
86:93:fb:27:06:0a:01:50:48:35:45:58:6f:e1:1e:96:94:77:
db:a5:d0:b1:60:e2:89:5a:bc:25:27:81:2a:f2:39:52:14:1b:
a7:0a:da:1b:62:eb:2e:8f:84:51:9d:cb:7f:c8:ff:53:d9:96:
68:21:53:fd:96:b5:08:1e:3a:07:aa:fe:f5:a8:68:87:9e:49:
18:c8:b7:14:54:8c:1c:1a:c2:31:6d:c0:1e:94:2b:f3:ef:5a:
2b:8f:d7:f6:8a:4b:04:f9:fb:0c:50:7d:07:72:a7:4e:4e:ef:
59:e6:f5:3c:5f:61:f5:cd:c8:e6:4c:09:e8:1c:08:3b:67:7f:
9a:10:cf:44:b9:bf:c5:86:cb:5e:71:40:10:06:3b:75:81:1f:
32:96:68:36:d7:9c:02:3e:4a:01:c1:f6:ea:50:4a:ab:8e:9e:
20:d2:0e:e5:7d:d6:f0:ba:9c:77:24:4f:dd:a9:d5:68:85:8a:
61:90:eb:bc:df:88:3a:ec:62:d0:a0:93:71:27:b6:26:28:46:
03:ae:f4:cd:81:29:c1:48:4d:f4:e6:5d:3f:bf:1c:a7:fd:a5:
29:f9:b6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:28 2025 by rpki-client