Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6c2ddf-6211-4dc5-ba5a-a85604f7fd56/1/P3STGTTThRaqYV9zyeEuAKDFe_E.roa
File: P3STGTTThRaqYV9zyeEuAKDFe_E.roa (raw, json)
Hash identifier: sPTHaDrZFtR9HquqvE5UbHhEcgCwp7WbdHCdJ58roQA=
Subject key identifier: 3F:74:93:19:34:D3:85:16:AA:61:5F:73:C9:E1:2E:00:A0:C5:7B:F1
Certificate issuer: /CN=154a4c1e23f9e6e3e3fca8e82ad791312e5da35b
Certificate serial: 120629B3
Authority key identifier: 15:4A:4C:1E:23:F9:E6:E3:E3:FC:A8:E8:2A:D7:91:31:2E:5D:A3:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUpMHiP55uPj_KjoKteRMS5do1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6c2ddf-6211-4dc5-ba5a-a85604f7fd56/1/P3STGTTThRaqYV9zyeEuAKDFe_E.roa
Signing time: Sat 01 Jan 2022 02:52:43 +0000
ROA not before: Sat 01 Jan 2022 02:52:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44275
IP address blocks: 93.95.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 302393779 (0x120629b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154a4c1e23f9e6e3e3fca8e82ad791312e5da35b
Validity
Not Before: Jan 1 02:52:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f74931934d38516aa615f73c9e12e00a0c57bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:05:9b:68:3d:98:4d:7a:ca:c7:f8:d6:f5:fa:
cb:6c:a8:53:1c:fb:20:b5:ad:54:e5:85:77:a7:c8:
ca:4c:81:44:9e:82:c9:a3:e9:96:27:a1:6e:2f:81:
1b:d8:78:d8:39:83:65:21:86:97:ca:b7:dc:18:c9:
6b:a8:0d:63:74:93:5b:7a:88:9e:3b:34:86:e9:44:
df:39:0c:4d:df:d5:76:e0:79:06:b6:42:8d:b0:0b:
d1:3a:ea:1d:39:66:d1:5e:1d:2b:4c:4d:05:3d:c4:
9d:4b:f8:73:ef:6c:7b:bf:fe:a7:78:a5:4d:93:8d:
23:44:40:4e:2c:31:89:bd:d1:f3:bf:cd:58:9a:76:
be:32:1b:29:55:18:5a:2d:a6:f6:e0:85:b8:71:41:
74:75:c6:89:03:8d:ac:99:9d:e1:32:30:09:2b:c2:
58:a9:e9:5b:95:09:1e:30:05:9c:1b:94:a5:2c:4e:
c8:83:8c:ec:03:64:e3:26:7c:3d:68:57:5f:27:af:
e6:89:29:c0:e7:7b:07:0d:d2:0f:d4:b6:d5:30:d9:
55:20:77:a4:7f:b0:a5:8f:c6:4c:3e:8b:b1:67:77:
77:79:57:40:82:79:46:1a:2c:b3:92:63:1b:bd:8a:
6f:21:b8:6c:b3:8f:fe:5f:43:ec:f2:3c:9a:bf:16:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:74:93:19:34:D3:85:16:AA:61:5F:73:C9:E1:2E:00:A0:C5:7B:F1
X509v3 Authority Key Identifier:
keyid:15:4A:4C:1E:23:F9:E6:E3:E3:FC:A8:E8:2A:D7:91:31:2E:5D:A3:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUpMHiP55uPj_KjoKteRMS5do1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6c2ddf-6211-4dc5-ba5a-a85604f7fd56/1/P3STGTTThRaqYV9zyeEuAKDFe_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6c2ddf-6211-4dc5-ba5a-a85604f7fd56/1/FUpMHiP55uPj_KjoKteRMS5do1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.72.0/21
Signature Algorithm: sha256WithRSAEncryption
05:59:b4:05:68:60:f7:03:ba:52:7c:ec:f1:89:f8:f6:b8:e3:
92:c3:76:d6:ae:2c:78:c3:0f:68:e1:bf:6b:b8:ec:79:73:fb:
6c:a4:fa:b4:31:41:17:e2:3a:c4:76:1a:64:d9:58:ef:d1:bd:
e5:78:78:19:be:8f:ea:04:1e:36:d0:c3:ad:7e:16:47:18:2b:
dd:df:de:9d:a5:a4:31:35:80:fd:35:e0:bf:a4:12:c7:e3:37:
88:34:a2:d7:8a:f6:1c:22:5d:8b:ff:2e:d0:d6:41:38:ad:4e:
83:37:23:7d:67:30:55:32:ce:d8:46:b1:7c:d5:9d:25:34:31:
04:17:6a:33:99:5c:c0:d1:d3:78:07:13:96:da:d3:8f:f0:e0:
0e:52:bd:5e:bc:e6:6a:02:77:2e:5a:0a:80:95:1b:a5:18:2f:
d2:be:2a:61:ab:9e:7f:95:b7:f2:f5:d3:3b:9d:85:0c:1e:27:
f8:29:65:56:09:53:72:46:17:cf:25:89:52:16:a2:00:be:68:
20:5d:c3:c9:9e:b0:40:5d:6b:c0:e3:7a:c9:a4:c4:c1:75:6a:
a6:65:97:33:da:6b:e7:e6:f0:a6:b0:7e:b8:33:70:a1:5a:f8:
dd:b0:a8:fb:77:d5:ec:3b:1b:69:75:16:79:3c:f3:66:86:96:
78:00:05:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:19 2025 by rpki-client