Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/4o49wNwgNrVc4fORSnYBMUzFgdY.roa
File: 4o49wNwgNrVc4fORSnYBMUzFgdY.roa (raw, json)
Hash identifier: wDx8yFi9OKZxjRo0OT2kDKxX/rwNfecNPdkuJPb1t1o=
Subject key identifier: E2:8E:3D:C0:DC:20:36:B5:5C:E1:F3:91:4A:76:01:31:4C:C5:81:D6
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 0185C46C23ABE758B446D54FD967B98C1235
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/4o49wNwgNrVc4fORSnYBMUzFgdY.roa
Signing time: Wed 18 Jan 2023 10:28:19 +0000
ROA not before: Wed 18 Jan 2023 10:28:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 93.93.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:6c:23:ab:e7:58:b4:46:d5:4f:d9:67:b9:8c:12:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Jan 18 10:28:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e28e3dc0dc2036b55ce1f3914a7601314cc581d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:76:35:2f:8e:bd:a7:28:e5:78:1a:4e:71:
7b:65:5c:62:f2:3e:37:fe:ca:65:f2:ee:77:b3:ea:
da:78:d0:03:21:74:ad:9c:be:f6:05:7b:5e:0b:e2:
94:9d:db:b0:64:7c:34:78:78:f9:28:c6:5b:12:0a:
ce:2d:6a:d1:80:26:fb:24:8e:cc:ca:ff:0b:81:d0:
c0:c3:93:24:ae:39:35:9d:14:fb:ac:96:5a:3c:f7:
a3:59:19:ec:c9:7d:18:3c:f5:4a:0d:e7:26:f3:84:
42:3a:50:df:d1:e8:42:73:e5:85:c4:02:99:bc:97:
31:21:f7:c5:28:bc:6b:b7:b2:56:e4:2c:2d:cc:46:
84:1a:12:61:dd:d8:7a:1b:5b:94:0d:31:1f:a0:b8:
cf:76:d7:ae:9a:cc:49:be:f8:25:4c:9a:c5:ed:9e:
a7:72:0c:cd:f2:58:3d:83:f0:94:c9:34:43:43:18:
cc:2f:72:af:6d:4f:d1:b5:48:ec:5e:d0:1d:28:ad:
6b:6c:8d:00:bd:e1:83:51:ca:06:ac:70:72:ed:58:
33:35:74:85:ba:77:ce:0e:ad:d4:b8:7d:c5:8d:ba:
e5:60:96:62:f1:00:f3:13:30:2b:2d:c3:f0:b9:8f:
61:17:23:76:c4:83:7c:e7:4b:02:f2:2e:76:88:58:
db:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8E:3D:C0:DC:20:36:B5:5C:E1:F3:91:4A:76:01:31:4C:C5:81:D6
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/4o49wNwgNrVc4fORSnYBMUzFgdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.20.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:3f:1e:65:04:e2:f3:8e:c2:23:bb:6e:f9:77:df:f4:c8:5c:
cd:8a:0e:f7:cc:ab:ad:44:03:15:ba:b1:9f:34:a8:e1:ac:04:
ce:46:c1:b6:55:5d:7a:4a:96:6a:15:3f:c8:2f:7f:bb:97:2d:
b1:ae:eb:ac:b9:3d:f5:92:86:37:e9:20:da:3c:58:9b:fd:e8:
95:c7:d9:0b:0c:3c:bd:60:3f:88:33:f4:ed:56:f4:66:33:a6:
ee:92:42:84:5a:0c:00:43:53:a9:0a:f7:5f:79:ac:fe:53:c3:
36:9e:1f:bc:f4:61:f0:3f:50:33:ef:e0:f5:81:24:93:a1:4c:
2c:94:25:ad:b4:eb:5b:c5:d3:12:b5:59:9a:9b:8a:93:0a:c6:
40:ad:87:fa:d6:77:b8:55:3d:6c:f2:6e:f1:5a:f3:99:4d:1d:
0f:0c:d1:6c:a1:aa:59:a1:70:f8:28:28:ed:f1:cc:3e:ea:f7:
23:3f:5e:3e:bf:8e:ce:77:0f:3f:ab:0c:1a:90:da:6e:d7:15:
50:90:c7:62:29:f2:60:6e:b7:69:b1:71:3a:17:a1:c6:ad:8e:
6f:75:79:b2:20:c0:ca:4b:67:84:ca:b6:27:9d:18:28:ce:d2:
81:b0:82:9f:b5:be:ad:1f:25:4c:a5:e5:4d:b2:e9:21:1e:5f:
0d:94:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:41 2025 by rpki-client