Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/5A3YnEs1ZvLdSvcOcUExpIb5VdQ.roa
File: 5A3YnEs1ZvLdSvcOcUExpIb5VdQ.roa (raw, json)
Hash identifier: tO9lxj9hqpLG+SmeqqNt2wBQXwWgkYYnYBALTQCC0t0=
Subject key identifier: E4:0D:D8:9C:4B:35:66:F2:DD:4A:F7:0E:71:41:31:A4:86:F9:55:D4
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 018572F6996ACE4134DC6EC687C631C08101
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/5A3YnEs1ZvLdSvcOcUExpIb5VdQ.roa
Signing time: Mon 02 Jan 2023 14:50:41 +0000
ROA not before: Mon 02 Jan 2023 14:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 93.93.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:f6:99:6a:ce:41:34:dc:6e:c6:87:c6:31:c0:81:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Jan 2 14:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e40dd89c4b3566f2dd4af70e714131a486f955d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:73:95:e0:52:60:f0:2e:bd:9d:a2:ed:fe:
03:95:05:c4:f6:47:04:e0:74:5b:5d:0e:70:5e:83:
5c:28:65:7c:6b:be:ec:02:8a:2d:e1:e5:0f:c8:0b:
05:b7:66:ab:34:92:69:59:d7:32:57:53:af:01:a0:
fd:23:56:bb:43:d4:6b:df:ef:74:08:53:93:1a:a4:
cb:37:4a:6e:b5:c4:1c:f1:d5:42:c7:ab:fa:de:bc:
a2:0e:c9:f6:53:41:ac:4a:91:88:e3:c7:f7:ef:da:
78:99:c9:be:fa:e3:df:41:74:d6:3a:c7:17:d5:cd:
55:ed:3d:2e:65:af:5a:8d:e5:c4:36:39:80:ab:3f:
5a:88:4e:35:10:e8:9a:59:1a:ee:d4:78:cf:48:91:
3d:92:93:af:17:59:74:7f:88:7a:d1:d9:33:07:70:
7c:db:86:48:81:1e:5c:50:c2:bf:0d:03:fd:0c:78:
48:61:89:1d:e3:c3:92:00:8d:fe:7e:64:3f:64:b6:
43:99:58:a5:a5:31:21:2e:b8:b4:ce:9c:49:6f:ec:
1f:95:96:6d:37:08:f1:1a:a6:c4:8b:e7:8b:8c:b2:
b7:9a:50:af:87:28:89:e4:e2:d9:bc:ec:8f:e0:96:
98:86:fe:a6:1a:cc:d6:e4:8e:50:02:8d:6d:c3:98:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:D8:9C:4B:35:66:F2:DD:4A:F7:0E:71:41:31:A4:86:F9:55:D4
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/5A3YnEs1ZvLdSvcOcUExpIb5VdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.20.0/23
Signature Algorithm: sha256WithRSAEncryption
23:3a:2f:be:40:b0:05:2a:54:21:c5:b6:f1:c7:8e:e9:b5:af:
de:1d:55:d3:7d:35:65:14:fb:ce:7c:c1:a9:09:fb:e0:68:87:
70:b5:8b:ab:aa:47:45:5f:36:24:7e:56:13:9e:df:76:a9:bc:
ad:47:10:28:92:3e:c1:d2:cb:cf:4d:9b:58:f7:b9:5b:e5:e3:
ff:e4:93:67:50:58:7a:d1:c0:0c:06:67:48:0f:7e:64:de:03:
96:c6:dc:e7:81:b6:95:20:93:f4:9e:b6:7c:80:80:f0:ce:cd:
a0:95:f3:b3:ef:87:f0:48:30:91:bf:05:e6:65:c4:2c:3c:6b:
e7:32:bd:95:83:78:1e:22:3d:31:80:cf:0a:4f:d5:98:0e:cd:
c6:32:22:1d:d7:9a:c9:cc:8d:27:8a:2a:02:ea:66:f7:d8:68:
69:71:00:ea:e3:05:3e:2b:35:95:75:f5:8e:5b:af:4f:42:d6:
95:0d:02:74:a7:d3:c0:7d:0b:df:bd:35:bd:e3:0e:4a:6f:56:
f6:0e:d5:8f:ff:93:79:e1:4a:39:23:34:a0:2c:66:63:d0:b1:
f7:f1:df:40:ec:3f:46:1b:a1:e9:10:97:04:0f:69:b4:12:f3:
eb:6b:70:3d:c3:34:77:97:d2:a3:7a:e7:79:0a:0e:bd:4f:ef:
ac:2b:b1:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy9plqzkE03G7Gh8YxwIEBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjM1ZWE3MGRlYWFlMGU5OTk0MTI4NzZlOWQyMTZhZmQ2
NWNiZGIwHhcNMjMwMTAyMTQ1MDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDBkZDg5YzRiMzU2NmYyZGQ0YWY3MGU3MTQxMzFhNDg2Zjk1NWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYlzleBSYPAuvZ2i7f4DlQXE9kcE
4HRbXQ5wXoNcKGV8a77sAoot4eUPyAsFt2arNJJpWdcyV1OvAaD9I1a7Q9Rr3+90
CFOTGqTLN0putcQc8dVCx6v63ryiDsn2U0GsSpGI48f379p4mcm++uPfQXTWOscX
1c1V7T0uZa9ajeXENjmAqz9aiE41EOiaWRru1HjPSJE9kpOvF1l0f4h60dkzB3B8
24ZIgR5cUMK/DQP9DHhIYYkd48OSAI3+fmQ/ZLZDmVilpTEhLri0zpxJb+wflZZt
NwjxGqbEi+eLjLK3mlCvhyiJ5OLZvOyP4JaYhv6mGszW5I5QAo1tw5j4mQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOQN2JxLNWby3Ur3DnFBMaSG+VXUMB8GA1UdIwQY
MBaAFCYjXqcN6q4OmZQSh26dIWr9ZcvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlOZXB3M3FyZzZabEJLSGJwMGhhdjFseTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jMzYzYzQtNzc3NS00NDZhLWJkZDct
YzE0ODRlYzE1MWNhLzEvNUEzWW5FczFadkxkU3ZjT2NVRXhwSWI1VmRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jMzYzYzQtNzc3NS00NDZhLWJkZDctYzE0ODRlYzE1MWNh
LzEvSmlOZXB3M3FyZzZabEJLSGJwMGhhdjFseTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXV0UMA0G
CSqGSIb3DQEBCwUAA4IBAQAjOi++QLAFKlQhxbbxx47pta/eHVXTfTVlFPvOfMGp
CfvgaIdwtYurqkdFXzYkflYTnt92qbytRxAokj7B0svPTZtY97lb5eP/5JNnUFh6
0cAMBmdID35k3gOWxtzngbaVIJP0nrZ8gIDwzs2glfOz74fwSDCRvwXmZcQsPGvn
Mr2Vg3geIj0xgM8KT9WYDs3GMiId15rJzI0niioC6mb32GhpcQDq4wU+KzWVdfWO
W69PQtaVDQJ0p9PAfQvfvTW94w5Kb1b2DtWP/5N54Uo5IzSgLGZj0LH38d9A7D9G
G6HpEJcED2m0EvPra3A9wzR3l9Kjeud5Cg69T++sK7EA
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:17 2025 by rpki-client