Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/CNLISuG2wcPLZPIwmjsdEJSNNwA.roa
File: CNLISuG2wcPLZPIwmjsdEJSNNwA.roa (raw, json)
Hash identifier: uqLOzLJq6ySg7zfRbUN9sBvQ+wgjGoSLmUMj/2hAekc=
Subject key identifier: 08:D2:C8:4A:E1:B6:C1:C3:CB:64:F2:30:9A:3B:1D:10:94:8D:37:00
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 02D242E6
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/CNLISuG2wcPLZPIwmjsdEJSNNwA.roa
Signing time: Wed 06 Apr 2022 09:54:20 +0000
ROA not before: Wed 06 Apr 2022 09:54:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 93.93.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47334118 (0x2d242e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Apr 6 09:54:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08d2c84ae1b6c1c3cb64f2309a3b1d10948d3700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:9b:89:fb:48:cb:24:59:70:88:ed:a0:96:
4e:c8:fc:91:63:19:e4:3f:9b:96:64:43:27:f0:9a:
d9:c5:86:e2:d0:6f:52:cf:d0:c0:26:20:51:ca:dd:
c4:04:f8:7b:1d:c5:79:1a:c4:a7:0f:e7:d7:e9:6b:
1f:be:66:c0:32:49:0d:13:06:df:89:52:20:ef:8e:
36:05:07:20:67:0f:77:b4:8e:e3:ae:dc:d6:47:12:
1b:b4:ce:3c:86:06:b8:dd:49:ba:2a:af:83:30:82:
0d:ed:80:71:5e:52:14:f7:74:12:78:4d:fa:b7:f9:
56:cd:7a:9c:eb:38:43:b9:a5:3f:5d:e8:75:63:18:
20:82:db:cf:42:c2:c0:db:06:f8:6d:de:88:f4:ed:
36:c1:7d:97:ed:46:05:e4:b0:5a:ef:e8:be:21:bd:
9f:00:6e:ce:45:5b:3c:3a:41:8c:37:bc:13:8e:ee:
e8:b4:7f:b4:87:ac:fb:73:90:74:54:86:cd:d4:cc:
3a:d2:1b:8e:f8:46:ae:17:42:1c:f6:19:0a:08:16:
d5:5a:3b:c5:13:23:67:70:40:fb:3a:a2:d6:00:ae:
2a:70:6b:02:e2:88:0f:75:9c:1f:6c:fc:ab:fc:86:
a8:5c:b3:a9:4f:cb:72:c6:fe:45:7f:62:3e:01:44:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D2:C8:4A:E1:B6:C1:C3:CB:64:F2:30:9A:3B:1D:10:94:8D:37:00
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/CNLISuG2wcPLZPIwmjsdEJSNNwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.22.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:d3:c6:37:47:39:4a:7d:37:7f:87:bf:55:22:32:1e:09:0a:
ef:1b:bf:51:fa:cd:45:b6:68:86:12:b1:8f:05:25:a9:31:a6:
13:e3:b9:d5:47:5e:30:a2:a0:62:2a:eb:32:f1:7e:4c:e6:81:
5b:50:e3:d4:87:24:fe:5f:19:75:95:ea:d3:21:0f:46:87:32:
02:92:2d:6b:59:ce:38:e2:3d:92:a4:ad:ad:ef:d2:c2:fa:bf:
84:1b:3d:1e:ee:af:12:ee:5e:f8:ff:1f:8e:2c:c9:b8:2d:34:
16:cd:bc:4b:10:ab:57:8b:8a:f3:a1:3e:78:78:20:fd:b8:f2:
cd:32:77:9e:2d:fb:d8:99:ef:03:06:3c:24:7f:c0:b4:08:5b:
7f:67:bc:ed:54:73:b1:4d:8b:74:40:5b:08:da:75:d6:d7:f0:
bd:21:ac:fe:59:61:64:3f:e3:4b:02:9d:81:52:af:d9:54:8e:
45:8a:8a:e0:6a:81:9f:98:3e:f5:f1:19:49:fc:b2:87:c6:9a:
4e:78:c7:32:2b:6b:a5:1f:74:c7:e1:27:2f:fc:46:45:6a:b9:
69:d6:17:e5:8c:1b:19:7a:57:b1:ed:55:20:05:38:15:e0:c4:
5c:5d:33:73:48:5d:66:3f:a9:c8:82:32:44:c5:69:1f:34:99:
2c:39:ea:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:10 2025 by rpki-client