Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/SsMc_UCdZfj2astDE817k6ARaPo.roa
File: SsMc_UCdZfj2astDE817k6ARaPo.roa (raw, json)
Hash identifier: N4veNGrSuZAmXQn6siWwoAn4rdma4ebt3hyv3Oq6z2s=
Subject key identifier: 4A:C3:1C:FD:40:9D:65:F8:F6:6A:CB:43:13:CD:7B:93:A0:11:68:FA
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 018557AD1F7904DB90CE9DC23547BFD7A36E
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/SsMc_UCdZfj2astDE817k6ARaPo.roa
Signing time: Wed 28 Dec 2022 07:40:41 +0000
ROA not before: Wed 28 Dec 2022 07:40:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 93.93.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:57:ad:1f:79:04:db:90:ce:9d:c2:35:47:bf:d7:a3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Dec 28 07:40:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ac31cfd409d65f8f66acb4313cd7b93a01168fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:15:3f:14:ef:15:0b:e9:f0:39:bf:53:a8:63:
6d:30:95:53:7e:ed:65:35:52:c8:aa:35:af:d0:08:
e0:d4:7a:ab:34:66:b1:3d:41:0c:91:16:b0:73:fb:
22:d2:64:1d:ac:3c:54:d6:57:6c:cb:7d:9c:0f:fd:
da:9c:96:ff:d9:4d:25:2a:ef:c1:4f:3b:18:da:f3:
38:78:fd:a0:83:03:b2:43:0e:e2:25:7b:7f:18:49:
2e:69:51:7c:55:aa:28:3b:3e:7c:62:fe:71:c3:5d:
c9:cc:9d:2c:96:51:5c:0b:b6:d2:82:92:50:05:a6:
37:d4:4b:9d:cd:64:3a:04:9e:0e:92:f7:83:5f:c3:
cd:0a:3c:f3:22:c4:61:65:e8:6c:0f:42:94:74:0c:
46:59:7f:53:98:08:1f:4b:c0:62:e2:b8:b4:78:9a:
ba:0a:05:c3:41:56:f0:a5:00:50:ee:91:9c:6c:2b:
26:1e:8b:eb:77:dd:4c:ec:54:3d:10:0b:a4:92:6d:
eb:ca:9d:eb:d3:5d:6d:40:c5:36:2f:85:89:77:f9:
c1:46:31:91:51:73:e0:36:21:5d:a7:c9:84:2e:e2:
20:de:8d:06:b5:27:d5:85:e1:69:f4:14:83:e0:db:
72:79:c2:6f:2c:3e:60:56:1e:0a:24:63:49:71:a5:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C3:1C:FD:40:9D:65:F8:F6:6A:CB:43:13:CD:7B:93:A0:11:68:FA
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/SsMc_UCdZfj2astDE817k6ARaPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.20.0/23
Signature Algorithm: sha256WithRSAEncryption
75:fc:bf:f0:91:52:8c:61:33:3d:2f:e4:39:81:12:68:00:8a:
8c:4a:63:17:b9:30:ba:8e:0e:71:42:f0:4a:ea:91:58:67:8e:
ad:4f:a3:a2:8e:9a:c4:6e:83:b4:37:6a:ec:97:2e:f1:11:49:
4a:5c:59:58:90:4e:a3:4a:fa:72:5c:a2:58:1b:d9:be:36:a7:
40:d5:35:77:1d:f5:f8:36:97:a7:89:63:f1:f2:eb:07:4e:bf:
a1:f9:2e:a4:bf:96:9a:ac:b3:6e:17:96:c9:e6:8f:47:33:92:
56:73:45:a5:f5:4a:26:c4:d9:79:19:4c:29:d6:f9:ca:92:2f:
9e:6e:85:02:c2:7e:9e:2f:9b:2e:bc:1b:15:ac:b0:b1:33:47:
d1:44:97:4c:f8:43:66:86:c3:a2:2d:5b:b2:4d:07:76:44:ba:
bb:fc:f0:39:dd:44:cb:7e:7c:ba:e4:d1:07:23:20:c6:c7:46:
41:e6:05:4d:af:f0:49:dd:0a:e9:42:3f:59:d0:3e:2e:df:2d:
99:5f:7e:55:2c:8e:02:c1:31:8b:37:15:78:f7:ea:e9:71:23:
e5:2e:54:b8:89:7f:3e:2b:d0:49:06:3c:67:c0:e9:2d:d5:cd:
74:83:48:02:f0:ce:52:12:2c:23:9c:7f:81:58:b7:a4:22:c8:
fe:a5:3b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:27:26 2025 by rpki-client