Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/cmBHSA4GXnW_zMhgtSR23lJ9kGY.roa
File: cmBHSA4GXnW_zMhgtSR23lJ9kGY.roa (raw, json)
Hash identifier: ABe9NqCNQ1mXhq/TeRBv0ZpniZK+LxzidlRkR9n16oI=
Subject key identifier: 72:60:47:48:0E:06:5E:75:BF:CC:C8:60:B5:24:76:DE:52:7D:90:66
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 01856E81EDA1EE2ABB951F86344593910AE1
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/cmBHSA4GXnW_zMhgtSR23lJ9kGY.roa
Signing time: Sun 01 Jan 2023 18:04:46 +0000
ROA not before: Sun 01 Jan 2023 18:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 93.93.20.0/23 maxlen: 23
93.93.23.0/24 maxlen: 24
93.93.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:81:ed:a1:ee:2a:bb:95:1f:86:34:45:93:91:0a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Jan 1 18:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=726047480e065e75bfccc860b52476de527d9066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:87:b3:9d:fb:b6:24:1e:f0:32:f4:a4:b5:d3:
9e:50:b1:51:0c:cc:81:fe:41:34:a2:f3:76:0e:0f:
37:f6:32:e4:52:e3:d1:5d:d5:5b:e0:34:4c:4b:62:
27:21:02:70:ce:d6:1c:15:cc:08:bc:18:e5:ce:ca:
f6:98:7d:53:15:46:00:a1:c3:92:e1:d2:f2:2e:c7:
46:98:30:b3:8b:f1:64:b5:08:90:b0:ab:13:97:16:
6c:23:df:5c:54:1d:7c:54:f5:c2:9e:d1:51:29:39:
bf:46:4d:b1:38:91:a2:1c:bf:5c:ab:64:71:0b:c6:
32:ab:42:1f:83:4a:5c:25:bc:49:e3:55:73:5e:1e:
e7:8b:46:bb:be:04:95:49:c8:0f:19:c0:fe:8d:31:
d3:ac:40:0f:44:bc:84:1d:da:07:8c:9e:9e:6b:d3:
4d:4f:ea:a5:d9:e1:38:3d:e3:ed:16:43:5a:53:2f:
e4:b2:c3:ae:22:ee:17:a0:17:5d:22:0c:46:55:95:
93:85:1c:34:95:10:e3:26:0e:55:d8:d4:5e:0d:f9:
1d:6b:41:09:a4:b9:7c:a7:7f:88:71:58:88:0e:dc:
8c:3c:89:eb:70:62:fe:43:d9:4d:3e:d3:3c:89:ad:
4b:1b:39:25:ba:4b:6b:fd:be:6d:63:d4:6e:df:64:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:60:47:48:0E:06:5E:75:BF:CC:C8:60:B5:24:76:DE:52:7D:90:66
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/cmBHSA4GXnW_zMhgtSR23lJ9kGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.20.0/22
Signature Algorithm: sha256WithRSAEncryption
73:6b:34:3e:9a:ea:9a:0e:7f:0d:29:8e:cc:df:f7:d9:0f:f2:
db:bf:84:9d:13:fd:da:22:ea:6c:54:fa:70:75:de:3f:92:45:
ec:6e:f6:8c:c9:76:d0:99:e1:ca:2b:e7:73:70:4f:39:b3:0c:
22:5c:1c:8b:4d:b1:54:ad:03:bd:3c:b3:a0:49:94:f9:98:ed:
69:89:28:b8:e9:ff:f3:ee:a6:f2:c8:e2:5d:af:7a:d6:a0:c4:
01:7c:c4:a9:44:6f:73:a8:56:7a:11:99:2b:ee:45:1f:25:e8:
33:03:8c:11:b0:a8:90:48:d7:49:1b:49:6e:b0:28:6f:4b:1b:
5a:f8:69:9d:ee:57:a7:5d:4d:0d:7b:51:1a:72:f0:94:bb:f8:
e4:ff:43:98:9d:eb:19:da:c8:75:c1:44:62:ef:f2:2c:22:1a:
9c:46:99:a1:fd:31:4e:c5:b5:e7:d3:ec:de:78:df:6c:50:e4:
9b:c5:91:f2:44:00:fb:9e:65:17:b3:41:ce:9a:8a:db:38:6d:
63:3c:c4:47:94:ff:a4:ce:6e:07:c5:3f:d9:6c:00:44:7e:ce:
0b:13:53:55:19:19:3d:a8:32:20:32:fb:94:fe:96:11:4d:d1:
dc:21:dc:70:cd:15:4d:73:47:ca:a3:c7:56:74:d8:dd:f7:f1:
3e:27:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:06:59 2025 by rpki-client