Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/ipmiKycARSLhGHQYv2f60SrLaOo.roa
File: ipmiKycARSLhGHQYv2f60SrLaOo.roa (raw, json)
Hash identifier: vX5eZjHcmniMUN667XkpSrFzGmLO2cdywWWqHL9b+pg=
Subject key identifier: 8A:99:A2:2B:27:00:45:22:E1:18:74:18:BF:67:FA:D1:2A:CB:68:EA
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 027ED092
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/ipmiKycARSLhGHQYv2f60SrLaOo.roa
Signing time: Thu 03 Mar 2022 14:32:16 +0000
ROA not before: Thu 03 Mar 2022 14:32:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34549
IP address blocks: 93.93.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41865362 (0x27ed092)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Mar 3 14:32:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a99a22b27004522e1187418bf67fad12acb68ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e9:cc:58:9f:e6:b7:39:79:ef:f9:16:63:4f:
26:d2:d3:d7:ef:de:06:3b:e7:18:7f:75:a2:59:6f:
5d:ab:09:9d:8b:b9:09:a9:8c:9d:43:a1:6b:58:97:
10:50:9c:7a:1b:2e:e8:a1:25:fc:ef:e8:f8:54:d3:
3e:21:bb:61:68:c5:0a:06:e5:97:4c:11:b0:eb:13:
23:eb:50:42:81:eb:35:71:e2:d1:2d:f6:a5:1e:36:
b6:3b:31:3e:2c:0a:28:0c:66:24:18:54:bb:6a:a9:
d2:87:c7:40:66:34:57:f6:ee:a2:1e:80:65:2c:cf:
9b:4d:e5:1c:f2:19:4d:6e:7b:8c:a0:a3:c3:dc:32:
04:77:6e:83:d0:17:83:68:88:f8:6b:4f:6b:71:3b:
fa:72:31:7e:00:e9:fe:c8:6d:68:b8:5b:ea:e7:61:
e8:f7:26:8e:4c:b4:37:87:a0:7d:56:c2:f1:3c:26:
b3:4d:ce:b0:ff:da:9d:ce:01:e0:ce:ba:b7:16:00:
40:8d:ce:f1:85:b2:6d:84:4f:27:77:f9:25:19:e5:
4f:f2:aa:22:74:38:92:2e:a0:80:33:d4:83:04:f0:
86:06:0d:ed:d7:f1:7f:9a:3f:07:c1:68:80:ae:75:
4d:9e:54:ab:a2:8c:de:7f:f8:a9:2b:ca:02:53:91:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:99:A2:2B:27:00:45:22:E1:18:74:18:BF:67:FA:D1:2A:CB:68:EA
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/ipmiKycARSLhGHQYv2f60SrLaOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.18.0/23
Signature Algorithm: sha256WithRSAEncryption
97:bc:3f:8b:d9:46:b7:12:84:e7:8d:20:97:c3:ea:7a:de:c5:
9b:d0:6d:04:74:39:87:06:a3:20:7b:0b:c2:fb:10:bb:f8:67:
75:79:8a:e6:88:8b:6d:aa:74:6d:20:d1:ed:8f:72:98:e3:28:
f9:76:e1:dc:0a:e5:97:1e:c3:ff:0f:52:77:d2:2c:ef:10:b5:
73:ca:ec:b1:0e:c2:b7:62:53:15:08:64:4c:6a:e4:59:69:23:
1d:5c:ea:01:ab:bd:53:4d:11:89:c4:28:77:07:fe:3e:f9:53:
d7:46:d6:81:05:4b:e6:23:cf:11:f6:43:8f:dc:c5:f8:c5:f6:
9d:8b:14:d7:75:9b:14:92:68:21:ba:2d:47:3d:58:66:1a:af:
ac:2f:da:16:ab:96:9f:68:cc:cb:95:4a:bb:f8:a1:01:1a:fa:
62:11:7f:ba:0d:40:5d:b2:c5:0d:03:2e:8e:e2:22:91:b7:ff:
1a:dd:3a:66:1c:d3:96:51:dd:24:b4:a2:9e:a9:8f:9d:e5:ca:
aa:e8:24:f8:18:ac:65:84:5b:8a:55:6e:8d:b5:b4:29:8b:8b:
2d:81:b7:c4:49:da:a4:a7:04:22:37:01:e5:77:4f:04:7c:b8:
0a:f8:8c:dc:55:1e:3f:52:33:d4:4a:cd:6d:56:45:f6:ac:37:
01:a7:b9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:49 2025 by rpki-client