Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/lsEYxW8X9UVtkUbZfi6ix-n77-8.roa
File: lsEYxW8X9UVtkUbZfi6ix-n77-8.roa (raw, json)
Hash identifier: xUONburB3J6lkYZ0WqAUBBjHtCFiwJ7ZcyCfZbaK/lQ=
Subject key identifier: 96:C1:18:C5:6F:17:F5:45:6D:91:46:D9:7E:2E:A2:C7:E9:FB:EF:EF
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 0187B2A21DD718410205F9DD5CED100B01F7
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/lsEYxW8X9UVtkUbZfi6ix-n77-8.roa
Signing time: Mon 24 Apr 2023 09:39:41 +0000
ROA not before: Mon 24 Apr 2023 09:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 93.93.20.0/23 maxlen: 23
93.93.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:a2:1d:d7:18:41:02:05:f9:dd:5c:ed:10:0b:01:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Apr 24 09:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96c118c56f17f5456d9146d97e2ea2c7e9fbefef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e5:e7:93:62:68:a3:b8:68:1e:82:e2:90:7e:
57:16:a8:34:3f:93:a8:46:1e:9e:b4:95:86:8d:cc:
0c:53:94:24:e1:31:9f:fd:ed:9e:46:8e:b4:22:ae:
a3:a1:b2:d9:11:46:d7:53:d3:71:35:86:63:6a:1f:
1e:46:7b:20:db:d7:4f:81:9e:7e:5e:e8:6a:b2:e9:
6e:0b:a8:25:d8:93:f7:4c:8d:9d:3c:7e:e2:f2:f5:
56:5a:69:ec:98:ba:5d:02:97:f6:c7:0a:dd:b8:24:
8b:3c:88:64:70:92:0b:21:07:f4:82:02:0b:eb:50:
87:d4:54:da:66:03:48:50:f0:ea:6f:de:c9:9f:6a:
9f:de:49:6f:8f:2a:ea:7f:d0:3a:5e:30:1b:f9:90:
9d:cf:6c:7a:6e:47:c9:b1:1e:ca:04:bd:e4:8e:1b:
14:09:65:2b:ef:19:73:11:d0:68:ab:4b:db:2f:d1:
c7:14:ee:51:35:b5:57:2e:9f:1f:05:04:b7:20:e7:
6b:84:b8:85:34:ae:e6:da:f4:0b:c1:e6:e3:d4:36:
32:ea:30:91:38:b6:20:80:d5:83:6b:ea:99:ef:41:
a5:0d:14:d2:64:5d:1d:d6:26:94:24:0b:5c:5c:7a:
18:0b:86:e5:fe:68:b0:f2:41:c2:89:a6:68:bc:7d:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C1:18:C5:6F:17:F5:45:6D:91:46:D9:7E:2E:A2:C7:E9:FB:EF:EF
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/lsEYxW8X9UVtkUbZfi6ix-n77-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.20.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:89:a0:52:2c:c0:16:70:18:c4:56:12:be:23:4c:29:1f:fe:
83:a7:56:92:26:8c:2e:a8:be:79:89:cd:ea:09:a9:46:73:62:
fe:3e:0e:3d:4f:8f:db:59:e4:b5:e9:20:0f:6e:4d:c0:f1:ac:
1a:35:c7:fd:51:43:ff:10:db:86:5d:e0:68:e2:39:03:40:ca:
66:84:cb:f6:11:5a:54:33:63:c9:29:67:2e:c1:b0:fe:51:61:
9b:e1:b9:41:06:dc:94:86:b4:0e:47:69:55:c0:08:81:80:48:
7a:06:e5:92:8c:06:65:40:25:92:47:58:21:09:90:8d:9f:dc:
f4:dc:4f:92:a5:5e:f5:d2:43:fb:76:d5:58:09:28:04:b8:e6:
50:48:12:b2:a3:6a:4b:aa:6e:52:cf:12:ca:3f:ef:06:7b:9e:
7d:82:d2:92:6d:b2:9b:6b:ce:b7:e0:1b:1b:68:82:9d:dd:09:
9d:b8:81:12:e4:52:d1:b6:50:48:b8:3c:e9:9a:1e:a4:72:fa:
b8:81:1a:55:8f:ab:b6:13:ed:6c:a4:76:4c:1b:47:03:8f:16:
65:b8:06:8f:b4:12:0a:53:0a:27:3e:f8:58:07:29:83:af:05:
64:cb:53:ad:7f:5f:fc:47:67:2d:58:c5:a9:8c:a1:5b:3a:57:
3a:4a:3d:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeyoh3XGEECBfndXO0QCwH3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjM1ZWE3MGRlYWFlMGU5OTk0MTI4NzZlOWQyMTZhZmQ2
NWNiZGIwHhcNMjMwNDI0MDkzOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmMxMThjNTZmMTdmNTQ1NmQ5MTQ2ZDk3ZTJlYTJjN2U5ZmJlZmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOXnk2Joo7hoHoLikH5XFqg0P5Oo
Rh6etJWGjcwMU5Qk4TGf/e2eRo60Iq6jobLZEUbXU9NxNYZjah8eRnsg29dPgZ5+
XuhqsuluC6gl2JP3TI2dPH7i8vVWWmnsmLpdApf2xwrduCSLPIhkcJILIQf0ggIL
61CH1FTaZgNIUPDqb97Jn2qf3klvjyrqf9A6XjAb+ZCdz2x6bkfJsR7KBL3kjhsU
CWUr7xlzEdBoq0vbL9HHFO5RNbVXLp8fBQS3IOdrhLiFNK7m2vQLwebj1DYy6jCR
OLYggNWDa+qZ70GlDRTSZF0d1iaUJAtcXHoYC4bl/miw8kHCiaZovH049wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJbBGMVvF/VFbZFG2X4uosfp++/vMB8GA1UdIwQY
MBaAFCYjXqcN6q4OmZQSh26dIWr9ZcvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlOZXB3M3FyZzZabEJLSGJwMGhhdjFseTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jMzYzYzQtNzc3NS00NDZhLWJkZDct
YzE0ODRlYzE1MWNhLzEvbHNFWXhXOFg5VVZ0a1ViWmZpNml4LW43Ny04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jMzYzYzQtNzc3NS00NDZhLWJkZDctYzE0ODRlYzE1MWNh
LzEvSmlOZXB3M3FyZzZabEJLSGJwMGhhdjFseTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXV0UMA0G
CSqGSIb3DQEBCwUAA4IBAQAsiaBSLMAWcBjEVhK+I0wpH/6Dp1aSJowuqL55ic3q
CalGc2L+Pg49T4/bWeS16SAPbk3A8awaNcf9UUP/ENuGXeBo4jkDQMpmhMv2EVpU
M2PJKWcuwbD+UWGb4blBBtyUhrQOR2lVwAiBgEh6BuWSjAZlQCWSR1ghCZCNn9z0
3E+SpV710kP7dtVYCSgEuOZQSBKyo2pLqm5SzxLKP+8Ge559gtKSbbKba8634Bsb
aIKd3QmduIES5FLRtlBIuDzpmh6kcvq4gRpVj6u2E+1spHZMG0cDjxZluAaPtBIK
UwonPvhYBymDrwVky1Otf1/8R2ctWMWpjKFbOlc6Sj2+
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:09 2025 by rpki-client