Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/mI1kk7iYkWBTAfT214-LcyWj064.roa
File: mI1kk7iYkWBTAfT214-LcyWj064.roa (raw, json)
Hash identifier: NLL7BpXp5TTQLpK6QDBpBZpFd8wXAxipi0yDahtbEro=
Subject key identifier: 98:8D:64:93:B8:98:91:60:53:01:F4:F6:D7:8F:8B:73:25:A3:D3:AE
Certificate issuer: /CN=26235ea70deaae0e999412876e9d216afd65cbdb
Certificate serial: 02DB362B
Authority key identifier: 26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/mI1kk7iYkWBTAfT214-LcyWj064.roa
Signing time: Thu 07 Apr 2022 10:23:07 +0000
ROA not before: Thu 07 Apr 2022 10:23:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 28742
IP address blocks: 185.158.29.0/24 maxlen: 24
185.158.28.0/24 maxlen: 24
93.93.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47920683 (0x2db362b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26235ea70deaae0e999412876e9d216afd65cbdb
Validity
Not Before: Apr 7 10:23:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=988d6493b89891605301f4f6d78f8b7325a3d3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c6:83:de:d5:36:39:34:98:85:a9:20:02:c5:
c3:63:91:88:11:fa:82:17:41:5c:a2:a8:37:cd:c4:
13:36:1e:9c:76:ba:6c:c1:96:dc:b2:1e:f9:cd:fd:
fe:19:3a:95:82:f8:4e:5d:9d:f0:81:94:4e:83:d5:
25:f5:c5:9a:72:b0:04:65:e0:8d:f6:7a:c6:c2:46:
95:8a:9b:75:cc:0f:55:94:93:fb:ba:86:5e:10:6b:
b0:07:94:c4:aa:b6:87:f4:93:71:a9:3b:ca:82:32:
6e:9a:2d:7e:9e:be:a7:3a:9f:d8:15:63:78:26:bd:
09:9d:d8:a9:e4:88:bc:b5:6e:5e:a6:0c:f0:90:a6:
0d:d3:4b:99:e8:da:39:c3:02:ae:26:aa:cc:2b:7e:
78:42:3e:cb:de:d4:ba:34:a1:e8:aa:d1:48:bb:ad:
4d:de:91:a6:28:69:41:fd:09:2e:9a:98:5b:c3:11:
dc:4f:13:cc:9d:49:23:3e:a5:22:12:cd:56:9c:63:
27:47:75:66:f8:5c:34:42:17:69:f0:76:cb:a9:d4:
e9:2a:ed:ef:09:3c:3c:d0:2b:6f:f9:1e:88:af:4d:
e1:24:1a:fe:26:1b:c6:0b:17:22:a6:14:39:ac:3f:
a8:5b:90:f4:50:14:d7:ee:62:33:d8:8d:0e:cb:63:
7f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8D:64:93:B8:98:91:60:53:01:F4:F6:D7:8F:8B:73:25:A3:D3:AE
X509v3 Authority Key Identifier:
keyid:26:23:5E:A7:0D:EA:AE:0E:99:94:12:87:6E:9D:21:6A:FD:65:CB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNepw3qrg6ZlBKHbp0hav1ly9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/mI1kk7iYkWBTAfT214-LcyWj064.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c363c4-7775-446a-bdd7-c1484ec151ca/1/JiNepw3qrg6ZlBKHbp0hav1ly9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.16.0/23
185.158.28.0/23
Signature Algorithm: sha256WithRSAEncryption
25:df:02:f4:4f:ae:fc:a2:e7:81:7d:04:da:d7:df:24:fd:7f:
f5:7c:58:43:d4:d2:db:75:b0:db:aa:da:d8:29:fd:12:b4:ad:
df:95:d6:5d:07:82:f9:ec:d0:24:ea:9b:ee:c0:2b:8c:30:e8:
83:78:ad:52:b2:b4:1b:0e:ee:86:34:77:c5:6c:b0:34:35:74:
61:d3:2a:8f:4e:48:e2:ab:44:54:70:80:8a:e6:7f:d6:39:7b:
57:bd:6e:7d:61:5a:1e:d1:84:96:42:c3:3e:91:e9:07:78:bc:
29:eb:89:d9:b2:c6:18:1b:b0:89:6a:f0:a3:75:cc:11:9a:64:
82:09:08:29:76:01:be:b8:da:73:86:99:24:7b:02:40:da:5f:
bd:b0:26:42:0e:2d:95:3f:2d:be:d3:63:7e:6b:d6:31:81:a5:
ce:68:4b:fa:f0:6d:cc:c4:c0:ab:62:af:41:b6:5d:14:c5:02:
0f:77:af:15:d5:fd:7b:b4:0f:bd:16:c5:97:24:15:5c:44:c8:
ed:25:9c:7e:1c:0b:56:af:d0:7f:11:6a:fd:e0:7a:7a:e3:16:
f0:c2:ff:d4:12:e9:b1:69:30:e4:5a:8d:ab:27:c0:fb:da:2b:
39:95:04:61:a5:19:e3:50:e0:3a:74:e8:1e:f4:c7:25:4d:a2:
54:24:38:03
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAts2KzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
NjIzNWVhNzBkZWFhZTBlOTk5NDEyODc2ZTlkMjE2YWZkNjVjYmRiMB4XDTIyMDQw
NzEwMjMwN1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTg4ZDY0OTNiODk4
OTE2MDUzMDFmNGY2ZDc4ZjhiNzMyNWEzZDNhZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANnGg97VNjk0mIWpIALFw2ORiBH6ghdBXKKoN83EEzYenHa6
bMGW3LIe+c39/hk6lYL4Tl2d8IGUToPVJfXFmnKwBGXgjfZ6xsJGlYqbdcwPVZST
+7qGXhBrsAeUxKq2h/STcak7yoIybpotfp6+pzqf2BVjeCa9CZ3YqeSIvLVuXqYM
8JCmDdNLmejaOcMCriaqzCt+eEI+y97UujSh6KrRSLutTd6RpihpQf0JLpqYW8MR
3E8TzJ1JIz6lIhLNVpxjJ0d1ZvhcNEIXafB2y6nU6Srt7wk8PNArb/keiK9N4SQa
/iYbxgsXIqYUOaw/qFuQ9FAU1+5iM9iNDstjf9sCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSYjWSTuJiRYFMB9PbXj4tzJaPTrjAfBgNVHSMEGDAWgBQmI16nDequDpmU
EodunSFq/WXL2zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0ppTmVwdzNxcmc2WmxCS0hicDBoYXYxbHk5cy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYjkvYzM2M2M0LTc3NzUtNDQ2YS1iZGQ3LWMxNDg0ZWMxNTFjYS8x
L21JMWtrN2lZa1dCVEFmVDIxNC1MY3lXajA2NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkv
YzM2M2M0LTc3NzUtNDQ2YS1iZGQ3LWMxNDg0ZWMxNTFjYS8xL0ppTmVwdzNxcmc2
WmxCS0hicDBoYXYxbHk5cy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAV1dEAMEAbmeHDANBgkqhkiG9w0B
AQsFAAOCAQEAJd8C9E+u/KLngX0E2tffJP1/9XxYQ9TS23Ww26ra2Cn9ErSt35XW
XQeC+ezQJOqb7sArjDDog3itUrK0Gw7uhjR3xWywNDV0YdMqj05I4qtEVHCAiuZ/
1jl7V71ufWFaHtGElkLDPpHpB3i8KeuJ2bLGGBuwiWrwo3XMEZpkggkIKXYBvrja
c4aZJHsCQNpfvbAmQg4tlT8tvtNjfmvWMYGlzmhL+vBtzMTAq2KvQbZdFMUCD3ev
FdX9e7QPvRbFlyQVXETI7SWcfhwLVq/QfxFq/eB6euMW8ML/1BLpsWkw5FqNqyfA
+9orOZUEYaUZ41DgOnToHvTHJU2iVCQ4Aw==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:29:36 2025 by rpki-client