Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/8CggUlQy_aXnQCJpXZLwq_V_U3E.roa
File: 8CggUlQy_aXnQCJpXZLwq_V_U3E.roa (raw, json)
Hash identifier: trZahxTkUA9RfPtobfP72sz0lzfBl8wv2j9cIYzvhRE=
Subject key identifier: F0:28:20:52:54:32:FD:A5:E7:40:22:69:5D:92:F0:AB:F5:7F:53:71
Certificate issuer: /CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Certificate serial: 27F086BB
Authority key identifier: A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/8CggUlQy_aXnQCJpXZLwq_V_U3E.roa
Signing time: Sat 01 Jan 2022 13:00:27 +0000
ROA not before: Sat 01 Jan 2022 13:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47355
IP address blocks: 93.191.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670074555 (0x27f086bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5295237ab44bce35ddfc2627fd49a8c44612441
Validity
Not Before: Jan 1 13:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f02820525432fda5e74022695d92f0abf57f5371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:b9:71:a6:fc:43:b6:83:f9:96:eb:87:57:
1e:96:0f:53:d4:b6:2e:7b:a2:8c:c1:62:f3:d6:c5:
b1:47:44:18:cb:c4:55:2e:3c:46:5b:59:c0:b7:84:
20:17:54:72:82:53:0d:1c:82:05:5a:6f:35:8c:c5:
5a:2e:05:7c:30:5f:3a:bc:9c:97:4f:c2:65:3e:b0:
db:55:0e:49:27:a4:fb:e5:94:e9:f2:c7:d1:cb:a9:
72:db:45:64:62:0b:5d:c7:60:a9:15:99:a3:30:ea:
46:0a:23:9a:30:66:07:81:45:bc:a4:a7:2a:6e:3d:
66:d1:0f:5e:5b:60:a2:a2:7e:e5:d8:9f:92:93:1b:
3c:90:a1:8d:c2:18:34:3d:cc:29:80:3f:0a:8a:a7:
c5:5e:3f:c7:14:cc:5f:57:bf:40:c0:b4:f3:51:fe:
55:0f:a6:3c:2e:cf:42:38:2d:0a:29:c8:a2:f6:95:
fc:64:a1:d0:e5:4e:43:ad:0c:a3:81:35:7e:b2:bd:
9b:03:bb:49:40:c4:58:2c:88:2a:0a:23:d9:c2:3d:
ef:25:32:97:81:b7:ab:d5:06:75:d6:1e:96:c6:fe:
9d:47:68:15:8b:d5:68:8b:1c:88:de:37:43:ae:14:
d3:c5:ce:b1:27:5e:6a:19:32:6b:a2:24:23:42:66:
da:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:28:20:52:54:32:FD:A5:E7:40:22:69:5D:92:F0:AB:F5:7F:53:71
X509v3 Authority Key Identifier:
keyid:A5:29:52:37:AB:44:BC:E3:5D:DF:C2:62:7F:D4:9A:8C:44:61:24:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pSlSN6tEvONd38Jif9SajERhJEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/8CggUlQy_aXnQCJpXZLwq_V_U3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0951d7-3f67-4bd4-904d-c94feaa6cb79/1/pSlSN6tEvONd38Jif9SajERhJEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.80.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:4a:86:c3:82:9c:96:a9:bf:1a:f6:61:e2:57:53:da:ff:b7:
74:8e:59:6d:f6:7b:cf:e0:66:cd:97:f4:a6:6b:d1:d0:0e:91:
e1:dd:25:68:bd:b5:51:f4:f2:1b:fe:fd:f7:d6:3c:78:31:3f:
bd:61:b8:08:c7:5f:52:d5:39:4e:29:e8:57:a4:9e:25:69:9e:
95:27:1d:97:85:19:f2:ba:4c:fa:81:fe:bf:7d:ef:c7:79:4d:
a0:a7:24:31:9e:31:63:69:ce:8b:52:98:80:c5:fd:7c:f9:a6:
9d:2b:1d:d9:60:d3:0a:e4:70:a6:f7:c7:65:32:36:57:bc:e5:
ad:35:7d:85:bb:4d:83:2b:10:7d:b4:de:31:4e:2e:86:90:f8:
0f:49:dd:a8:ba:5f:2f:28:4a:84:c9:99:a1:34:4c:70:ad:ae:
02:69:ec:94:02:fb:f2:14:5e:48:91:42:5d:64:d4:48:a1:ca:
b7:82:ea:c4:ee:68:bb:e0:b3:44:9b:0c:e7:68:04:74:c5:10:
4d:c6:30:07:79:46:82:f2:86:59:a5:2d:e3:5b:1e:19:76:2e:
61:64:88:fe:4b:02:85:82:88:33:58:fa:19:d1:80:6b:9e:28:
b1:03:d4:84:c8:f0:d0:18:8f:4f:09:34:9f:f6:46:28:13:2d:
d5:9a:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:40:16 2025 by rpki-client