Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8cR5cQQKUb-D50zVbLu9I5tmm0k.roa
File: 8cR5cQQKUb-D50zVbLu9I5tmm0k.roa (raw, json)
Hash identifier: OTY7xRXamKUoHriF/+s30WDLO7We7COyC3EL2ImUG0w=
Subject key identifier: F1:C4:79:71:04:0A:51:BF:83:E7:4C:D5:6C:BB:BD:23:9B:66:9B:49
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA4147F086FA78BEDB1781B4B9DB01
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8cR5cQQKUb-D50zVbLu9I5tmm0k.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212929
IP address blocks: 93.115.40.0/24 maxlen: 24
93.115.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:41:47:f0:86:fa:78:be:db:17:81:b4:b9:db:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1c47971040a51bf83e74cd56cbbbd239b669b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:36:6c:08:79:ca:3f:d5:a8:1a:52:7b:fb:51:
37:2c:1a:69:9c:b1:9b:df:ce:1c:32:1b:94:f4:e6:
2c:c6:2b:d1:20:3f:83:3e:f8:e1:2f:92:0c:b3:d5:
39:2b:15:3d:5a:6b:69:1e:5a:22:54:aa:9f:02:ed:
36:51:51:5b:57:55:e7:13:5e:90:e9:77:bd:3a:76:
b3:46:cc:b1:9a:7d:31:04:2a:06:c7:26:8e:c1:7f:
39:6c:13:f0:16:25:7a:a1:b0:24:85:76:75:0b:60:
f9:e6:e1:a8:71:af:8d:02:30:e8:5f:bb:6f:43:49:
79:04:f3:60:96:cc:2b:50:4d:2a:0a:cf:91:30:47:
e1:79:d3:a4:05:53:3e:5b:d7:9f:47:b6:ac:89:e7:
80:ce:df:1e:80:9b:3e:27:83:a5:fb:e3:8c:bb:cd:
52:ee:1e:74:1b:8a:fb:de:45:51:a6:c7:09:19:e0:
cc:fd:48:1b:82:4b:6d:17:ff:8f:33:55:76:3b:34:
f9:53:19:a6:ce:d2:cf:56:87:cd:07:22:ec:23:1b:
3d:17:46:08:1d:73:07:44:46:c2:ac:6e:2f:9c:8f:
bb:e0:d3:6a:1a:73:4a:ed:ef:1f:d8:5f:c6:d2:f7:
11:62:b3:cc:8b:e5:4d:af:a7:de:d0:47:e2:45:71:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C4:79:71:04:0A:51:BF:83:E7:4C:D5:6C:BB:BD:23:9B:66:9B:49
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/8cR5cQQKUb-D50zVbLu9I5tmm0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.40.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:19:2c:1b:52:45:2e:1e:49:54:f6:32:3b:41:d2:49:b5:32:
1e:1e:37:a8:d3:f2:0c:bb:95:d8:78:57:c9:92:0c:4c:e4:f9:
5c:f8:07:60:4d:96:df:08:e5:83:19:b6:23:fb:72:6f:71:e5:
85:8b:4e:96:30:69:90:24:42:5b:cc:89:20:86:fc:74:0d:e5:
43:8f:ad:c1:c4:c4:eb:6a:94:b6:25:c5:b8:08:68:4b:e5:9b:
76:dd:78:bf:47:5a:fb:b5:c3:d1:57:44:e4:bd:b4:e5:e8:2a:
47:65:44:8e:2a:82:e7:bc:0e:76:b5:6a:83:3c:45:b8:7e:18:
f3:44:f9:52:fe:9d:a1:57:43:7f:58:00:77:bd:a5:54:07:0f:
62:e9:8a:75:b2:31:98:e2:e9:e1:88:81:f1:f7:90:7f:fd:7c:
dc:8b:f4:d7:51:33:15:d0:3d:37:39:a2:bb:69:83:5b:7c:b0:
66:0c:00:e4:bd:dd:23:62:65:a4:fa:44:48:5c:a7:7c:82:73:
27:86:da:39:88:cc:01:66:94:27:bb:c9:8f:95:2e:8f:d2:ef:
d6:09:75:40:2c:15:cd:da:b8:75:ea:70:f4:27:7e:8b:b0:60:
ab:98:af:c5:d6:4b:46:7b:ee:b8:e6:89:ed:15:35:a8:4f:6d:
89:e8:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:24 2025 by rpki-client