Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8b011e-41cf-4d06-ab24-7270af08aff1/1/v_nxmc8ae69pygF-72c6rOiCTi0.roa
File: v_nxmc8ae69pygF-72c6rOiCTi0.roa (raw, json)
Hash identifier: APolbTfdJMqMnWXIltjnoAMRa1TK282yfkResoK5e5c=
Subject key identifier: BF:F9:F1:99:CF:1A:7B:AF:69:CA:01:7E:EF:67:3A:AC:E8:82:4E:2D
Certificate issuer: /CN=e5ed022a213d21a0cdf987f0ff1b88a9fafff588
Certificate serial: 0189654A8E891258131A48D9FB3D31F254FE
Authority key identifier: E5:ED:02:2A:21:3D:21:A0:CD:F9:87:F0:FF:1B:88:A9:FA:FF:F5:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5e0CKiE9IaDN-Yfw_xuIqfr_9Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8b011e-41cf-4d06-ab24-7270af08aff1/1/v_nxmc8ae69pygF-72c6rOiCTi0.roa
Signing time: Mon 17 Jul 2023 19:18:52 +0000
ROA not before: Mon 17 Jul 2023 19:18:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 93.157.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:65:4a:8e:89:12:58:13:1a:48:d9:fb:3d:31:f2:54:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5ed022a213d21a0cdf987f0ff1b88a9fafff588
Validity
Not Before: Jul 17 19:18:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff9f199cf1a7baf69ca017eef673aace8824e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:20:5f:66:d3:1c:93:c8:2b:71:25:f8:44:ff:
db:41:0e:c7:d5:fb:55:b7:06:0c:d6:e9:c3:b8:4e:
d9:87:29:aa:39:5c:1f:26:67:64:90:fa:99:be:e8:
ff:17:d3:d2:0e:f8:e9:3e:a2:fa:f3:d3:3f:83:d3:
39:3b:7d:0e:bc:29:4e:21:95:7f:3b:35:33:03:27:
af:de:c7:c9:d3:e7:c3:7b:6b:f5:43:10:09:21:b1:
05:ce:07:cd:c1:74:95:5a:a2:c5:fe:66:c8:4f:56:
7d:dc:12:d8:9d:04:4e:24:57:32:ef:a1:c3:ac:ae:
f7:29:7a:33:59:1f:8d:ef:3a:63:60:d3:fa:4b:fb:
ea:a6:a4:d5:63:00:c4:98:13:6d:37:db:07:5f:e9:
b1:c6:5e:ea:68:78:68:04:97:1f:30:50:3e:cf:3f:
cc:aa:36:27:5b:81:49:c1:95:13:9b:39:48:f2:46:
24:78:5f:47:02:b2:98:63:b3:16:6c:ac:23:83:de:
ab:a8:3a:a5:61:05:dc:7e:36:16:90:40:d6:81:f6:
92:06:27:80:c8:42:43:1c:7e:c1:67:73:ea:9c:7b:
6c:fe:32:a0:97:0c:8a:86:2c:65:85:87:fb:ca:88:
7d:cb:7c:ed:1b:2e:07:da:0d:a6:02:fc:fd:f9:dd:
ff:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F9:F1:99:CF:1A:7B:AF:69:CA:01:7E:EF:67:3A:AC:E8:82:4E:2D
X509v3 Authority Key Identifier:
keyid:E5:ED:02:2A:21:3D:21:A0:CD:F9:87:F0:FF:1B:88:A9:FA:FF:F5:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e0CKiE9IaDN-Yfw_xuIqfr_9Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8b011e-41cf-4d06-ab24-7270af08aff1/1/v_nxmc8ae69pygF-72c6rOiCTi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8b011e-41cf-4d06-ab24-7270af08aff1/1/5e0CKiE9IaDN-Yfw_xuIqfr_9Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.111.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a2:7d:ae:c4:cf:e4:33:85:36:d5:5b:3a:3c:4f:29:96:8f:
3c:06:14:3e:e9:4c:ba:dc:0b:11:46:4d:98:6e:2b:d0:a4:9b:
92:99:b5:be:62:27:49:57:21:02:1e:0c:c3:bb:27:c0:b9:72:
92:83:83:41:96:24:7f:b6:7e:92:92:3e:12:a8:1d:a2:17:87:
13:2a:38:6d:8b:02:f9:fe:ad:b1:66:6a:38:f6:f8:0f:7f:ec:
55:41:b9:4a:aa:4f:48:83:54:3f:a5:3f:57:99:83:e4:bf:d0:
c4:e1:0c:ee:fd:43:6a:e2:b8:ee:20:9c:a9:f9:f3:6e:54:2e:
3e:65:e0:a1:0e:0e:33:97:a9:fb:e2:8f:37:6d:46:1a:a0:51:
87:cc:1d:e4:1d:ff:7a:02:95:f3:51:cd:9e:37:f6:bd:c7:a9:
ae:30:73:bd:2c:fb:88:77:4a:df:6a:6e:e7:81:2f:3c:36:43:
cc:cf:8a:93:b4:6c:76:ee:e4:b0:54:8c:0f:b1:f8:c1:c7:0f:
85:0f:b6:47:93:b0:3b:86:00:99:5a:da:c4:42:df:a0:38:f4:
c4:85:c9:64:2f:b6:6d:e1:84:8c:46:dd:bf:32:b9:7a:1c:43:
08:3b:27:75:a0:e7:0f:29:17:29:04:49:44:49:a3:05:e3:85:
bb:05:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:13:15 2025 by rpki-client