Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/STqB0VsgZFu9xdmhknpPIup9BCg.roa
File: STqB0VsgZFu9xdmhknpPIup9BCg.roa (raw, json)
Hash identifier: oQ9EQbI0aB73YO9FK28gjnRBcrp6RS3BmRZaImFDvm8=
Subject key identifier: 49:3A:81:D1:5B:20:64:5B:BD:C5:D9:A1:92:7A:4F:22:EA:7D:04:28
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01942824312431166148106BFE0EACE39D0D
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/STqB0VsgZFu9xdmhknpPIup9BCg.roa
Signing time: Thu 02 Jan 2025 17:50:47 +0000
ROA not before: Thu 02 Jan 2025 17:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216272
IP address blocks: 93.92.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:31:24:31:16:61:48:10:6b:fe:0e:ac:e3:9d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jan 2 17:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=493a81d15b20645bbdc5d9a1927a4f22ea7d0428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:50:5e:51:ce:a4:9d:b1:3c:d6:fb:fd:61:90:
8a:59:e7:3b:a9:36:9b:6f:a6:ad:33:c5:cb:83:c6:
96:9b:c2:b5:ab:16:e5:bd:51:ea:63:3e:d9:79:88:
b7:9b:a9:fc:bb:0d:5e:41:02:70:5c:ad:67:b4:b1:
52:bc:2a:23:a7:67:2b:23:0d:6f:64:85:f5:ff:ed:
ff:48:88:fa:44:4e:70:d8:86:ac:6b:16:5d:ce:b2:
08:c9:3b:56:c2:35:43:8b:a2:7e:cd:6f:7c:27:f8:
fc:e2:58:e3:bc:cc:5a:0e:54:3c:58:87:6f:aa:67:
05:ea:c6:64:07:37:a5:7a:93:e8:3b:fd:ee:db:db:
62:c5:cf:22:af:d1:da:e5:19:a9:b5:e2:68:37:63:
e9:64:9d:2d:30:b7:80:80:02:32:d1:96:c9:79:19:
1b:11:d7:bc:07:1d:cd:ee:61:69:de:74:2e:93:43:
cd:a8:73:84:a6:6b:b3:73:d5:52:94:86:c6:14:13:
89:b2:48:7d:d7:54:d9:57:80:1f:7b:6d:95:59:18:
b4:3e:fd:a2:09:95:af:76:b3:3b:21:83:f4:4b:14:
08:0f:19:b4:e9:c2:09:04:da:27:c2:00:4c:24:c0:
9a:37:dd:96:c1:96:6e:88:40:12:68:57:07:45:96:
52:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3A:81:D1:5B:20:64:5B:BD:C5:D9:A1:92:7A:4F:22:EA:7D:04:28
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/STqB0VsgZFu9xdmhknpPIup9BCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.16.0/24
Signature Algorithm: sha256WithRSAEncryption
80:58:ff:e0:d0:02:e8:c3:87:b6:85:d8:33:57:58:42:03:c7:
95:10:9a:73:50:9a:b3:3d:af:93:a1:3c:ae:45:fb:7a:46:7b:
64:f8:a9:ff:34:ce:34:4d:fe:04:ff:99:ea:b1:ff:d0:3f:af:
0e:12:18:3a:f0:92:d2:88:88:53:cb:2a:ac:9d:e8:4f:26:e0:
fe:9e:be:54:cf:a1:be:be:83:04:a2:c1:78:13:70:98:ed:f4:
ff:fd:2a:51:49:eb:58:e9:71:e1:25:1d:47:15:70:17:f5:93:
ed:5e:c2:1a:af:72:35:22:a3:e2:48:35:b0:18:36:1f:29:67:
a8:17:36:8f:b7:3d:4c:56:c4:1d:cb:18:cf:7a:66:28:3d:92:
48:ea:6f:8c:7a:44:4c:d2:fd:eb:db:0a:8d:a1:6e:3d:17:5c:
7f:db:ff:01:08:b7:6a:2e:f8:31:cb:28:01:80:1e:a1:c1:f0:
62:ac:12:f4:84:41:5a:83:86:a5:05:97:7d:07:76:78:88:86:
2d:bf:07:21:09:f3:3c:a1:ab:bc:bb:ca:cd:fe:2b:7a:95:a7:
fb:23:36:8e:8f:9a:08:bb:29:33:b9:e3:e4:7b:10:35:34:8b:
18:f2:ea:23:2a:56:d2:e8:6c:5e:d9:d5:53:0f:42:05:92:01:
44:c4:3f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:04:53 2025 by rpki-client