Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa
File: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (raw, json)
Hash identifier: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=
Subject key identifier: AD:CC:48:E1:ED:89:F3:04:4C:D7:5A:63:00:95:70:D9:7D:42:3F:84
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 019425FD7D627F283508A66B98120E4CE3D0
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa
Signing time: Thu 02 Jan 2025 07:49:17 +0000
ROA not before: Thu 02 Jan 2025 07:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51760
IP address blocks: 93.191.88.0/21 maxlen: 21
93.191.88.0/24 maxlen: 24
93.191.89.0/24 maxlen: 24
2a02:2820::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:7d:62:7f:28:35:08:a6:6b:98:12:0e:4c:e3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Jan 2 07:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=adcc48e1ed89f3044cd75a63009570d97d423f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:8e:9a:0b:48:95:e0:a9:ed:b3:37:c3:12:
a3:27:4c:da:f9:14:f3:55:82:1c:9d:7b:9f:e3:53:
2f:82:b3:9e:ee:35:1e:f2:bd:d6:88:5c:f1:69:b5:
fe:eb:2d:0a:c2:e0:e4:4b:8c:a2:0f:11:db:d6:c4:
2b:df:a6:5f:56:0e:6f:64:83:2a:7e:28:40:1a:62:
e7:72:38:1b:a2:d4:90:ba:3c:99:eb:ae:ec:11:ab:
c8:9d:2a:b3:9c:7f:3f:a2:e0:4e:e9:85:27:07:b3:
7f:21:1e:cc:fe:06:24:81:4f:94:79:92:64:39:bb:
cd:37:3d:e8:f7:b3:a1:25:8a:8d:86:77:b3:dc:26:
e3:70:ed:3c:64:cf:6a:fa:db:a2:49:c7:fc:68:c8:
2f:35:74:87:c9:f2:f1:64:d7:db:35:4c:bd:cf:ce:
d9:8a:f2:41:c8:2c:ec:df:32:a0:a3:22:18:ce:f4:
7d:eb:77:36:40:2e:45:45:ec:18:18:f2:69:14:0c:
1d:7b:ba:b6:07:37:07:37:ce:ab:58:bf:22:84:ab:
fc:37:bf:b0:11:a7:3c:4e:77:a4:c3:ba:f6:f8:0a:
e3:a7:bb:08:7c:3b:12:9a:80:62:b7:5b:2d:d8:b0:
2e:9f:4c:00:48:26:29:9c:cf:e9:ca:4b:e1:fc:82:
4d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CC:48:E1:ED:89:F3:04:4C:D7:5A:63:00:95:70:D9:7D:42:3F:84
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.88.0/21
IPv6:
2a02:2820::/32
Signature Algorithm: sha256WithRSAEncryption
06:52:f0:67:1d:f9:09:3d:1f:d1:c8:d5:cf:47:ac:07:64:5e:
a7:20:01:a0:8a:ff:3d:9e:42:1d:aa:31:ef:11:78:a0:fa:7e:
99:e6:4f:5f:4f:86:87:ea:6f:04:7b:62:bc:05:dc:9a:e1:d6:
bf:89:82:48:2d:65:3f:2f:ac:39:65:d4:ff:ee:22:d7:1a:7b:
cb:04:e4:d0:6a:88:43:65:d4:97:82:08:f7:ab:4f:00:24:f1:
4f:0a:e5:95:df:9d:f7:ef:d1:47:0b:bb:ce:fb:16:8a:03:8a:
f7:8d:96:0e:28:3b:ad:99:ef:84:29:05:5f:40:05:56:4e:e9:
08:56:02:42:51:7f:16:7c:d5:f1:99:8c:f8:63:55:45:68:4a:
3b:6f:9b:5e:1b:14:c8:3f:07:b7:03:84:15:a7:49:73:d1:81:
27:e4:3c:6b:d8:ce:df:93:10:ae:b6:64:1b:15:65:e9:bf:da:
cf:3f:93:02:07:27:cb:7d:97:96:10:32:7b:06:3e:ab:7e:dc:
e0:3f:01:d5:f7:03:b9:b6:ae:e4:72:56:5e:3e:6a:f3:5f:97:
ee:a4:e2:1d:df:55:19:90:ac:97:49:7c:82:b6:07:a9:04:7e:
dd:94:ad:dc:9a:44:5b:07:39:76:6d:5d:be:b2:72:1f:29:bb:
5e:75:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:37 2025 by rpki-client