Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/IcZyQzPjmcPatTCN_DFd1rTYdAc.roa
File: IcZyQzPjmcPatTCN_DFd1rTYdAc.roa (raw, json)
Hash identifier: AH7usQgOtkBiIGhG0/ats1OWBoHAGIhQ0eSjeuPELXY=
Subject key identifier: 21:C6:72:43:33:E3:99:C3:DA:B5:30:8D:FC:31:5D:D6:B4:D8:74:07
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01941FFA1946AA77510A5FD436CAE61C22D9
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/IcZyQzPjmcPatTCN_DFd1rTYdAc.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 93.152.217.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:19:46:aa:77:51:0a:5f:d4:36:ca:e6:1c:22:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21c6724333e399c3dab5308dfc315dd6b4d87407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:06:65:4e:69:3c:0d:eb:ae:b1:97:dc:1a:87:
73:64:66:51:48:c3:34:5e:7e:c9:15:62:e9:98:c1:
2a:8d:31:76:fd:3a:14:ac:5e:5b:28:bd:ec:22:c0:
bf:47:16:41:09:05:60:89:b3:bd:4f:dc:45:f3:83:
83:78:d2:d4:62:ba:10:f9:09:af:ad:d5:e9:3b:0f:
cc:6b:1e:fa:d9:d6:6f:51:b6:f6:11:6f:93:39:c5:
12:12:e3:dc:ea:b2:75:7d:ca:be:ea:10:76:b9:a9:
82:b6:07:35:95:81:39:b7:b0:ff:03:31:c3:f8:b8:
44:88:5c:b5:34:19:77:2b:8a:1b:b4:b1:da:2e:11:
49:c2:39:de:c2:0c:75:c1:88:f6:10:de:d5:a0:52:
88:07:be:fc:b2:82:19:ee:d6:c9:2c:50:e5:5a:28:
b5:74:53:f7:bc:83:88:8b:f0:ba:0e:78:d9:85:1e:
52:71:ae:6b:67:16:ef:e1:cb:59:69:a0:5f:d8:6a:
b0:a7:e0:17:a9:55:d8:0b:64:da:dd:bc:35:4b:3e:
70:e9:03:2b:94:dc:79:21:02:4d:ce:7a:e9:3f:a8:
d2:a7:40:b2:5e:9c:b5:85:5a:fb:a1:2f:c8:1b:21:
d9:09:c2:48:1c:3f:99:9a:a1:a1:aa:91:98:ff:67:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C6:72:43:33:E3:99:C3:DA:B5:30:8D:FC:31:5D:D6:B4:D8:74:07
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/IcZyQzPjmcPatTCN_DFd1rTYdAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.217.0/24
93.152.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:db:98:fc:f9:1c:c0:48:49:e3:e9:b0:13:31:5e:73:c6:18:
83:14:1a:55:bd:b3:97:71:c5:ad:59:85:ab:ed:6c:43:1d:69:
27:3e:42:6e:f2:92:dd:71:53:22:68:e3:e9:05:5c:96:a7:56:
8b:bf:14:48:6e:ba:f4:52:cc:10:b7:3e:14:60:57:db:56:9b:
8a:99:e5:c4:84:e4:27:9a:b4:d5:5d:a6:de:1a:97:d7:4b:3e:
3d:71:5f:6f:92:04:a3:10:c1:70:9c:81:69:b6:e5:53:0b:0e:
e6:93:3a:82:2a:87:fb:0b:5b:e5:5d:0d:f7:43:cf:79:ca:9a:
61:1d:58:b2:c3:c1:38:93:83:7a:0b:fe:f3:cd:e2:0a:06:80:
94:1d:c9:94:1b:b7:0d:63:09:aa:b1:af:ca:1d:2a:53:08:01:
07:23:31:20:4e:34:0d:81:39:9b:7b:8f:a8:de:b3:c0:68:99:
86:f8:88:53:d8:85:de:2d:c4:2c:2e:ba:8e:94:4e:f8:3f:09:
67:77:a0:bb:57:2d:33:41:69:fe:f5:23:60:cf:89:df:23:3d:
e8:bf:8c:ea:a2:2d:b6:4f:98:2c:a6:48:d8:43:82:b2:da:89:
a8:cc:2e:13:f7:04:e3:3a:cf:54:da:e4:a2:27:2d:e9:7b:ce:
08:1c:5b:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+hlGqndRCl/UNsrmHCLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjUwMTAxMDM0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWM2NzI0MzMzZTM5OWMzZGFiNTMwOGRmYzMxNWRkNmI0ZDg3NDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAZlTmk8DeuusZfcGodzZGZRSMM0
Xn7JFWLpmMEqjTF2/ToUrF5bKL3sIsC/RxZBCQVgibO9T9xF84ODeNLUYroQ+Qmv
rdXpOw/Max762dZvUbb2EW+TOcUSEuPc6rJ1fcq+6hB2uamCtgc1lYE5t7D/AzHD
+LhEiFy1NBl3K4obtLHaLhFJwjnewgx1wYj2EN7VoFKIB778soIZ7tbJLFDlWii1
dFP3vIOIi/C6DnjZhR5Sca5rZxbv4ctZaaBf2Gqwp+AXqVXYC2Ta3bw1Sz5w6QMr
lNx5IQJNznrpP6jSp0CyXpy1hVr7oS/IGyHZCcJIHD+ZmqGhqpGY/2d/fwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCHGckMz45nD2rUwjfwxXda02HQHMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvSWNaeVF6UGptY1BhdFRDTl9ERmQxclRZZEFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXZjZAwQA
XZjmMA0GCSqGSIb3DQEBCwUAA4IBAQCj25j8+RzASEnj6bATMV5zxhiDFBpVvbOX
ccWtWYWr7WxDHWknPkJu8pLdcVMiaOPpBVyWp1aLvxRIbrr0UswQtz4UYFfbVpuK
meXEhOQnmrTVXabeGpfXSz49cV9vkgSjEMFwnIFptuVTCw7mkzqCKof7C1vlXQ33
Q895ypphHViyw8E4k4N6C/7zzeIKBoCUHcmUG7cNYwmqsa/KHSpTCAEHIzEgTjQN
gTmbe4+o3rPAaJmG+IhT2IXeLcQsLrqOlE74Pwlnd6C7Vy0zQWn+9SNgz4nfIz3o
v4zqoi22T5gspkjYQ4Ky2omozC4T9wTjOs9U2uSiJy3pe84IHFsb
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:38:59 2025 by rpki-client