Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/igZIf6qww3ioX-MlBp94m_EHBQ0.roa
File: igZIf6qww3ioX-MlBp94m_EHBQ0.roa (raw, json)
Hash identifier: jTrsNlI3B5XuLk970rocPV/x/98cyaNaeeDcktw5q04=
Subject key identifier: 8A:06:48:7F:AA:B0:C3:78:A8:5F:E3:25:06:9F:78:9B:F1:07:05:0D
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01941FFA16F793408C51E055A0E1C442A2A8
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/igZIf6qww3ioX-MlBp94m_EHBQ0.roa
Signing time: Wed 01 Jan 2025 03:47:51 +0000
ROA not before: Wed 01 Jan 2025 03:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40676
IP address blocks: 93.152.218.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:16:f7:93:40:8c:51:e0:55:a0:e1:c4:42:a2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jan 1 03:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a06487faab0c378a85fe325069f789bf107050d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ed:64:4c:78:9b:d6:4f:c3:67:86:dc:33:7b:
b5:58:d0:20:88:0b:f0:6c:e7:a1:01:8d:8f:c9:35:
39:3a:79:e5:4f:d7:65:4c:38:ca:7a:1f:12:48:23:
0d:30:e1:5e:5f:ca:ac:42:23:7e:59:40:1c:f4:82:
6e:78:cb:27:60:01:0e:d5:5a:0e:b7:66:30:a4:34:
1a:41:7a:a6:f9:8c:78:86:35:ae:07:2a:f1:2f:c2:
3d:58:01:cb:85:d5:71:85:98:8e:f9:01:8c:18:d1:
e1:89:c5:7c:be:1a:10:82:77:8b:a6:7f:25:70:b8:
7d:b3:7e:57:54:5a:41:2e:bf:b3:2a:bf:dc:b9:53:
96:44:46:1f:bb:ae:e9:29:a1:c1:3b:e2:9f:e1:a7:
07:01:0f:bc:12:e6:64:ce:94:32:3f:a8:41:e2:12:
d5:d1:ff:4e:5e:65:cf:65:d1:ea:ae:b4:8e:98:48:
80:71:4c:75:de:fc:97:50:85:35:20:2c:67:0e:c5:
cd:a7:d7:f8:47:9a:6f:1c:8e:79:d9:4b:a0:05:44:
77:04:b0:4d:d3:7b:7c:0b:0c:ee:c1:4d:a6:cf:89:
4e:9d:ef:50:27:2d:72:94:5c:29:0d:81:fe:fa:e6:
7d:ee:9a:2f:00:b1:9e:6b:2d:8f:27:ab:dd:78:4d:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:06:48:7F:AA:B0:C3:78:A8:5F:E3:25:06:9F:78:9B:F1:07:05:0D
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/igZIf6qww3ioX-MlBp94m_EHBQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.218.0/24
93.152.222.0/24
93.152.226.0/23
94.26.89.0/24
212.102.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:dd:fd:c0:3c:2f:b5:2d:5c:e1:58:16:ce:07:47:81:2d:81:
01:74:c5:91:f9:2b:7c:d0:b8:0a:94:ca:6d:c9:b7:1d:dc:65:
d4:fb:ce:37:63:51:cd:93:b5:ea:29:47:11:7b:fd:9a:dc:92:
74:25:66:80:d9:41:85:44:5d:67:1a:50:dc:49:be:38:fa:a0:
cd:c5:e3:20:8e:7b:e2:45:c0:c4:4f:3b:98:d8:41:a8:79:d8:
f5:94:12:95:c5:e3:d2:37:75:0c:21:d7:d8:cf:b7:2a:4f:d7:
94:64:82:e4:4c:b9:fb:63:c2:e3:50:8f:68:dc:e5:7c:47:68:
cc:25:ac:36:c9:87:85:5d:be:57:27:cc:8f:81:f0:8b:2e:55:
cc:7b:a3:34:5b:12:9e:e3:5b:ff:c0:b9:36:61:99:c3:43:3f:
c9:89:72:d6:c8:21:9d:c3:88:f0:14:99:8a:39:50:ee:e1:a0:
3c:e2:6c:50:26:ed:64:af:81:c3:38:44:11:0c:5b:05:dd:42:
a5:c5:f1:94:a7:c5:da:59:f1:71:7c:0b:aa:c5:6f:39:a1:dc:
de:f2:aa:e6:ca:81:5a:47:b0:85:6f:0c:2b:6a:91:25:6f:4b:
6a:10:c8:2d:41:11:01:53:9b:b8:dd:5e:e6:64:48:da:df:63:
5e:39:a7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:57:30 2025 by rpki-client