Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/UoPjlumjjy2wXzI1Rh8rXwGcb9Q.roa
File: UoPjlumjjy2wXzI1Rh8rXwGcb9Q.roa (raw, json)
Hash identifier: vlYfzbTopV7cCLQn7okkxfAs+tJX7YcXgR7QrHPUJXA=
Subject key identifier: 52:83:E3:96:E9:A3:8F:2D:B0:5F:32:35:46:1F:2B:5F:01:9C:6F:D4
Certificate issuer: /CN=6bc24e611c9678eddc5e67b5c32e8d443d663985
Certificate serial: 018571F0D405B6C2766373D2CC9CC688AB18
Authority key identifier: 6B:C2:4E:61:1C:96:78:ED:DC:5E:67:B5:C3:2E:8D:44:3D:66:39:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8JOYRyWeO3cXme1wy6NRD1mOYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/UoPjlumjjy2wXzI1Rh8rXwGcb9Q.roa
Signing time: Mon 02 Jan 2023 10:04:46 +0000
ROA not before: Mon 02 Jan 2023 10:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 93.157.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:d4:05:b6:c2:76:63:73:d2:cc:9c:c6:88:ab:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc24e611c9678eddc5e67b5c32e8d443d663985
Validity
Not Before: Jan 2 10:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5283e396e9a38f2db05f3235461f2b5f019c6fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b7:d0:3b:30:9c:0d:78:ca:8e:74:95:ad:8e:
ff:b1:e0:3f:b4:10:84:38:01:17:a3:f9:63:a9:c7:
46:cd:12:dc:9f:be:f3:3e:9c:13:b0:8d:24:d2:76:
dc:c4:53:88:2f:25:55:4b:93:2c:0f:8d:07:28:e6:
ec:bd:19:ba:ba:b2:61:7d:5b:36:a0:42:c4:bb:d5:
b1:2d:1d:fc:87:33:c5:b3:d8:e4:f0:a4:c2:b5:ad:
91:bd:9f:3a:57:d2:94:d4:11:c8:e3:a2:30:85:c7:
e0:c6:d0:49:cc:07:9c:fb:e4:99:76:e7:92:89:5d:
2f:91:51:50:1c:2d:32:b1:94:75:cd:5d:21:08:a3:
03:67:52:28:6f:3f:7f:d1:40:37:af:8d:bf:34:f4:
1a:44:dd:95:a3:e3:fd:85:1a:ab:83:d5:d2:7c:a9:
ff:4f:b3:c0:2b:89:c5:3a:86:ff:7f:e9:57:53:79:
a8:61:f2:25:7b:25:82:05:b7:9c:1f:93:58:8b:9f:
5d:ac:74:18:16:5c:00:8a:ee:1b:5f:4d:66:76:ad:
21:2d:2f:8e:09:9b:10:04:a2:5d:08:1d:84:e2:65:
ce:67:c5:43:9e:0a:45:99:e1:3d:1e:bb:ff:ee:33:
d5:12:8f:a6:c7:a9:74:b3:6d:2f:18:cf:70:df:47:
bb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:83:E3:96:E9:A3:8F:2D:B0:5F:32:35:46:1F:2B:5F:01:9C:6F:D4
X509v3 Authority Key Identifier:
keyid:6B:C2:4E:61:1C:96:78:ED:DC:5E:67:B5:C3:2E:8D:44:3D:66:39:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8JOYRyWeO3cXme1wy6NRD1mOYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/UoPjlumjjy2wXzI1Rh8rXwGcb9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/a8JOYRyWeO3cXme1wy6NRD1mOYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.106.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:b6:d0:34:a4:c2:30:7d:1a:53:01:54:19:fa:61:ee:3a:e0:
10:30:cb:00:94:cb:de:e8:7f:44:b0:2a:c0:69:bf:d8:b4:ab:
83:9e:fe:e1:0e:c4:d0:97:b2:96:e0:f4:7c:13:9d:38:22:ae:
d0:33:39:2b:74:b1:73:02:d1:38:a7:0d:78:10:47:fd:6d:dc:
82:f1:fd:ac:31:8a:54:a6:08:51:4b:06:f6:7b:4d:9e:ce:a4:
8a:7c:79:a5:2f:f3:49:0f:ca:ec:2f:bd:7a:31:2c:e3:5a:eb:
f9:d7:83:a7:a9:08:7b:da:1e:39:c7:1d:e6:c7:20:4d:83:43:
7a:51:98:0a:98:20:ad:9f:51:44:c2:31:71:13:52:60:fe:fe:
b2:57:25:de:ba:99:bf:e7:5c:a4:8a:54:36:f3:b4:4c:68:c1:
80:01:77:04:5f:7e:e2:c2:a2:6d:d8:ba:21:65:fe:94:60:65:
93:b6:63:18:38:8d:2f:64:8c:2c:80:30:e8:2f:29:b9:4d:40:
40:db:fb:f9:9c:fc:b3:b7:ef:1c:bb:70:01:dc:e4:b3:da:2e:
f8:f1:bb:ac:4e:36:68:21:e2:e2:f4:c0:da:b6:1e:26:19:5f:
2e:f2:61:9e:e3:63:35:f4:5e:d1:64:41:63:4d:5e:92:46:fc:
b6:b3:e4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:34 2025 by rpki-client