Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/azkF2Ap-giumlt8jSul27jtQtpg.roa
File: azkF2Ap-giumlt8jSul27jtQtpg.roa (raw, json)
Hash identifier: nA7e0BDUZhnxKGTg/vFU852lvj6WQMas704NAbC2Ytc=
Subject key identifier: 6B:39:05:D8:0A:7E:82:2B:A6:96:DF:23:4A:E9:76:EE:3B:50:B6:98
Certificate issuer: /CN=6bc24e611c9678eddc5e67b5c32e8d443d663985
Certificate serial: 018A705244A424E66537FCA09E555CFA0172
Authority key identifier: 6B:C2:4E:61:1C:96:78:ED:DC:5E:67:B5:C3:2E:8D:44:3D:66:39:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8JOYRyWeO3cXme1wy6NRD1mOYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/azkF2Ap-giumlt8jSul27jtQtpg.roa
Signing time: Thu 07 Sep 2023 15:45:54 +0000
ROA not before: Thu 07 Sep 2023 15:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 93.157.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:70:52:44:a4:24:e6:65:37:fc:a0:9e:55:5c:fa:01:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc24e611c9678eddc5e67b5c32e8d443d663985
Validity
Not Before: Sep 7 15:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b3905d80a7e822ba696df234ae976ee3b50b698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:72:09:27:cb:1a:f1:ee:60:7f:eb:f3:f0:
4d:8e:c2:67:56:b0:4c:24:a5:03:64:0f:31:74:e8:
c3:36:eb:7f:6b:9b:df:82:b1:2b:04:6b:01:22:c6:
e3:ea:72:18:fa:90:02:9b:2b:93:d9:db:50:cd:70:
fd:bf:7e:33:c7:5c:5a:7e:a2:b7:b0:49:94:04:f8:
c4:71:43:b1:5d:31:68:a1:1c:a2:56:73:43:d8:53:
b7:1a:fc:5b:3e:97:ba:c4:ab:3b:b3:06:b9:9d:4a:
2b:f2:78:e9:7b:e1:8f:5f:61:9f:bd:2c:ea:74:5b:
ad:2b:c2:82:1d:92:97:27:d1:30:c0:44:11:71:92:
18:f8:55:f8:6a:16:81:60:a3:88:01:7e:48:65:38:
6c:a4:5d:77:e8:a6:b4:82:7c:41:ad:d5:ec:76:7c:
ad:75:9b:b8:c0:6f:33:be:57:fe:07:3e:e8:8e:8e:
33:1d:de:b9:58:e7:a9:ba:af:32:25:de:e2:17:11:
01:ad:24:a8:4c:a1:7e:96:b3:6b:c4:82:12:0c:7b:
b5:61:b6:a1:26:f5:62:1a:dd:bd:24:b1:b5:11:ee:
13:e9:c2:9b:ae:f9:da:25:d5:e4:36:e9:4f:7e:ea:
6a:f2:28:18:9b:08:de:d0:15:7a:ae:11:73:36:d5:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:39:05:D8:0A:7E:82:2B:A6:96:DF:23:4A:E9:76:EE:3B:50:B6:98
X509v3 Authority Key Identifier:
keyid:6B:C2:4E:61:1C:96:78:ED:DC:5E:67:B5:C3:2E:8D:44:3D:66:39:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8JOYRyWeO3cXme1wy6NRD1mOYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/azkF2Ap-giumlt8jSul27jtQtpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a06d5d-9d38-46e0-82d8-fb5bd87431cc/1/a8JOYRyWeO3cXme1wy6NRD1mOYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.106.0/24
Signature Algorithm: sha256WithRSAEncryption
27:24:8d:81:18:ce:7c:14:fb:f4:4f:14:f6:ae:76:6b:85:a3:
e6:e0:74:f5:72:60:8e:e9:40:a8:eb:6c:c3:70:ac:fb:03:60:
72:9f:63:44:eb:e5:40:35:54:b2:18:12:0f:26:10:6f:f8:63:
d4:eb:b4:c2:85:94:87:21:fc:b0:79:34:88:97:2d:5f:9d:b5:
31:a3:ab:25:2b:96:26:da:b6:ba:bb:93:98:7a:d6:ea:e0:74:
df:d4:0d:9d:9e:ea:42:41:ac:d4:ce:48:96:2a:06:8b:30:36:
dc:6e:f4:2c:8b:bd:5b:a9:58:35:1a:75:8b:99:6f:da:d1:48:
03:40:4b:95:7e:16:58:71:6b:23:bb:fe:9b:4f:54:26:12:fb:
65:04:7f:54:1f:b9:fb:ad:a9:b3:b8:c6:f0:3b:26:f5:8c:4e:
86:4e:51:ac:1d:58:9f:b0:39:f2:ab:c7:e1:23:c1:2e:17:91:
11:a7:1f:52:73:c8:0b:00:3f:5c:3e:20:80:c2:0c:8d:94:5f:
a6:fc:bf:64:03:b1:fa:a9:70:6c:cb:dd:22:39:38:24:5e:1f:
08:b7:bf:cf:72:03:f2:f6:bf:e3:7d:ad:a0:ed:f0:7c:ab:25:
56:ad:cf:cd:45:17:9d:7e:ae:40:f6:02:25:25:d8:9b:1a:27:
e9:f2:c2:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpwUkSkJOZlN/ygnlVc+gFyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzI0ZTYxMWM5Njc4ZWRkYzVlNjdiNWMzMmU4ZDQ0M2Q2
NjM5ODUwHhcNMjMwOTA3MTU0NTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjM5MDVkODBhN2U4MjJiYTY5NmRmMjM0YWU5NzZlZTNiNTBiNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuepyCSfLGvHuYH/r8/BNjsJnVrBM
JKUDZA8xdOjDNut/a5vfgrErBGsBIsbj6nIY+pACmyuT2dtQzXD9v34zx1xafqK3
sEmUBPjEcUOxXTFooRyiVnND2FO3GvxbPpe6xKs7swa5nUor8njpe+GPX2GfvSzq
dFutK8KCHZKXJ9EwwEQRcZIY+FX4ahaBYKOIAX5IZThspF136Ka0gnxBrdXsdnyt
dZu4wG8zvlf+Bz7ojo4zHd65WOepuq8yJd7iFxEBrSSoTKF+lrNrxIISDHu1Ybah
JvViGt29JLG1Ee4T6cKbrvnaJdXkNulPfupq8igYmwje0BV6rhFzNtVc3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGs5BdgKfoIrppbfI0rpdu47ULaYMB8GA1UdIwQY
MBaAFGvCTmEclnjt3F5ntcMujUQ9ZjmFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThKT1lSeVdlTzNjWG1lMXd5Nk5SRDFtT1lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hMDZkNWQtOWQzOC00NmUwLTgyZDgt
ZmI1YmQ4NzQzMWNjLzEvYXprRjJBcC1naXVtbHQ4alN1bDI3anRRdHBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9hMDZkNWQtOWQzOC00NmUwLTgyZDgtZmI1YmQ4NzQzMWNj
LzEvYThKT1lSeVdlTzNjWG1lMXd5Nk5SRDFtT1lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ1qMA0G
CSqGSIb3DQEBCwUAA4IBAQAnJI2BGM58FPv0TxT2rnZrhaPm4HT1cmCO6UCo62zD
cKz7A2Byn2NE6+VANVSyGBIPJhBv+GPU67TChZSHIfyweTSIly1fnbUxo6slK5Ym
2ra6u5OYetbq4HTf1A2dnupCQazUzkiWKgaLMDbcbvQsi71bqVg1GnWLmW/a0UgD
QEuVfhZYcWsju/6bT1QmEvtlBH9UH7n7ramzuMbwOyb1jE6GTlGsHVifsDnyq8fh
I8EuF5ERpx9Sc8gLAD9cPiCAwgyNlF+m/L9kA7H6qXBsy90iOTgkXh8It7/PcgPy
9r/jfa2g7fB8qyVWrc/NRRedfq5A9gIlJdibGifp8sIi
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:00 2025 by rpki-client