Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/jH3rT7dSiZYu7vh-PYFuC3E4ZTo.roa
File: jH3rT7dSiZYu7vh-PYFuC3E4ZTo.roa (raw, json)
Hash identifier: I4FjMEfB3yTLRfyyesu6Umi69nZHpp+e4vqHL8M5PVI=
Subject key identifier: 8C:7D:EB:4F:B7:52:89:96:2E:EE:F8:7E:3D:81:6E:0B:71:38:65:3A
Certificate issuer: /CN=464266360095674d95b70730b313264232c02ba0
Certificate serial: 0185E340420AF9E4078AE1F3913AD9AED1F9
Authority key identifier: 46:42:66:36:00:95:67:4D:95:B7:07:30:B3:13:26:42:32:C0:2B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkJmNgCVZ02VtwcwsxMmQjLAK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/jH3rT7dSiZYu7vh-PYFuC3E4ZTo.roa
Signing time: Tue 24 Jan 2023 10:08:37 +0000
ROA not before: Tue 24 Jan 2023 10:08:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59569
IP address blocks: 93.157.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:40:42:0a:f9:e4:07:8a:e1:f3:91:3a:d9:ae:d1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464266360095674d95b70730b313264232c02ba0
Validity
Not Before: Jan 24 10:08:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c7deb4fb75289962eeef87e3d816e0b7138653a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:40:22:4b:ae:b4:e7:4a:84:7a:ae:b2:ff:76:
2c:40:53:dc:07:8a:b3:7e:a4:57:57:f1:a0:37:ed:
d3:de:be:ed:27:45:8d:40:cd:3a:e8:b7:e2:b4:36:
8b:10:42:54:5e:e0:9c:53:fa:3c:fd:e4:de:d8:2a:
a4:54:1b:14:6d:ec:08:c9:73:2d:25:5a:f2:d9:30:
12:32:5d:1a:be:65:79:64:a1:3e:56:22:ac:53:b4:
b2:99:dd:a5:45:4b:d0:4b:90:87:ea:49:52:06:57:
87:5d:49:a8:e7:e1:0a:b8:2c:bd:13:12:80:b1:19:
00:68:2d:0a:09:2f:9c:bf:46:e0:74:23:b9:76:46:
70:d5:94:04:80:87:c2:30:54:e8:76:22:f8:d1:80:
58:b5:9e:ea:ac:3b:be:b8:32:74:c5:ca:da:db:fb:
96:64:f0:b8:38:75:f6:41:11:6e:92:8a:a6:4c:84:
e1:ee:f5:46:03:ca:61:7a:65:3c:51:c1:01:6c:16:
d5:16:07:81:71:5d:1b:32:a6:6a:ff:ed:79:2b:b8:
3f:57:92:63:33:a7:23:29:d6:fa:2d:98:fc:91:5f:
95:86:fe:70:51:4f:1b:04:3d:d8:7c:9b:fa:0a:b6:
bc:56:dd:ef:c1:82:37:91:e3:18:b0:a8:94:ca:05:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:EB:4F:B7:52:89:96:2E:EE:F8:7E:3D:81:6E:0B:71:38:65:3A
X509v3 Authority Key Identifier:
keyid:46:42:66:36:00:95:67:4D:95:B7:07:30:B3:13:26:42:32:C0:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkJmNgCVZ02VtwcwsxMmQjLAK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/jH3rT7dSiZYu7vh-PYFuC3E4ZTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/adddb0-12ff-4ab7-ae61-e2ff4654b933/1/RkJmNgCVZ02VtwcwsxMmQjLAK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.105.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:8d:81:39:8a:ac:e4:94:c9:30:24:c9:5d:9b:09:8c:a1:59:
7b:01:b5:3c:a8:41:6b:78:20:5c:f6:c1:94:9c:d2:62:c4:b2:
02:1d:d5:d7:91:57:6b:f4:e4:bb:e6:f4:2c:73:d2:a7:07:07:
e5:8c:08:cc:0b:7e:aa:c8:bd:68:2d:c1:38:58:04:a9:e8:3c:
cf:41:5b:aa:9d:e0:3e:bd:50:b2:ea:d5:85:d4:b5:76:59:af:
ac:4f:bc:92:d4:0f:98:0e:1a:2a:3b:a1:f5:01:2c:d7:7c:b9:
9c:e3:d9:dc:96:49:ef:19:f4:1d:4f:3e:31:29:9e:5b:8b:dd:
c8:6d:f2:4e:9d:c5:27:96:c3:31:23:1e:28:9a:9d:ac:2d:9a:
e5:b0:7e:78:14:b9:37:ee:b3:ab:7f:ac:2f:34:8a:82:ea:27:
7e:a1:63:1b:3f:e6:c6:0e:78:cf:17:a6:ae:aa:94:13:81:3e:
d2:e9:81:6a:ad:2f:b2:00:f0:6b:3c:b8:fe:ca:db:55:78:b7:
de:a2:41:a1:8c:83:26:35:88:40:16:57:99:a5:e5:bc:15:bf:
9c:d7:04:de:b7:05:4f:84:d4:ce:fe:10:fb:41:89:91:4d:e1:
18:76:f8:78:32:6b:fa:a0:a9:8e:71:95:13:34:e2:2d:e1:4d:
0f:14:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:10 2025 by rpki-client