Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/feNsLBsDel38NmmfKB8qMn4imAQ.roa
File: feNsLBsDel38NmmfKB8qMn4imAQ.roa (raw, json)
Hash identifier: BAz+U+fuCF2s7LCZtZrcufgqyHhgFh0npHODOS0uUOI=
Subject key identifier: 7D:E3:6C:2C:1B:03:7A:5D:FC:36:69:9F:28:1F:2A:32:7E:22:98:04
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 0195AF3C75000C02CE41C0009DBD25F356CE
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/feNsLBsDel38NmmfKB8qMn4imAQ.roa
Signing time: Wed 19 Mar 2025 16:28:49 +0000
ROA not before: Wed 19 Mar 2025 16:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214652
IP address blocks: 93.88.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:3c:75:00:0c:02:ce:41:c0:00:9d:bd:25:f3:56:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Mar 19 16:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7de36c2c1b037a5dfc36699f281f2a327e229804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:b9:b4:07:e5:21:6b:9b:68:ff:b8:a7:be:
64:53:87:6e:3f:ef:5d:d9:4a:90:36:bc:6a:58:16:
26:f0:51:46:d2:34:9f:40:8d:6a:44:78:29:5f:dd:
da:ce:51:10:bc:38:8b:7b:47:0c:f5:55:c0:fe:79:
2e:ed:1f:28:3b:dd:cf:51:2d:56:2d:06:c8:4a:03:
28:29:cb:7d:25:64:b1:d7:e9:d5:38:98:ad:9c:29:
23:e6:63:69:90:6a:e0:33:1e:f5:61:8d:4e:63:c2:
80:bc:ce:a4:45:11:cb:45:e6:ae:a9:92:32:c3:87:
46:72:bf:19:55:e5:ee:48:fc:d5:34:5b:a0:11:d7:
60:ad:33:d7:4a:d6:14:be:5b:0d:c5:0e:b9:62:21:
29:79:1a:3c:28:05:41:18:0e:48:b5:5d:b0:b6:8a:
af:09:a8:61:ab:37:c1:d6:a7:9d:c6:22:ad:27:52:
3e:dc:48:54:22:3c:ab:b3:00:13:6f:24:87:9f:60:
07:26:a6:f7:7a:a6:93:58:6f:8c:0f:3c:59:44:61:
51:ec:b5:24:37:1f:d9:0f:d5:b9:05:ae:8b:a2:e9:
4e:4a:b5:ea:6a:e9:57:06:13:a7:72:af:ed:08:d8:
44:c0:70:a9:42:fa:42:9e:7e:06:ed:b6:b6:68:e5:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E3:6C:2C:1B:03:7A:5D:FC:36:69:9F:28:1F:2A:32:7E:22:98:04
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/feNsLBsDel38NmmfKB8qMn4imAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.144.0/21
Signature Algorithm: sha256WithRSAEncryption
57:1c:dd:dd:4f:97:f1:e7:a6:4e:75:f2:70:49:77:25:d3:85:
1c:ad:79:7c:69:49:13:83:c7:b7:96:69:3c:9d:6d:8c:55:47:
25:3f:db:df:32:70:11:29:84:24:d3:d1:fb:ce:46:78:72:55:
2e:14:de:92:30:e9:5e:0d:86:6a:a7:e9:49:43:56:0d:2e:1e:
bf:7e:a5:dd:cb:75:41:77:c7:ce:58:aa:67:e2:b8:ef:94:dd:
23:15:d1:28:d6:35:86:69:8d:f1:41:36:23:f7:27:01:be:0f:
82:d5:9c:d9:ea:54:a0:c5:15:bb:cc:4a:be:63:15:02:1c:7b:
51:9a:23:fc:65:d7:ea:09:38:00:b5:bb:47:bd:33:c7:fe:7f:
9d:ec:92:58:3d:56:8f:1e:27:62:33:01:bd:af:3b:17:a7:49:
aa:16:a9:3d:4e:e5:30:0e:54:c8:83:ba:77:8e:19:d3:10:70:
8e:32:ef:72:94:eb:fb:80:59:69:6d:5c:95:05:67:44:ee:52:
e9:2b:bc:78:96:f5:7a:f2:e0:72:ba:87:d9:48:fb:e0:85:0c:
e4:3f:bd:7b:7f:54:39:cf:48:01:04:26:41:00:37:fb:20:d3:
ee:1f:b8:61:3d:2a:d1:b3:54:c8:75:a1:cd:f5:42:84:ad:8d:
07:26:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:03:07 2025 by rpki-client