Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/8GCHqoEHcyItcxDV1vWyFCQfl8k.roa
File: 8GCHqoEHcyItcxDV1vWyFCQfl8k.roa (raw, json)
Hash identifier: sVA8NYuVOhlFQexuHM180wvZMhxAWYRWNkLKswfoJbE=
Subject key identifier: F0:60:87:AA:81:07:73:22:2D:73:10:D5:D6:F5:B2:14:24:1F:97:C9
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA4D327F56293779230793056EB715
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/8GCHqoEHcyItcxDV1vWyFCQfl8k.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 93.127.176.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4d:32:7f:56:29:37:79:23:07:93:05:6e:b7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f06087aa810773222d7310d5d6f5b214241f97c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a5:46:de:3a:a5:ec:52:33:cd:6f:5c:9b:62:
0b:b7:d1:3c:26:32:52:8b:5c:fc:72:92:5d:9e:2f:
2a:54:98:03:6e:b6:26:24:96:89:af:d1:9b:b4:8e:
4c:51:47:c2:27:10:85:1f:4b:d2:71:10:81:7b:db:
fb:1f:52:e0:7e:89:5a:e5:c1:3a:93:c8:f2:64:5e:
11:2c:40:12:7c:24:5e:cb:b9:6a:52:81:b3:fb:26:
02:f4:98:09:fd:8d:6e:e9:2e:ae:c0:f3:95:a2:5e:
92:ce:62:be:74:b3:4c:dc:0a:7e:4a:02:2b:e4:96:
0a:1f:e5:3e:7b:71:75:7b:21:d1:01:f5:66:a6:f3:
e0:88:6e:fd:d1:c5:72:08:91:0e:33:e9:33:42:15:
b6:19:10:45:28:26:00:6a:3e:dd:23:77:00:94:3b:
0b:54:b1:42:15:a5:1a:99:e0:4a:ac:f1:c0:b7:30:
da:14:ef:d5:29:1b:f1:57:95:f6:4a:c0:8d:81:4d:
2a:f4:b6:6d:08:2b:10:ca:e0:73:33:2c:72:c6:a9:
72:89:5e:25:9f:28:40:5c:85:b9:b7:34:2f:ec:f5:
36:3a:34:2c:23:25:0a:24:0b:d9:80:cd:f0:19:2c:
82:10:fd:10:2e:8f:b5:2a:84:5f:a5:cd:f6:ac:7c:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:60:87:AA:81:07:73:22:2D:73:10:D5:D6:F5:B2:14:24:1F:97:C9
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/8GCHqoEHcyItcxDV1vWyFCQfl8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.176.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:a5:9c:aa:fc:47:16:46:7c:bc:d4:9f:f7:54:71:7c:59:9a:
96:e3:21:3d:60:7f:36:17:e2:8e:b9:2b:34:12:06:c1:56:97:
2a:4a:5b:27:78:56:74:81:50:38:b1:47:ed:6a:94:74:47:e9:
26:cd:c2:98:da:46:49:e4:b1:f5:72:a8:8e:a4:08:59:d8:98:
e3:3a:0a:ba:47:84:6b:08:a1:df:e3:68:0e:ed:cf:73:87:d9:
c8:10:93:47:f1:fb:cb:97:cf:33:38:6e:6e:a0:11:09:a6:a9:
e0:cd:ef:e1:c4:84:3f:e9:bd:76:92:ad:67:b6:d5:d6:4d:22:
8b:07:5b:fc:3b:36:b0:28:a3:b8:3d:83:63:cc:7e:21:53:17:
a8:b7:e2:96:26:44:44:e6:29:2a:a0:8e:12:00:4f:b9:ba:80:
b9:ee:c6:62:ea:a8:11:4f:ac:e2:4c:18:0d:16:d4:ca:f3:84:
ef:ab:bc:e6:3d:a8:14:7c:b5:ea:f5:80:fd:0e:fc:2e:be:4c:
6c:2b:92:59:f2:40:0d:0a:b1:b4:78:14:a1:db:c9:b5:1b:48:
bd:40:22:5b:1f:5d:78:d4:1a:7e:f5:b1:95:fa:23:12:b1:dd:
2e:79:57:35:f6:16:04:84:75:a7:1d:03:75:1d:72:ee:d9:15:
cf:e7:9d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:44 2025 by rpki-client