Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/OWzb4ggS3WYPlPzfMs0QayOJ5zU.roa
File: OWzb4ggS3WYPlPzfMs0QayOJ5zU.roa (raw, json)
Hash identifier: JrHf+aD64JR/isPOpAoIq5MDQjDvkP8ZdcvMiGcr85E=
Subject key identifier: 39:6C:DB:E2:08:12:DD:66:0F:94:FC:DF:32:CD:10:6B:23:89:E7:35
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA44C4AEDA54F5767934A4F2562D38
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/OWzb4ggS3WYPlPzfMs0QayOJ5zU.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13213
IP address blocks: 93.127.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:44:c4:ae:da:54:f5:76:79:34:a4:f2:56:2d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=396cdbe20812dd660f94fcdf32cd106b2389e735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:28:d6:e2:30:af:f2:c0:fb:5a:26:e9:61:60:
d9:75:e3:6b:c1:34:a2:bd:0b:5f:e9:75:ea:5c:32:
46:a8:17:bc:1a:aa:0a:93:c1:91:f8:1a:fb:b5:77:
51:b9:a6:83:80:c9:c0:ae:a2:27:be:c5:d3:c4:7d:
0d:28:ca:1c:66:1f:fb:19:6d:f9:f0:0b:70:ee:8c:
ce:f1:8a:2e:e1:96:cf:cf:92:a4:70:39:77:33:5c:
51:39:18:24:60:d6:59:7d:57:06:16:2d:9e:fe:37:
75:6a:b1:82:4a:57:2e:e5:99:5a:08:1b:e8:ac:10:
9e:17:8b:e1:d2:df:a4:6d:43:10:0e:37:4d:77:d4:
58:69:db:43:6a:35:dd:5d:53:2b:5d:75:75:ea:e6:
2a:00:bb:fa:63:e9:3a:f9:72:dc:8a:35:4d:f7:de:
bf:90:31:97:0e:80:24:61:fb:a5:b4:2f:e3:56:57:
f7:bf:31:ca:18:04:11:a0:c1:c8:5b:a2:e5:9d:30:
75:7f:f9:5d:8a:df:a0:ca:1a:65:25:50:e2:d2:e4:
f0:a0:bd:c0:81:e4:e5:e4:8e:72:10:71:2c:c9:80:
b2:22:fc:59:8c:63:2e:62:11:cc:87:d3:08:df:3a:
ed:30:5f:0f:43:66:49:7d:37:c2:63:91:a9:1d:8a:
6d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:DB:E2:08:12:DD:66:0F:94:FC:DF:32:CD:10:6B:23:89:E7:35
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/OWzb4ggS3WYPlPzfMs0QayOJ5zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.170.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:5a:ee:bb:ee:3d:05:34:63:06:a1:c6:a6:1d:ea:05:cc:1a:
ef:ef:22:24:a7:5f:cd:5d:1c:43:c2:e8:64:73:46:b5:e9:83:
a2:c2:26:b3:1c:df:a2:32:7b:54:c0:89:38:31:92:7c:05:b2:
a8:10:fb:c8:b8:4f:a2:4f:f1:37:68:54:6b:18:8a:98:40:ea:
f6:c2:6e:24:c5:b7:88:b4:b6:ca:08:8d:ab:01:5e:c9:1a:35:
bf:05:1e:36:1c:46:99:90:11:fc:b4:ea:41:6f:e2:a7:6c:24:
9c:62:e6:76:94:af:9f:c4:03:90:09:a7:1d:96:39:10:5e:05:
0d:73:2d:e4:98:62:37:54:9e:b3:35:80:10:e6:fa:28:1b:0b:
27:be:0e:6d:95:20:52:e8:d8:8d:d8:cd:59:ae:98:cb:68:b9:
86:77:1b:17:03:59:2a:54:7c:0c:cc:57:5d:ed:e5:6a:aa:eb:
97:4f:96:8b:a0:b5:0f:8f:f7:23:d0:36:63:a2:b1:32:c3:7e:
c0:5e:1f:12:f8:57:e0:d7:b3:af:a4:af:2c:06:9d:90:cb:40:
0b:62:4b:f7:4a:c1:0a:64:eb:82:26:74:b4:c2:82:b9:71:7d:
70:af:6d:c2:40:2c:39:59:4b:ef:19:eb:59:74:1b:45:b2:c8:
34:eb:71:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:49:46 2025 by rpki-client