Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/RyWpa5AwlJ76QavX65epV7ArtDA.roa
File: RyWpa5AwlJ76QavX65epV7ArtDA.roa (raw, json)
Hash identifier: poh7oSCsoKwx4EcrbR3E10tK3UevjE23JeUSQP4zTzc=
Subject key identifier: 47:25:A9:6B:90:30:94:9E:FA:41:AB:D7:EB:97:A9:57:B0:2B:B4:30
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA46EF00EB1A06849D0DA6949132C7
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/RyWpa5AwlJ76QavX65epV7ArtDA.roa
Signing time: Wed 01 Jan 2025 03:48:03 +0000
ROA not before: Wed 01 Jan 2025 03:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35793
IP address blocks: 93.127.161.0/24 maxlen: 24
93.127.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:46:ef:00:eb:1a:06:84:9d:0d:a6:94:91:32:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4725a96b9030949efa41abd7eb97a957b02bb430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:e1:c5:03:e6:5b:e6:ca:b6:37:48:86:3d:
95:80:f6:5f:15:b6:fc:8a:9e:ff:25:86:35:04:4d:
e9:b2:d4:0b:c9:b3:4e:bf:dc:bb:a8:1b:9e:c5:6a:
aa:67:3f:8f:42:4b:a6:7c:fe:a1:f4:9a:44:01:d7:
19:45:ec:ff:91:f1:b3:bb:d4:41:bd:bf:c9:76:f6:
22:be:35:57:c0:eb:bd:35:7f:b3:ab:37:6a:d7:29:
71:db:95:55:d0:98:d3:70:41:94:b2:33:4d:28:db:
05:0c:13:67:68:b0:08:e8:b9:04:4b:2b:1e:69:70:
6a:e4:03:8b:0c:59:5e:7d:ae:3a:13:a4:dd:fb:af:
3b:d8:a0:ea:94:16:64:a0:c8:49:d2:14:86:9e:bb:
16:67:18:18:5c:aa:82:ca:b4:e7:99:c4:33:de:44:
10:04:bc:d1:ea:2b:8d:1b:5a:f3:d2:33:c0:d8:01:
63:09:ad:f3:28:b8:22:e5:22:c5:36:94:34:13:79:
45:ec:1e:0c:58:5f:4b:c7:67:ab:fe:33:ff:83:1f:
ed:4c:41:ec:a1:4e:7d:43:c1:3e:c7:86:4a:d2:44:
c9:f3:62:cf:2f:b8:aa:da:fd:b2:c9:ad:ec:7c:66:
37:03:93:44:13:a2:10:c0:7a:9f:e8:7a:c2:fa:ae:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:25:A9:6B:90:30:94:9E:FA:41:AB:D7:EB:97:A9:57:B0:2B:B4:30
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/RyWpa5AwlJ76QavX65epV7ArtDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.161.0/24
93.127.164.0/24
Signature Algorithm: sha256WithRSAEncryption
95:6b:ac:99:9d:4c:77:cb:11:ae:3c:d6:3a:43:c3:d6:74:5f:
08:aa:40:39:5b:ff:8f:0b:c2:27:d7:b1:9e:f6:5a:83:a4:5b:
e9:6f:e1:61:ec:97:4c:2d:0e:ff:a6:0b:2b:99:a2:93:31:92:
7d:1f:25:4f:75:9d:dd:04:4b:bf:17:99:c7:ce:c7:e4:86:64:
18:7e:b5:a1:1c:0a:5d:2a:d8:92:d5:64:59:dc:0c:06:2e:dc:
61:a7:13:d3:b4:59:21:15:86:50:b2:db:68:57:3e:4d:45:da:
d2:9c:dd:06:94:df:a4:a9:20:f0:ef:fd:5f:53:ab:47:5a:d6:
09:9e:49:e4:67:20:98:f7:ed:cd:92:32:3d:07:e9:69:fe:70:
74:9a:5b:16:d3:d5:41:3a:cb:4f:c3:11:5b:ea:91:82:d9:9f:
a5:4f:7a:4d:bf:12:20:1b:4d:5a:b9:98:38:c4:0a:e4:06:b4:
fa:d9:ed:5c:18:cd:13:c6:3a:51:65:35:6c:02:1e:01:c2:fe:
b9:cb:82:ea:ba:1f:88:92:7f:1c:96:02:31:ff:71:bb:17:a3:
02:d9:3c:f0:a2:7c:c1:08:18:c1:d6:20:7f:98:41:03:c6:0c:
52:36:bb:6b:cc:cd:bd:6c:d2:0a:08:01:c6:6a:2f:0c:13:1b:
dd:2d:a4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:06 2025 by rpki-client