Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/b1FKfyjavAnCeKq7Fl6Czfn_mU0.roa
File: b1FKfyjavAnCeKq7Fl6Czfn_mU0.roa (raw, json)
Hash identifier: Yv5L5HlWMiiZjMlYc1pqMSgpbZ2Bpl6Lg0pn10g/zA4=
Subject key identifier: 6F:51:4A:7F:28:DA:BC:09:C2:78:AA:BB:16:5E:82:CD:F9:FF:99:4D
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01936E1CA098C7B4255644DD9BAC397F2060
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/b1FKfyjavAnCeKq7Fl6Czfn_mU0.roa
Signing time: Wed 27 Nov 2024 14:53:10 +0000
ROA not before: Wed 27 Nov 2024 14:53:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401479
IP address blocks: 93.127.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:1c:a0:98:c7:b4:25:56:44:dd:9b:ac:39:7f:20:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Nov 27 14:53:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f514a7f28dabc09c278aabb165e82cdf9ff994d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:95:e0:92:d4:9e:55:21:b1:96:70:61:33:65:
e6:1d:6a:99:05:ce:0c:8f:46:bb:7d:55:27:67:f8:
e7:5f:0d:c4:7a:96:b0:46:c5:da:c6:81:bb:dc:b5:
31:f9:4a:45:01:cd:c5:96:8e:a8:eb:01:a1:6d:19:
75:0a:32:db:f2:3e:d9:7e:fa:ad:f4:7c:bd:c5:d0:
5a:b6:23:9d:7e:6e:1f:1d:60:5e:4e:9d:b3:75:7f:
c8:70:c0:00:d9:6a:37:22:d1:35:ed:30:09:f3:df:
d7:d5:01:bd:01:4c:0c:a6:d8:0f:d1:16:41:1f:1c:
1d:b1:a5:06:cb:34:ef:fc:96:d4:80:cb:16:27:f9:
cd:57:c6:1f:93:7c:55:56:60:5a:54:fe:e9:70:db:
e8:e7:14:14:0b:6b:f3:22:e5:2b:fe:f0:a5:10:90:
1f:00:67:0b:6d:40:fb:28:5a:ca:db:01:97:18:42:
df:b3:5c:88:8e:c2:79:7f:03:ab:6c:2c:28:08:05:
7b:31:95:8b:9b:4d:eb:91:3a:38:0e:13:a8:9b:57:
21:cd:e6:ff:c6:95:96:2e:7e:3a:5b:0b:74:5d:32:
8f:b5:f5:7c:b9:c9:a2:2a:a8:52:2c:51:f9:a2:a7:
1c:cb:ec:56:0d:83:4c:f5:b9:c2:c3:74:bd:42:a3:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:51:4A:7F:28:DA:BC:09:C2:78:AA:BB:16:5E:82:CD:F9:FF:99:4D
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/b1FKfyjavAnCeKq7Fl6Czfn_mU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.128.0/20
Signature Algorithm: sha256WithRSAEncryption
05:ef:f1:0f:2a:40:b6:06:4b:de:17:29:10:92:7e:37:1f:a4:
af:4e:e3:d0:b0:cb:a2:f6:c6:43:fb:eb:12:e5:1e:5a:08:71:
ab:56:12:8f:0e:a8:fd:f2:99:c3:d9:b5:ed:15:cb:ac:48:48:
d0:f4:7f:75:a8:70:47:5c:f2:8e:ce:f3:06:57:8c:ca:44:2f:
a9:79:c8:0b:68:1d:50:36:b7:c5:4e:0c:8c:03:85:88:f8:d6:
39:03:68:df:2c:46:36:50:31:db:1c:41:e3:9a:e5:19:37:67:
2a:28:3e:63:25:4c:90:1e:e3:6c:3d:4c:9c:65:15:5c:0e:c2:
51:2d:ed:03:7a:3d:7a:6a:90:dd:0c:f1:fe:79:c5:71:b6:8a:
d7:1d:60:01:12:82:8a:ae:35:43:5b:6c:66:48:fe:d6:db:ad:
fb:0f:2a:a0:ff:fe:91:dd:e9:a5:20:8e:99:17:a5:c1:90:f3:
b0:9c:65:f6:c9:eb:d6:13:ce:0d:3b:a3:16:99:a2:c5:4c:d0:
b3:52:be:e6:08:3e:e5:5a:35:1a:2c:fa:26:6b:6e:2b:32:b8:
2d:f4:0a:5f:22:1b:0c:81:c2:1e:10:64:51:c6:ac:05:46:c5:
cc:26:a0:c5:bb:10:3b:f1:64:37:31:64:a3:9e:f4:8e:b9:42:
22:89:60:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:21:28 2025 by rpki-client