Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/jeYEM2oJmWrFbwXhif3p6sfqHWg.roa
File: jeYEM2oJmWrFbwXhif3p6sfqHWg.roa (raw, json)
Hash identifier: YO/hoAbMlW3taF9qX0y/Kd2llZvoec4lCSNhm8CayTU=
Subject key identifier: 8D:E6:04:33:6A:09:99:6A:C5:6F:05:E1:89:FD:E9:EA:C7:EA:1D:68
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 0193DF64C74E2D11ED9DB2D9CB8266625B9B
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/jeYEM2oJmWrFbwXhif3p6sfqHWg.roa
Signing time: Thu 19 Dec 2024 14:49:03 +0000
ROA not before: Thu 19 Dec 2024 14:49:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 93.127.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:df:64:c7:4e:2d:11:ed:9d:b2:d9:cb:82:66:62:5b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Dec 19 14:49:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8de604336a09996ac56f05e189fde9eac7ea1d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:e5:8c:4c:2a:17:9b:3d:fe:b8:a1:77:d5:
27:b2:d5:f0:b0:6f:4a:89:22:3d:14:fa:ad:6b:ff:
0a:28:fc:7d:81:bc:c8:81:08:e2:cb:5a:de:df:c5:
c3:68:4d:b0:31:34:5a:fc:6a:88:44:bb:3a:42:24:
df:c7:ef:22:ed:89:74:14:ec:7e:67:d3:e0:cb:e1:
5c:f4:36:06:5e:1c:ba:62:cc:9c:30:7b:42:74:9e:
5e:20:57:72:ff:5c:07:fb:64:e6:f5:53:74:8b:24:
9f:45:bb:35:a4:02:be:cb:3d:4b:4e:14:2b:7f:a1:
74:81:1a:a7:18:6e:45:61:a5:8b:10:ce:bc:a1:d6:
76:39:e8:34:b5:32:e0:a7:ea:59:93:21:27:73:ef:
71:d1:a2:50:c7:a3:c1:66:5d:9b:3e:cb:72:16:ba:
bb:ae:0b:a4:c5:10:8e:d9:31:28:bc:bf:ea:58:85:
ab:d6:19:17:28:2c:24:a2:84:31:1c:e8:b6:d1:17:
ba:c8:fd:d8:1a:f5:08:5b:ff:b5:87:a4:a1:c6:64:
da:a0:25:51:a2:34:e1:dc:cb:54:65:53:1f:19:58:
1f:0b:a4:43:1c:42:96:b4:f7:a0:13:b0:ce:3d:dd:
b7:e3:9b:98:a2:37:3b:c7:60:67:77:44:79:40:b0:
22:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E6:04:33:6A:09:99:6A:C5:6F:05:E1:89:FD:E9:EA:C7:EA:1D:68
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/jeYEM2oJmWrFbwXhif3p6sfqHWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.156.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:61:c1:2e:56:fa:14:6d:1a:a5:79:f7:69:70:be:28:8c:c0:
da:0c:bc:87:97:c6:0c:5f:30:5e:05:15:96:2f:e1:e2:17:b2:
e5:c1:ad:75:44:6f:44:b9:cc:67:08:c2:26:03:43:fb:15:4b:
26:e1:14:9f:a4:12:33:81:ff:87:4c:61:75:8a:66:b9:16:70:
e9:60:35:c6:8b:3d:b3:3e:bf:aa:42:24:49:51:31:69:ca:cb:
5b:2d:c7:6c:88:de:21:79:f3:be:15:6d:77:d2:0f:c8:d7:40:
29:47:22:db:b5:ee:7b:8e:cc:0c:f1:03:0f:b0:64:b8:d3:bf:
32:c6:d5:ef:49:00:43:90:e3:04:4c:dd:a9:54:82:cb:ce:12:
74:07:8c:f7:8b:fe:f1:6f:5f:6f:44:f6:c3:47:d3:cd:ae:01:
f0:1e:fa:37:d7:cc:90:11:a9:e7:a7:64:9f:0d:74:31:83:01:
04:77:7d:cc:be:90:a1:3f:6a:d1:95:93:ac:d4:0e:73:c5:a1:
b8:28:d1:86:bb:eb:1e:95:99:2b:17:db:f1:cb:24:fc:bb:4b:
d4:55:fc:29:9a:1e:fa:e3:ac:9d:d6:60:81:13:68:b0:12:b7:
a1:a5:c8:0c:a8:0b:f9:a6:cc:8f:18:9c:e3:51:02:c8:17:c4:
b6:c1:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:11 2025 by rpki-client