Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/rDlI4ycmoP2vYabPTD8ZJ5aaoys.roa
File: rDlI4ycmoP2vYabPTD8ZJ5aaoys.roa (raw, json)
Hash identifier: IatQFQuwyRTcSzSD4b+TwYMtb8PrCVqVjGovOgWy7XM=
Subject key identifier: AC:39:48:E3:27:26:A0:FD:AF:61:A6:CF:4C:3F:19:27:96:9A:A3:2B
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01941FFA4B1D7DB2547D8095D3EB1798AEA2
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/rDlI4ycmoP2vYabPTD8ZJ5aaoys.roa
Signing time: Wed 01 Jan 2025 03:48:04 +0000
ROA not before: Wed 01 Jan 2025 03:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 93.127.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4b:1d:7d:b2:54:7d:80:95:d3:eb:17:98:ae:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 1 03:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac3948e32726a0fdaf61a6cf4c3f1927969aa32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:b1:69:a2:94:1c:fc:e3:99:e1:21:c8:36:
bc:b7:4d:69:0b:65:a5:3d:ef:12:13:8d:78:2d:d7:
fa:46:5b:0b:94:20:83:e6:59:2d:02:2e:32:27:52:
85:b4:dd:63:8c:3f:95:31:49:bd:57:6c:1b:0a:21:
3b:de:ab:21:b5:64:65:6b:03:8d:a1:aa:ad:21:78:
3a:9f:28:55:ce:41:7f:ff:96:bb:49:02:c7:a4:7a:
a3:65:3b:5b:19:67:27:92:45:10:a3:17:e6:1c:00:
9d:ba:1c:98:83:a0:b9:3f:01:98:65:0f:fa:48:29:
91:35:e2:27:3f:42:c3:ad:8d:dd:da:a1:46:26:96:
10:84:5b:36:1c:80:fe:12:fe:4c:cc:e7:35:c5:3a:
26:7c:67:99:87:aa:cc:f2:9a:a4:d0:5b:76:14:1d:
fb:f8:e6:d3:95:8a:10:d2:9c:57:59:ff:e0:ee:93:
49:26:de:5d:53:d1:22:c4:37:69:03:c2:e2:d1:13:
ea:8e:bf:f5:90:df:cf:8a:53:5f:82:1a:ad:a5:24:
22:8e:73:2f:fb:66:8c:52:da:ac:49:56:71:83:c4:
92:51:9c:05:e4:c7:1b:87:d9:24:69:37:42:27:35:
6e:64:49:2b:64:13:11:8e:bb:2a:94:9b:5b:b8:56:
f1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:39:48:E3:27:26:A0:FD:AF:61:A6:CF:4C:3F:19:27:96:9A:A3:2B
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/rDlI4ycmoP2vYabPTD8ZJ5aaoys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.156.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:0e:6e:71:51:2d:48:4e:c0:4f:fb:52:3c:b2:2f:2d:ff:11:
e7:81:41:59:eb:ad:b5:ef:be:7c:a8:31:72:a4:84:94:74:31:
12:ca:dd:56:0a:a9:83:17:25:9f:a0:26:97:c7:6f:dc:c9:7a:
5c:01:a8:09:67:64:61:80:84:52:61:74:3a:14:57:47:44:b2:
b5:5d:8c:9a:bf:57:e9:a3:f4:8c:70:1e:3c:0a:58:31:70:f8:
3d:a7:b4:ca:12:f1:e0:8d:57:0b:90:ef:c4:41:b2:2d:62:5f:
e8:6f:57:71:28:f0:91:9a:be:04:d6:46:4c:95:88:c4:ec:4b:
27:f5:5f:7b:b7:8e:9b:05:49:a2:03:e9:7f:d9:03:b9:ec:8c:
08:13:31:2a:f8:0c:3d:61:5f:e1:bb:d9:38:64:64:cb:11:e1:
fd:12:da:d7:9c:5d:b3:8b:9a:3a:c1:ca:28:e9:3d:1c:42:f0:
bf:50:c0:85:b0:dd:e3:17:af:4c:4d:c9:9c:7a:f8:99:74:4b:
7e:1a:e6:68:6b:31:6f:48:96:3a:70:45:19:f2:dc:d8:54:f7:
65:81:4e:5b:b7:e3:ba:38:85:9e:f9:54:22:d4:99:d6:79:43:
57:ef:9e:2d:08:ae:28:f4:f6:e2:cb:26:12:6c:a4:32:34:25:
6d:35:88:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+ksdfbJUfYCV0+sXmK6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjUwMTAxMDM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzM5NDhlMzI3MjZhMGZkYWY2MWE2Y2Y0YzNmMTkyNzk2OWFhMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5+xaaKUHPzjmeEhyDa8t01pC2Wl
Pe8SE414Ldf6RlsLlCCD5lktAi4yJ1KFtN1jjD+VMUm9V2wbCiE73qshtWRlawON
oaqtIXg6nyhVzkF//5a7SQLHpHqjZTtbGWcnkkUQoxfmHACduhyYg6C5PwGYZQ/6
SCmRNeInP0LDrY3d2qFGJpYQhFs2HID+Ev5MzOc1xTomfGeZh6rM8pqk0Ft2FB37
+ObTlYoQ0pxXWf/g7pNJJt5dU9EixDdpA8Li0RPqjr/1kN/PilNfghqtpSQijnMv
+2aMUtqsSVZxg8SSUZwF5Mcbh9kkaTdCJzVuZEkrZBMRjrsqlJtbuFbx+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKw5SOMnJqD9r2Gmz0w/GSeWmqMrMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvckRsSTR5Y21vUDJ2WWFiUFREOFpKNWFhb3lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXX+cMA0G
CSqGSIb3DQEBCwUAA4IBAQCNDm5xUS1ITsBP+1I8si8t/xHngUFZ66217758qDFy
pISUdDESyt1WCqmDFyWfoCaXx2/cyXpcAagJZ2RhgIRSYXQ6FFdHRLK1XYyav1fp
o/SMcB48ClgxcPg9p7TKEvHgjVcLkO/EQbItYl/ob1dxKPCRmr4E1kZMlYjE7Esn
9V97t46bBUmiA+l/2QO57IwIEzEq+Aw9YV/hu9k4ZGTLEeH9EtrXnF2zi5o6wcoo
6T0cQvC/UMCFsN3jF69MTcmceviZdEt+GuZoazFvSJY6cEUZ8tzYVPdlgU5bt+O6
OIWe+VQi1JnWeUNX754tCK4o9PbiyyYSbKQyNCVtNYhQ
-----END CERTIFICATE-----
Generated at Thu Apr 10 16:46:52 2025 by rpki-client