Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/oWKu84UqN6ZoGtWTr_LqmwizRJo.roa
File: oWKu84UqN6ZoGtWTr_LqmwizRJo.roa (raw, json)
Hash identifier: sXjtat/2eGC0qh1TKvXgZj2qcJea3TA909ZXBXblsyw=
Subject key identifier: A1:62:AE:F3:85:2A:37:A6:68:1A:D5:93:AF:F2:EA:9B:08:B3:44:9A
Certificate issuer: /CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Certificate serial: 01942D350D87C80287FC0E78FC2AC1E355FA
Authority key identifier: 6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/oWKu84UqN6ZoGtWTr_LqmwizRJo.roa
Signing time: Fri 03 Jan 2025 17:27:18 +0000
ROA not before: Fri 03 Jan 2025 17:27:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 93.174.248.0/21 maxlen: 21
2a03:8ac0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2d:35:0d:87:c8:02:87:fc:0e:78:fc:2a:c1:e3:55:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c844bd62cbfb5adccfb4dc16eca23cb5c9ddeb6
Validity
Not Before: Jan 3 17:27:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a162aef3852a37a6681ad593aff2ea9b08b3449a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:3f:01:9f:bb:1b:31:21:30:55:ee:70:b6:
cc:fd:a2:b5:a6:f8:11:86:76:d1:13:62:24:92:db:
cb:e9:e5:12:29:04:00:81:25:a5:2b:ea:d2:e6:de:
87:67:ad:4d:2c:73:4f:b7:80:b3:e4:52:a9:6f:b7:
6f:65:0d:bd:95:9f:9a:91:e1:82:0d:ef:16:28:01:
80:9b:dd:c4:ea:02:55:ef:ce:8d:36:3f:da:04:f5:
18:2d:7a:7a:b0:3e:3d:ba:82:6e:03:0d:80:78:d5:
72:04:25:f8:22:5c:be:af:e1:cb:11:50:55:82:78:
ae:d0:ce:86:9a:83:72:a0:5a:27:55:fc:75:96:b7:
90:9b:0b:88:69:a8:ce:47:27:57:20:67:6a:8a:8d:
89:60:3f:d1:08:4a:9a:f0:de:c2:48:0c:8b:02:09:
6d:28:82:f0:a0:fe:1c:dd:3d:7a:6b:ab:6d:86:f2:
d8:b7:c4:c5:7d:c0:68:51:2a:96:fc:af:e9:35:81:
41:5e:72:99:1c:c7:b2:c1:26:2e:da:8f:ac:d2:e5:
09:c0:14:d4:43:43:4b:56:f5:01:6b:f3:7b:13:eb:
9e:89:5e:01:67:0e:db:8c:d2:c2:c6:80:06:b4:88:
c6:b0:2e:fd:63:31:a7:c3:54:19:04:1e:86:0a:ed:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:62:AE:F3:85:2A:37:A6:68:1A:D5:93:AF:F2:EA:9B:08:B3:44:9A
X509v3 Authority Key Identifier:
keyid:6C:84:4B:D6:2C:BF:B5:AD:CC:FB:4D:C1:6E:CA:23:CB:5C:9D:DE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIRL1iy_ta3M-03Bbsojy1yd3rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/oWKu84UqN6ZoGtWTr_LqmwizRJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/cb1bc5-2c15-42f7-9ef2-5c99b683db0d/1/bIRL1iy_ta3M-03Bbsojy1yd3rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.248.0/21
IPv6:
2a03:8ac0::/48
Signature Algorithm: sha256WithRSAEncryption
72:81:9f:87:98:ba:c1:68:21:05:95:a5:95:5c:31:13:41:d2:
3b:65:f9:a0:8b:54:3c:62:d4:cf:4d:48:ac:dc:d6:5e:18:59:
57:c0:e0:d0:f6:53:ac:bc:dd:f0:70:2e:7c:ea:5a:b8:ae:93:
41:3a:a7:c9:80:55:9c:01:0a:9e:5c:4f:10:a1:02:9c:8d:3b:
00:08:47:bf:0a:25:b8:2a:01:b0:bc:d6:a4:93:b3:db:fd:d2:
fd:f8:7d:17:34:fd:48:eb:82:14:9e:de:7b:16:d9:0f:7a:1e:
ad:b7:0b:66:46:b9:84:7f:dd:b3:d3:a0:92:ad:82:7e:26:16:
be:13:d6:a1:40:bd:a8:68:8a:63:b2:35:36:6e:15:14:b3:a1:
60:eb:48:5b:43:d2:a3:09:6c:9d:11:7c:ff:9e:d3:c7:c7:21:
4e:d9:0c:fb:1d:cc:f1:38:bc:ca:97:53:a3:d2:3b:44:49:58:
d8:f5:10:96:0b:fe:5e:29:a6:fb:41:01:7e:b7:37:29:9d:f9:
41:03:b0:30:82:c1:1f:11:8b:d5:4a:03:a1:bd:b2:0d:b6:47:
21:d4:4a:d8:b2:86:f2:93:a3:85:65:4d:df:a1:d7:35:f6:ae:
82:89:ab:a6:5d:d3:24:77:7f:1c:2d:42:22:32:0a:09:8f:6b:
cd:9e:18:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:28 2025 by rpki-client