Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/JXO4E2g0oLzEDSPt5YKnCmngX_Q.roa
File: JXO4E2g0oLzEDSPt5YKnCmngX_Q.roa (raw, json)
Hash identifier: vMC3DbEBp43Y3YwWN02qa86iIY9NVuHJL+j5IjRPOAQ=
Subject key identifier: 25:73:B8:13:68:34:A0:BC:C4:0D:23:ED:E5:82:A7:0A:69:E0:5F:F4
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01856F02277A8DE9B11E6C9A507C33ED533C
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/JXO4E2g0oLzEDSPt5YKnCmngX_Q.roa
Signing time: Sun 01 Jan 2023 20:24:49 +0000
ROA not before: Sun 01 Jan 2023 20:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 93.115.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:27:7a:8d:e9:b1:1e:6c:9a:50:7c:33:ed:53:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 1 20:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2573b8136834a0bcc40d23ede582a70a69e05ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:45:97:9a:13:c9:73:95:f7:00:60:3c:f2:
77:25:51:3c:d4:45:cd:a7:d3:86:ad:04:02:a4:3a:
4e:8f:37:37:2d:98:22:b5:16:d5:8c:e5:2f:e7:7a:
a0:8e:43:a4:e9:b1:01:10:3c:83:19:c0:75:62:69:
58:33:da:4b:cd:8b:66:72:fb:d5:20:0b:b0:69:32:
f0:e4:d1:d3:c3:1c:29:8c:09:8f:d3:a8:07:b6:9c:
07:7e:5e:72:54:78:87:f0:10:88:6d:80:dd:3d:92:
65:7b:11:5c:39:fc:17:59:95:09:33:22:9e:a9:52:
56:6c:f6:60:7a:f2:1d:00:27:20:13:bc:86:85:54:
33:1b:f1:13:33:ab:18:c2:6c:ff:76:e9:d5:1c:24:
9f:82:83:cb:eb:53:90:8f:90:80:30:90:06:0d:b5:
e8:c7:4d:cb:d4:9c:6d:9e:14:77:91:ad:65:d0:97:
12:ca:16:47:6b:07:12:8c:c8:56:a0:e7:1b:1a:20:
92:21:46:2d:d2:78:0e:74:a8:9e:98:29:55:44:6f:
d5:6f:51:00:37:aa:82:58:27:fc:19:b7:a4:e1:3f:
02:89:1f:5f:d5:86:02:93:2b:26:8e:55:47:92:46:
02:3f:f8:0d:a0:d0:d2:89:cd:a3:2e:ae:b2:f0:7f:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:73:B8:13:68:34:A0:BC:C4:0D:23:ED:E5:82:A7:0A:69:E0:5F:F4
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/JXO4E2g0oLzEDSPt5YKnCmngX_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:31:bc:1b:ec:49:93:43:3c:b3:6d:27:c9:4f:b9:0e:7f:ea:
f8:b5:ef:66:9e:73:44:70:86:50:6e:b7:ec:cd:98:bc:15:9f:
d6:38:25:a3:47:4b:b3:ce:55:68:ea:9c:53:22:dc:ca:a0:a2:
4f:91:66:64:09:ea:bb:2e:df:1c:a1:3a:6b:28:43:ed:dd:a9:
bc:f3:63:c2:68:a4:38:48:b5:c3:35:ac:22:5e:dd:cf:36:4a:
05:4e:20:61:ac:40:68:cb:8b:f9:34:c7:e7:52:fa:2e:c5:c9:
5d:2d:19:0e:91:a2:86:ce:b6:cb:5f:7d:ff:81:3f:8f:38:36:
ef:ed:c9:e9:32:18:cc:85:55:86:9e:63:69:74:b7:b2:52:56:
f5:27:d6:c8:7a:82:b0:d2:06:e2:83:71:52:94:55:da:18:2f:
7d:aa:bd:0c:e3:11:3a:f4:a9:f0:9e:b5:77:1b:8c:90:71:1c:
58:5f:09:e2:bb:17:7e:63:78:55:07:42:91:47:f4:68:72:32:
37:7a:6e:f6:f8:8a:1c:0e:d8:b2:9a:0b:4e:e3:b8:82:c7:c5:
99:17:bb:ea:e8:16:78:2f:8f:45:5f:bc:cb:38:b4:b4:62:de:
45:2d:ab:01:b4:dc:ec:8e:93:57:2f:43:29:39:46:38:87:84:
f4:98:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:29:13 2025 by rpki-client