Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa
File: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (raw, json)
Hash identifier: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=
Subject key identifier: DD:0D:55:98:67:DE:08:52:AF:8F:65:F4:22:52:7F:71:FA:52:B8:58
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 01941F8C5C0D45F521D82C7D3EE992180152
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa
Signing time: Wed 01 Jan 2025 01:47:59 +0000
ROA not before: Wed 01 Jan 2025 01:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61315
IP address blocks: 93.101.0.0/20 maxlen: 24
93.101.4.0/24 maxlen: 24
93.101.5.0/24 maxlen: 24
93.101.16.0/20 maxlen: 24
93.101.32.0/20 maxlen: 24
93.101.48.0/20 maxlen: 24
93.101.64.0/20 maxlen: 24
93.101.80.0/20 maxlen: 24
93.101.96.0/20 maxlen: 24
93.101.112.0/20 maxlen: 24
93.101.128.0/20 maxlen: 24
93.101.144.0/20 maxlen: 24
93.101.160.0/20 maxlen: 24
93.101.176.0/20 maxlen: 24
93.101.192.0/20 maxlen: 24
93.101.208.0/20 maxlen: 24
93.101.224.0/20 maxlen: 24
93.101.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5c:0d:45:f5:21:d8:2c:7d:3e:e9:92:18:01:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jan 1 01:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd0d559867de0852af8f65f422527f71fa52b858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:cd:e9:98:3c:1e:b3:3d:6a:a3:a9:69:f1:
a4:50:b5:12:0c:a6:0b:64:b1:70:d6:85:61:be:7f:
49:1b:d3:00:02:7d:d2:f2:18:ca:d8:4a:8a:f1:e7:
cf:1e:29:5f:01:30:93:f6:a5:74:eb:db:19:14:fb:
8b:18:ca:c2:59:8a:2f:e8:a1:69:94:d2:8e:93:4a:
94:a4:d3:53:cb:47:21:ee:fa:03:db:19:4b:f5:82:
16:ef:71:ce:5b:d0:53:40:20:eb:45:31:68:ca:3d:
d0:8a:5d:41:24:b1:0d:59:9a:64:d3:06:42:ee:85:
c1:9c:c2:64:5c:2f:9b:13:48:2a:ea:c9:e6:8f:04:
81:15:ad:08:37:4e:00:0d:9e:35:e5:3a:13:41:65:
ea:3f:a2:6f:cf:25:40:4a:46:cc:b1:54:ec:88:81:
3e:5c:98:38:7c:60:a7:17:8e:54:2f:75:51:95:3b:
fd:0b:d0:04:e1:46:8c:d8:bd:4e:a0:e8:0e:8c:ca:
11:a2:1d:7d:f3:38:2a:36:f5:be:6f:45:7a:36:0c:
80:8a:d8:60:b0:de:aa:0f:39:b0:c1:d0:ef:96:8c:
fd:1f:14:18:c7:98:4f:aa:18:72:83:67:ac:35:c4:
26:35:3d:24:36:8a:e1:6a:20:8c:cc:d3:3a:62:32:
cc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0D:55:98:67:DE:08:52:AF:8F:65:F4:22:52:7F:71:FA:52:B8:58
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.101.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:b9:8f:62:fa:51:be:98:62:53:4a:af:22:56:04:e3:17:74:
29:c4:95:7b:c1:dc:83:85:a3:96:fe:6b:41:16:fd:e7:2f:88:
2d:2e:90:16:5e:41:7b:13:60:3b:ba:5e:ce:6d:27:ee:42:65:
ce:29:d8:fc:29:63:fb:33:f8:6d:78:b4:4b:55:0a:49:ad:4e:
f4:d3:97:59:86:ec:25:89:bf:c6:7b:13:d2:a8:ac:d8:ee:55:
7f:f9:04:6e:49:7b:5d:38:8c:76:30:55:44:2b:18:11:aa:70:
a6:8a:6b:fb:4c:4a:43:60:94:99:1e:a8:e5:64:8b:64:d5:cd:
a8:e3:7e:2a:87:f7:0a:8d:42:5f:92:2a:ea:17:9c:f7:e5:26:
4d:75:1b:23:0c:eb:a9:09:98:c2:aa:25:e1:0d:38:a4:2a:70:
d8:01:bc:f1:f9:93:49:5d:90:61:39:a3:69:4e:70:73:b2:17:
70:d3:e7:b0:80:d9:a4:42:91:93:52:1a:00:ae:a7:91:0e:4a:
eb:f7:75:86:ce:48:2b:27:97:92:ad:14:83:e2:5d:36:1b:bc:
cb:51:94:d6:79:d7:ec:b8:69:47:d5:f6:1d:f9:46:83:64:11:
b3:4c:6b:96:2c:c7:73:ec:8b:e7:81:d8:88:c1:de:62:73:05:
75:cc:0f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:43 2025 by rpki-client