Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lc8NPQNLzfkwls9-jyAUJI3mEFQ.roa
File: lc8NPQNLzfkwls9-jyAUJI3mEFQ.roa (raw, json)
Hash identifier: F01eHdBz+1B2SZVybDMi1WOUOhVWV+/UDx7p6kU7dCk=
Subject key identifier: 95:CF:0D:3D:03:4B:CD:F9:30:96:CF:7E:8F:20:14:24:8D:E6:10:54
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824935F12E5A630F7CFCB011DD877D4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lc8NPQNLzfkwls9-jyAUJI3mEFQ.roa
Signing time: Thu 02 Jan 2025 17:51:13 +0000
ROA not before: Thu 02 Jan 2025 17:51:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 93.123.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:93:5f:12:e5:a6:30:f7:cf:cb:01:1d:d8:77:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95cf0d3d034bcdf93096cf7e8f2014248de61054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:79:0c:1a:d6:39:27:44:ab:9b:87:a3:48:
80:73:d1:69:8b:18:f5:25:8c:91:6c:aa:1a:85:f9:
16:79:d6:c9:52:5c:69:d7:3d:5e:5d:d7:14:5c:4d:
1c:8d:aa:84:be:56:4f:0d:e8:14:ba:c0:4a:78:ef:
67:21:63:38:a2:df:c8:ef:8b:1e:5e:b1:40:27:85:
f0:e7:db:54:05:c1:f1:ae:df:d7:45:2b:01:dd:f5:
e0:d7:d1:50:cb:57:73:f1:7c:aa:4c:98:a9:7d:54:
31:ea:eb:c2:0e:f9:b6:86:95:eb:be:ed:9e:42:3e:
96:17:a0:81:18:a5:5d:ad:01:77:64:ab:b8:a9:c9:
ba:8c:fd:df:e4:c9:45:2f:df:4f:7a:c6:0e:a8:47:
51:69:4a:cb:a3:ae:47:2a:5e:1e:47:73:ed:3c:75:
10:e9:69:60:5a:1e:95:a9:11:fc:be:df:de:b9:ed:
70:c4:34:98:ef:f5:fc:47:6d:a3:ab:6f:f7:6c:22:
87:94:13:40:8f:83:20:26:b5:97:87:be:a0:26:c9:
f3:b2:cb:97:0e:f0:cd:3a:a9:7d:ef:55:e3:66:1c:
3b:3b:32:20:6b:da:62:0e:1f:57:04:e1:cb:02:24:
a8:e9:35:d3:6f:d4:d5:d5:51:e5:10:90:0d:50:cd:
b9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:CF:0D:3D:03:4B:CD:F9:30:96:CF:7E:8F:20:14:24:8D:E6:10:54
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/lc8NPQNLzfkwls9-jyAUJI3mEFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.13.0/24
Signature Algorithm: sha256WithRSAEncryption
93:17:d5:a2:f4:11:c1:e3:6d:0b:86:f2:40:db:d4:dc:26:6d:
5a:70:ca:54:ff:3f:5a:1b:43:bb:d7:0f:85:f4:61:9e:68:f1:
77:97:04:30:61:aa:1a:01:d2:12:a9:7a:be:02:ee:4b:20:4c:
49:6c:56:ff:e5:c5:17:3a:1e:81:6b:5b:ce:f7:3c:f6:cb:72:
6b:8b:09:a6:ea:ee:86:46:3f:c1:db:bc:a8:18:68:28:ad:6a:
a7:7f:6a:c4:41:e3:9a:16:65:79:84:58:8c:75:61:58:32:89:
91:2f:4c:fd:ad:3d:5f:63:a4:94:9d:98:ed:da:15:18:6b:d9:
4c:d4:da:0b:b9:36:d6:a9:17:a2:40:7c:c3:b9:18:89:9f:66:
9f:e0:d7:3c:3c:94:75:ec:a6:51:01:73:39:ba:0a:ff:5c:47:
29:3f:ae:1b:30:c1:11:9d:ea:48:2b:f4:35:6f:91:1f:13:9f:
ae:03:42:6b:2e:a8:b9:93:04:76:2d:61:af:11:b5:e0:8e:b2:
46:c4:fa:bc:50:f5:cc:03:cb:28:6f:3b:6a:d9:b8:d2:b6:31:
4e:69:a4:28:dc:ee:ee:66:09:96:02:39:93:4b:cc:79:7d:86:
e1:36:d6:ec:75:03:70:fc:06:97:69:68:df:51:70:b1:4d:63:
6d:f2:2d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:09 2025 by rpki-client