Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa
File: 7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa (raw, json)
Hash identifier: vm5X1sab9HJagyLFII3df7BekSqzu2gNn9apIe4J5uw=
Subject key identifier: ED:DD:93:A0:C8:53:FB:96:40:53:8A:AC:61:05:EB:BB:0F:CC:A0:85
Certificate issuer: /CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Certificate serial: 0194244481755640C8B03AB730FBA212AF10
Authority key identifier: DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa
Signing time: Wed 01 Jan 2025 23:47:36 +0000
ROA not before: Wed 01 Jan 2025 23:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56958
IP address blocks: 93.95.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:81:75:56:40:c8:b0:3a:b7:30:fb:a2:12:af:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df144ce8e8e4415e5c86a0b280499a385c14eff2
Validity
Not Before: Jan 1 23:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eddd93a0c853fb9640538aac6105ebbb0fcca085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:2e:59:e7:13:9b:2d:b2:24:d4:29:f6:b3:
77:34:c9:b8:d4:28:d3:fb:5f:63:e8:48:6f:97:91:
a4:c8:8c:3c:e0:bf:76:ea:b3:78:86:fe:92:e1:cf:
98:c2:82:eb:33:6a:5f:38:43:0c:34:68:ed:c8:e7:
3a:33:99:7e:61:c0:8c:e3:72:e0:0e:f2:a0:d3:54:
a0:cf:1c:bf:b4:42:94:c1:a9:8f:c8:c5:b2:3e:9d:
c4:2b:b9:6f:f7:00:58:f5:2e:20:bc:01:f5:d4:6d:
55:ee:a5:d8:5e:a5:05:40:ca:92:cb:7a:ac:51:4f:
73:89:b6:0a:e9:38:78:5c:8b:15:7d:04:67:66:6e:
eb:8e:32:26:33:da:73:a9:7a:36:0c:2b:87:1b:41:
1a:ba:45:f8:37:e5:1a:94:e1:de:32:70:fb:f9:d9:
c0:b3:d6:5a:61:65:dd:ba:54:2d:72:75:13:f2:21:
28:74:5f:32:f9:d8:1a:c8:f5:14:21:82:09:4d:81:
2a:77:6d:d4:e8:c7:7d:2b:85:62:cc:40:27:1b:42:
8e:47:00:ae:fd:08:9a:8c:7c:e0:ac:cb:33:75:dd:
b7:47:39:53:0c:0b:42:41:96:12:7b:05:00:fc:a9:
56:8a:46:56:de:3f:b0:e6:4e:c0:d5:af:ad:e2:47:
76:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DD:93:A0:C8:53:FB:96:40:53:8A:AC:61:05:EB:BB:0F:CC:A0:85
X509v3 Authority Key Identifier:
keyid:DF:14:4C:E8:E8:E4:41:5E:5C:86:A0:B2:80:49:9A:38:5C:14:EF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3xRM6OjkQV5chqCygEmaOFwU7_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/7d2ToMhT-5ZAU4qsYQXruw_MoIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0f4302-41a2-4da4-878e-5867be7036b3/1/3xRM6OjkQV5chqCygEmaOFwU7_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.208.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:ed:9f:c0:0c:34:d9:75:25:7c:f3:39:a1:21:0d:cc:5a:c9:
bf:d4:bd:9f:4f:7c:2a:36:e7:99:c1:c3:5a:e2:1b:7d:67:b7:
9c:6e:b9:c8:af:96:3c:a7:82:54:4b:58:65:88:49:89:53:d1:
8c:a4:c4:a7:0f:c0:bc:80:9f:a4:81:e9:18:88:e9:b6:e5:f0:
fe:d8:df:ab:fb:18:38:9b:2c:a9:4f:a6:ea:ab:65:f3:4c:54:
c7:2f:5a:8d:9a:86:08:40:0b:64:4b:f0:33:b6:5b:16:f8:f2:
4e:d1:0d:e4:7c:43:07:65:15:9d:39:c1:e1:69:9b:78:27:ce:
f0:69:c1:18:4d:d3:06:72:fb:65:8d:82:08:4e:2c:3b:5c:a5:
32:18:5b:db:87:db:91:ef:38:9e:42:da:81:32:16:23:d2:09:
12:39:18:24:be:29:fa:c2:70:7d:12:24:ab:bd:15:3f:40:6c:
4f:03:b0:7c:cf:bf:7b:88:8f:c1:1b:ce:eb:71:4a:19:27:50:
f9:bd:a0:7b:5b:2e:84:2d:80:ba:e8:d3:d3:62:72:40:66:0e:
05:53:b6:09:76:1f:63:18:dd:c3:47:43:e3:41:3d:96:4a:48:
45:d8:fe:9a:00:90:61:76:f9:11:5b:85:9a:c0:91:42:3d:66:
e6:dc:33:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:42:32 2025 by rpki-client