Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/iOtLN7r96yySTK3kcDL3l6oeo1o.roa
File: iOtLN7r96yySTK3kcDL3l6oeo1o.roa (raw, json)
Hash identifier: vm4HGwm7WNMGr8YMQyandHmQcldihIJruBvzRf883JY=
Subject key identifier: 88:EB:4B:37:BA:FD:EB:2C:92:4C:AD:E4:70:32:F7:97:AA:1E:A3:5A
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 0194BD69AC393199C1664EB6306F9F64CB67
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/iOtLN7r96yySTK3kcDL3l6oeo1o.roa
Signing time: Fri 31 Jan 2025 17:30:06 +0000
ROA not before: Fri 31 Jan 2025 17:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59437
IP address blocks: 93.119.168.0/24 maxlen: 24
109.61.121.0/24 maxlen: 24
2a03:90c0:680::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:69:ac:39:31:99:c1:66:4e:b6:30:6f:9f:64:cb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Jan 31 17:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88eb4b37bafdeb2c924cade47032f797aa1ea35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f0:1f:6f:a1:24:e1:a5:12:ac:2f:cd:52:c7:
63:b3:c4:60:2a:0e:43:39:10:dc:b5:f7:d9:6c:9a:
3d:e0:87:7c:f3:14:a9:9e:33:cb:66:59:15:dd:64:
9d:e3:b0:c9:ae:31:36:3c:9f:c1:e3:49:9a:65:90:
27:af:e3:bd:46:a4:bb:e9:35:80:5e:30:ac:f7:12:
ba:d3:f4:c6:37:30:dd:98:28:2c:03:a6:72:46:ca:
58:d5:76:bf:e4:54:f1:80:e5:f1:22:8d:39:33:49:
c7:a2:b2:1f:14:39:95:c6:fc:da:c1:c1:47:5e:2d:
a3:a4:e2:b9:be:d0:64:87:a6:95:8b:04:2a:4e:b9:
8b:e1:f1:8e:28:6a:2d:5b:e9:a2:93:fc:69:6d:84:
51:a2:db:18:28:83:a6:01:63:31:89:66:db:04:ab:
70:41:36:a2:d6:80:e9:dd:4b:74:f7:23:33:ac:9f:
f7:79:84:c1:15:82:61:c8:08:db:1c:df:9e:68:94:
a1:3d:75:f2:6b:a3:50:2b:08:c7:e1:96:14:26:7b:
24:12:be:54:3b:c0:7e:f2:88:af:a9:c3:25:4c:8e:
d0:5e:71:c7:96:c4:d5:fe:f9:7c:14:09:34:3a:69:
84:4d:12:78:5d:8a:0e:c3:9e:63:75:54:d9:ed:3c:
3b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EB:4B:37:BA:FD:EB:2C:92:4C:AD:E4:70:32:F7:97:AA:1E:A3:5A
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/iOtLN7r96yySTK3kcDL3l6oeo1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.168.0/24
109.61.121.0/24
IPv6:
2a03:90c0:680::/44
Signature Algorithm: sha256WithRSAEncryption
18:ef:55:c6:a4:f7:cf:c7:c5:92:37:c0:21:75:86:55:ab:ac:
17:04:28:29:71:36:fe:a7:55:78:d1:fb:3f:47:cf:8d:ac:88:
34:71:fa:8e:94:fc:45:03:30:da:37:a5:3a:9e:f8:73:97:55:
b2:8d:69:ab:fa:b5:d8:49:70:9a:da:75:8c:bf:72:88:80:88:
62:fb:c9:bb:df:eb:47:03:ee:68:94:b7:12:0b:60:c8:a7:54:
59:d0:3a:29:23:c8:03:6e:70:b1:54:e5:d7:87:76:04:43:91:
5a:2f:e9:de:60:75:26:b0:d7:df:66:c5:21:2f:25:6d:77:86:
d9:22:7d:ee:47:fd:62:5f:21:f9:cf:df:bd:fd:ab:8f:00:fe:
91:b2:9b:c0:80:b6:a9:d9:d7:4c:06:1b:9b:54:b1:12:4e:b0:
20:c1:e0:6e:04:8b:3c:4a:59:1e:fb:f7:e8:f2:22:ab:df:9e:
a4:fd:fe:ae:d7:f9:f7:25:b5:ea:f0:72:0f:51:ca:8d:ec:c7:
52:8c:d0:e8:dc:0c:c3:d0:e5:05:0c:64:9f:d2:72:4b:63:c7:
db:0e:ff:a8:73:eb:f0:40:8c:f5:61:ee:84:9a:4a:d4:66:a0:
1a:31:04:d5:57:2d:1d:ab:3b:7e:cb:7c:70:99:ac:de:b4:f6:
ff:23:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:27:02 2025 by rpki-client