Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/5-Dy59i1_U0ZRMyz_6apK6err6E.roa
File: 5-Dy59i1_U0ZRMyz_6apK6err6E.roa (raw, json)
Hash identifier: HTKVf7q+nYn6Qr/j/qsCTy9hUzuLpJ7dJx3pfn4b6GM=
Subject key identifier: E7:E0:F2:E7:D8:B5:FD:4D:19:44:CC:B3:FF:A6:A9:2B:A7:AB:AF:A1
Certificate issuer: /CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Certificate serial: 019420685AA57F2349510B373D8926B19BF8
Authority key identifier: 95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/5-Dy59i1_U0ZRMyz_6apK6err6E.roa
Signing time: Wed 01 Jan 2025 05:48:17 +0000
ROA not before: Wed 01 Jan 2025 05:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44637
IP address blocks: 93.93.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5a:a5:7f:23:49:51:0b:37:3d:89:26:b1:9b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7e0f2e7d8b5fd4d1944ccb3ffa6a92ba7abafa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:11:82:c4:a5:32:30:30:4d:87:17:1a:25:
e8:d8:0a:58:a8:20:18:8f:46:61:0c:d2:4f:ed:b3:
7c:09:5b:13:ce:b2:5d:10:04:ac:fc:f5:56:cb:5e:
1f:dd:82:7c:e2:dd:d2:2b:ec:5d:3d:2f:2e:10:a6:
a7:2f:94:72:3c:31:8a:3f:6f:b9:1c:a9:23:22:cb:
5f:3e:ec:b5:60:a7:f1:fc:fd:b4:5c:b9:83:98:f2:
ec:7c:15:ea:80:07:94:1c:69:62:a2:91:85:64:3c:
4c:9c:70:1f:84:71:fc:90:09:fc:72:73:df:81:0f:
72:18:72:af:80:e8:e5:f0:89:91:0d:31:8d:f8:6c:
01:c3:f1:79:02:a5:99:4a:54:99:4f:f8:6e:f4:cf:
64:9b:3f:0f:d3:ac:99:34:06:f5:6f:22:ab:0d:3d:
c4:4c:70:ba:9e:bf:77:a8:ac:a3:e7:79:97:6d:c3:
9a:ca:10:a3:52:a5:3f:5a:83:c8:0b:93:df:49:8f:
d7:85:b8:88:d4:22:bc:e6:26:30:3e:21:9e:7b:34:
2b:0f:94:26:dd:39:1c:91:05:de:b8:87:d8:5a:d0:
d6:25:1b:c4:2d:17:f1:d9:c8:d3:7f:dc:3f:38:29:
19:4e:09:ab:14:4f:18:1d:02:c6:80:13:54:a5:ed:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E0:F2:E7:D8:B5:FD:4D:19:44:CC:B3:FF:A6:A9:2B:A7:AB:AF:A1
X509v3 Authority Key Identifier:
keyid:95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/5-Dy59i1_U0ZRMyz_6apK6err6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.25.0/24
Signature Algorithm: sha256WithRSAEncryption
10:58:8a:e0:f7:79:71:29:fe:95:4f:09:6f:37:b2:d6:41:43:
f9:1e:9d:9d:d0:65:fd:5c:b8:37:c4:45:5d:b0:96:fe:30:51:
27:8b:87:3e:9c:3c:d9:c2:cd:1e:cd:e8:d3:15:98:18:51:63:
35:6c:55:21:87:eb:58:4d:78:c2:d3:2f:ec:c4:da:cf:54:76:
9b:6f:ab:3a:af:00:38:be:c7:28:54:98:e5:b2:80:f6:7a:cc:
bf:8a:12:cb:5f:66:e3:52:d2:84:4e:e6:0c:03:56:ce:98:60:
ed:6a:83:9c:ce:4b:a8:04:94:c2:ca:f0:1a:dd:73:4f:7b:40:
66:43:87:99:28:66:06:7d:35:f8:d6:ae:03:d1:35:92:16:5e:
51:36:45:76:47:46:a1:34:4b:87:61:90:ef:19:e4:7f:0c:34:
ce:b8:1b:ca:aa:45:35:76:9d:a6:b4:8c:1d:bc:f2:1c:1a:1c:
0e:bb:85:2a:1f:6c:7b:ce:6f:9a:4e:87:65:7c:25:d3:b6:38:
45:9b:0e:7b:c7:ca:16:7e:d0:ce:fc:ba:49:41:3b:5b:bb:38:
f7:60:d7:0b:41:a4:d1:d3:08:ec:81:b3:51:ce:59:a0:1e:6b:
65:1f:ca:ec:94:21:aa:7f:ad:5f:6b:d8:8b:63:fa:3c:9c:75:
22:5e:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:24:10 2025 by rpki-client