Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa
File: ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa (raw, json)
Hash identifier: M8oZJ8Uj/JF9chZaxOYRuKYLCgT5+KWo335qmSJiUXs=
Subject key identifier: 49:C0:E2:1B:56:C4:32:0F:E2:60:09:F0:67:94:6A:67:D8:AE:05:F1
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 01942220179E7DF07B47E88E28D791D90EE1
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa
Signing time: Wed 01 Jan 2025 13:48:35 +0000
ROA not before: Wed 01 Jan 2025 13:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62453
IP address blocks: 82.193.94.0/24 maxlen: 24
82.193.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:17:9e:7d:f0:7b:47:e8:8e:28:d7:91:d9:0e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49c0e21b56c4320fe26009f067946a67d8ae05f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:9d:96:4c:9e:23:8c:d7:42:d8:58:19:4f:
05:f3:48:e2:a6:f3:56:7d:7c:07:5f:ae:88:c8:b0:
14:73:87:90:68:16:1a:43:31:a0:6e:8d:3e:30:8e:
07:88:86:11:ea:39:6f:9e:71:22:7e:1a:2e:84:cc:
d3:5c:8d:c0:43:06:27:66:5e:73:c4:f1:6f:a0:d0:
a4:33:e8:dd:41:f9:46:ee:70:c3:b5:67:8a:0e:a3:
c5:7b:d8:76:ac:21:a8:73:9c:65:53:e2:21:13:3f:
74:db:a5:49:c9:94:b4:8a:2d:9d:c8:7a:aa:fe:3f:
e3:a8:42:1f:30:be:94:79:47:1f:fe:ca:73:37:ea:
fe:36:3f:b8:11:dc:b0:ed:af:f8:9d:14:38:8b:a9:
8c:ca:5c:ae:e3:dc:e9:bc:9e:d0:43:12:0e:bf:12:
27:4b:ea:5a:c8:e2:d9:f6:02:b2:94:e0:6f:97:d9:
ca:e6:d9:13:43:d0:15:14:93:d2:aa:8d:2c:85:77:
31:61:42:70:e3:ba:57:0c:19:ba:cc:d2:bd:06:56:
92:93:67:49:2d:ea:17:64:af:7f:0f:89:5f:be:e1:
c5:95:a8:ce:d8:3b:41:f1:87:30:47:d3:0d:32:be:
53:6f:9f:23:5b:f4:66:f0:fd:48:a2:e3:92:5a:f1:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:E2:1B:56:C4:32:0F:E2:60:09:F0:67:94:6A:67:D8:AE:05:F1
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/ScDiG1bEMg_iYAnwZ5RqZ9iuBfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.94.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:2c:08:b0:ec:42:fd:87:05:a2:0a:8e:25:bb:c2:ea:b9:87:
2e:e1:36:f0:d6:68:39:6f:c9:b7:23:29:c7:6b:d3:32:99:d4:
86:40:30:e6:75:2a:7a:e2:70:eb:57:c3:5f:ca:07:ba:79:0d:
10:85:5c:48:8a:02:6a:79:f7:0b:14:78:ed:e4:71:f5:5e:ef:
87:e8:b4:04:31:9e:46:c3:22:ed:4d:07:c9:a3:cb:42:83:4b:
75:1c:8a:71:e6:9b:19:75:cd:12:f4:8d:8d:b5:39:18:51:36:
3b:7a:82:00:89:f0:2e:1b:f0:83:cc:f7:ec:30:0d:da:25:63:
ab:7a:6a:8d:c2:91:4d:1b:8d:d6:65:93:74:e8:b5:01:a0:57:
91:cd:12:0c:c4:5c:1a:46:0b:15:cc:00:fd:88:76:13:46:ca:
21:2d:93:10:8e:45:ec:ff:a1:05:94:58:14:03:52:85:78:87:
99:73:5a:2c:91:29:3e:37:1f:0d:41:d3:0c:71:0e:a2:33:21:
38:ac:82:b6:ea:e6:c7:17:d7:60:1e:e1:b2:ed:64:fa:c1:43:
f8:94:f2:bd:6d:a4:cb:6f:19:d6:db:34:b7:a5:17:54:2d:46:
0e:06:a3:4d:15:f5:e7:7b:43:7b:0c:44:a6:d1:89:1d:bc:1e:
10:63:92:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:06:00 2025 by rpki-client