Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IpxJzMokCujQHyuHPVDKZduNdz4.roa
File: IpxJzMokCujQHyuHPVDKZduNdz4.roa (raw, json)
Hash identifier: yu0cU6ZfXFLYCCF6/czuPjyA41BqH62GCFzkm3VluHc=
Subject key identifier: 22:9C:49:CC:CA:24:0A:E8:D0:1F:2B:87:3D:50:CA:65:DB:8D:77:3E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0194BDA09BAF77D8F52231164FB92B192837
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IpxJzMokCujQHyuHPVDKZduNdz4.roa
Signing time: Fri 31 Jan 2025 18:30:06 +0000
ROA not before: Fri 31 Jan 2025 18:30:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 93.88.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:a0:9b:af:77:d8:f5:22:31:16:4f:b9:2b:19:28:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 31 18:30:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=229c49ccca240ae8d01f2b873d50ca65db8d773e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:8c:61:69:23:59:b4:80:5b:d3:f0:0e:93:
4e:10:ef:92:14:a3:b7:88:cd:07:4b:48:74:39:09:
9b:ec:8b:30:d9:17:e4:92:4f:e0:ee:02:c0:29:2c:
9e:cb:ee:e5:a7:26:30:0a:14:e4:9f:04:9d:6a:30:
ab:3d:c7:17:81:db:46:a5:da:a7:0d:35:28:6f:c3:
78:fd:e1:35:d0:ad:e3:ba:2d:65:55:b3:c9:bb:26:
40:f2:07:2b:e9:6c:e6:7d:71:df:57:0a:20:c5:70:
5b:17:fc:78:c7:d5:b8:81:2e:b2:89:42:06:79:12:
f3:5f:af:1f:f8:b7:be:e6:6b:06:00:0f:21:10:45:
6d:6c:15:6d:16:0e:43:85:ac:8d:a9:a5:98:e2:57:
ad:d5:63:ca:20:18:30:f3:e7:15:f5:2c:4a:18:d8:
97:bc:2b:f1:a5:38:0f:0e:bd:61:07:a8:63:5a:b4:
c9:4c:a2:97:56:c4:bc:8c:5e:b9:66:2b:0b:41:9a:
b2:7d:c4:fa:32:d4:fd:40:53:22:40:88:ad:88:4e:
fd:d7:49:ef:b1:b2:b8:ef:a3:00:96:ce:5b:1a:97:
2b:d6:5c:41:4e:cf:d4:05:af:9e:8d:89:3c:35:be:
de:5e:d9:05:22:92:4c:9b:dc:a2:cc:24:64:85:0e:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9C:49:CC:CA:24:0A:E8:D0:1F:2B:87:3D:50:CA:65:DB:8D:77:3E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/IpxJzMokCujQHyuHPVDKZduNdz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.204.0/24
Signature Algorithm: sha256WithRSAEncryption
93:67:93:98:e7:0a:b2:ae:f4:ff:a2:06:2f:36:27:e6:28:38:
71:76:60:14:af:c1:ff:a4:c4:d5:bc:af:53:32:1b:5f:e0:6e:
38:f1:f2:ef:17:80:1b:bc:48:36:4d:a8:7b:95:15:a6:b6:b2:
24:19:57:cc:ee:c4:9b:ba:16:2c:ae:c1:37:dd:9a:27:fe:f9:
fe:4f:24:3c:48:07:70:3f:a5:f4:f0:3a:81:96:15:c5:01:ee:
9e:38:89:76:76:fb:e9:a2:38:7b:e6:6b:39:8d:32:c1:14:d0:
29:89:e6:b3:c9:54:4e:67:13:10:16:2e:f6:21:3b:ee:18:0e:
ee:1c:1d:8c:ea:9c:bf:46:ca:78:bb:89:34:29:81:6d:7f:ba:
4c:19:21:a9:d5:eb:e7:a1:48:23:d1:53:65:e2:ed:bb:f7:6c:
27:30:08:c0:33:85:cd:53:4f:7d:5d:23:d0:28:52:e6:37:ac:
51:94:3b:df:b8:70:31:d0:e9:4c:2e:7b:6d:75:3e:31:35:35:
33:50:30:1e:cf:f9:cc:88:e7:ed:22:7f:42:d4:b2:ae:83:23:
5d:a1:09:c8:36:5a:6b:a1:9f:5e:3c:75:91:45:19:7d:bc:87:
1d:a6:e1:b1:48:91:59:d6:76:d1:3a:b3:b9:a9:f6:7a:a9:c7:
6e:03:1d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:06:12 2025 by rpki-client