Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/6FMleRn7QE-uKMdEakcsOaCZ1ss.roa
File: 6FMleRn7QE-uKMdEakcsOaCZ1ss.roa (raw, json)
Hash identifier: mcv6vhN3tb3ONM9bZ3O2URAWmhAYPv+UUje7yYCRo5U=
Subject key identifier: E8:53:25:79:19:FB:40:4F:AE:28:C7:44:6A:47:2C:39:A0:99:D6:CB
Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Certificate serial: 0194214380FE0DC477B6C6B37540F95ABC24
Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/6FMleRn7QE-uKMdEakcsOaCZ1ss.roa
Signing time: Wed 01 Jan 2025 09:47:39 +0000
ROA not before: Wed 01 Jan 2025 09:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25141
IP address blocks: 93.157.8.0/24 maxlen: 24
93.157.9.0/24 maxlen: 24
93.157.10.0/24 maxlen: 24
93.157.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:80:fe:0d:c4:77:b6:c6:b3:75:40:f9:5a:bc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa
Validity
Not Before: Jan 1 09:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e853257919fb404fae28c7446a472c39a099d6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e5:49:4f:d8:44:0c:d4:dc:41:8a:6e:5a:be:
03:bc:8a:ec:6b:5a:d4:46:c9:88:f4:c9:6c:6d:17:
d0:09:ad:8c:95:34:71:c0:bf:6a:0e:85:53:20:96:
8b:6c:1c:33:4b:c6:26:5c:43:bc:d4:dd:87:43:16:
57:10:e0:9f:0c:2a:18:e2:a9:6e:8f:10:7a:72:b0:
e1:09:2b:1c:3e:85:83:aa:9b:21:c9:e7:75:a6:3b:
3f:6e:48:21:af:fe:69:ba:f0:86:ea:00:e9:55:45:
c0:5d:c3:12:e0:9c:87:8e:01:8a:be:4f:3b:2b:3e:
23:47:16:4c:88:54:f7:a7:77:1f:2a:cf:60:0c:c4:
87:0d:a8:4d:9d:e1:32:f4:f9:5c:f5:f3:48:80:4c:
08:6e:a5:1c:7c:f1:45:9f:9e:16:1e:56:66:c4:37:
02:f5:70:9a:8a:d4:62:84:a6:81:21:a1:7e:d4:2d:
c4:1b:88:3b:b8:c5:02:37:65:41:99:b7:a6:0d:a5:
32:2b:3f:65:44:45:39:20:c2:a5:f9:74:6e:91:1f:
b1:75:f8:f4:07:32:f2:31:31:d9:26:5c:ef:4f:56:
76:48:ec:7c:e3:2f:9a:ad:92:38:b2:f2:de:8c:5b:
92:03:9f:40:eb:4d:7d:d9:ad:f9:ba:d4:99:46:ba:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:53:25:79:19:FB:40:4F:AE:28:C7:44:6A:47:2C:39:A0:99:D6:CB
X509v3 Authority Key Identifier:
keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/6FMleRn7QE-uKMdEakcsOaCZ1ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.8.0/22
Signature Algorithm: sha256WithRSAEncryption
06:8f:7c:5d:a1:60:42:9b:5d:f1:71:e4:75:a9:ba:3e:f5:09:
a5:74:e9:26:bd:9e:7b:97:1a:2a:e1:d8:28:55:26:62:4d:ac:
14:16:16:36:a3:7c:5b:b2:da:96:42:25:45:1e:fe:a1:6c:5e:
1e:e6:c4:73:5b:a5:a6:a0:2c:d6:59:8b:a7:81:54:b5:1d:0d:
f9:db:a7:cb:c0:31:96:ea:9f:68:19:a6:fe:44:e3:ca:7e:df:
d4:9d:17:ba:8b:17:bd:dd:e8:e4:99:3f:23:c0:f9:c0:ce:66:
18:23:28:29:32:31:2b:9c:a5:9c:9f:56:af:20:b4:be:5d:86:
19:42:f9:f2:62:f1:39:43:15:1e:8c:94:d6:6b:d0:ab:1e:25:
9e:5d:11:53:10:a9:67:8b:b0:60:db:40:94:0e:43:f6:34:e4:
58:65:44:10:7e:3b:36:fa:9b:ad:09:f6:a1:2a:3e:53:f9:6a:
9b:87:bd:97:78:14:86:01:2a:af:66:46:1c:a3:14:8c:98:57:
de:8b:64:5d:28:70:d8:03:60:1c:2a:ff:02:fe:93:4a:1e:bc:
69:15:1f:3a:dc:77:1d:5c:1f:df:84:29:3b:56:7c:79:bd:fe:
cf:5f:62:62:80:67:f1:8b:87:1c:52:73:79:6b:8b:b8:c9:c9:
0f:16:84:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:08:17 2025 by rpki-client