Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/4YzbiOUc55i_-wnN2lE8VcFHTjM.roa
File: 4YzbiOUc55i_-wnN2lE8VcFHTjM.roa (raw, json)
Hash identifier: EJ1xacTTePUHCKfjWzR41VZNC5bwx1ceCyx+D2VuM0k=
Subject key identifier: E1:8C:DB:88:E5:1C:E7:98:BF:FB:09:CD:DA:51:3C:55:C1:47:4E:33
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 0194236A1D1E481D4E6E7112ECFC09250DC2
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/4YzbiOUc55i_-wnN2lE8VcFHTjM.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49785
IP address blocks: 93.159.190.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1d:1e:48:1d:4e:6e:71:12:ec:fc:09:25:0d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e18cdb88e51ce798bffb09cdda513c55c1474e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:43:93:a3:6f:00:ef:46:37:49:5f:b3:c6:
29:30:98:ae:17:be:a2:e2:29:58:66:0c:e0:30:02:
a9:0a:2f:98:a5:28:0f:64:24:c0:5d:94:28:d6:e3:
b8:38:51:40:3b:42:eb:c2:2a:b5:38:6c:f9:69:ac:
35:3e:a1:6e:f1:ce:b2:bd:a2:01:9d:08:2b:bb:5f:
f4:bc:02:97:ff:f8:e8:85:9c:72:5b:93:12:18:fa:
2b:84:cb:1d:dc:cd:57:f7:5c:04:95:4d:29:a6:4b:
1a:d2:e1:17:9e:5a:d5:ac:60:79:6e:81:0f:79:d0:
d7:18:30:bf:4b:96:0e:94:dd:cd:b7:72:89:a1:78:
42:bd:c1:1b:cf:36:14:a2:cd:2f:9b:28:52:4f:2b:
13:ec:9e:a5:97:78:c0:d5:b7:2e:0b:f1:1c:51:6b:
cf:cc:bf:93:5d:39:19:e0:fe:e1:95:f5:62:38:08:
29:0c:08:8c:f6:96:3c:88:6f:1f:e3:10:f7:d0:dc:
b4:1d:26:a1:24:c8:49:31:77:95:03:54:cf:d2:d5:
e5:e9:4c:7b:c3:63:b3:1b:e9:7d:d2:b9:44:5a:51:
61:d9:a6:6e:ab:03:4e:17:df:85:7a:c0:f6:c8:f8:
5b:16:b3:df:13:b0:1f:d6:8e:fe:ee:a3:77:f3:0d:
0e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8C:DB:88:E5:1C:E7:98:BF:FB:09:CD:DA:51:3C:55:C1:47:4E:33
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/4YzbiOUc55i_-wnN2lE8VcFHTjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.190.0/23
Signature Algorithm: sha256WithRSAEncryption
85:78:d1:ef:74:dc:f0:8a:83:f8:ba:dd:f2:11:78:50:a2:b3:
70:86:a0:f5:32:ae:61:1b:8e:5b:50:09:3b:be:26:3a:50:4c:
b6:8b:c5:c6:16:20:3a:f0:1b:13:c7:08:d4:c4:35:cc:4d:f4:
35:dd:06:db:d2:e1:4d:5d:ce:df:09:9a:a9:0b:fd:02:04:f1:
a2:8d:57:7d:fe:b4:f3:78:0e:c1:11:a8:46:c0:be:9c:de:c2:
c4:39:28:81:cd:44:42:ea:38:b4:90:68:ad:43:a6:93:d4:ae:
38:18:d4:71:93:ec:39:37:f7:69:df:ae:87:d6:51:3d:94:4c:
bb:01:fa:b6:97:e9:8a:82:c2:cd:e6:82:1a:13:f5:20:4e:76:
79:25:e9:34:60:9c:44:db:c4:fb:22:0d:7c:b0:46:fb:5a:09:
b3:c6:3a:85:be:97:3d:8e:cc:f6:e7:be:f4:05:c1:d4:8b:31:
4c:74:b0:01:32:2a:14:bc:da:19:85:8a:13:a2:d6:26:80:5f:
68:59:50:2b:bd:53:21:6a:32:bb:e8:9d:5b:34:dc:63:97:9f:
7a:d4:59:a2:8d:58:58:04:44:cb:07:72:e1:98:62:b5:4a:e4:
c3:a4:84:ce:2b:b6:20:98:ca:6c:cf:b0:c6:e0:3d:73:79:6f:
ba:38:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:11 2025 by rpki-client