Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/SLekjmBf2tyIMOB3CJb0Z47uJtk.roa
File: SLekjmBf2tyIMOB3CJb0Z47uJtk.roa (raw, json)
Hash identifier: dyK450H8i+alS9mWM0crx5H3Vwy79u+jha7k1eN+nzM=
Subject key identifier: 48:B7:A4:8E:60:5F:DA:DC:88:30:E0:77:08:96:F4:67:8E:EE:26:D9
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 0194236A1F029F4D084A000D6106F8927422
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/SLekjmBf2tyIMOB3CJb0Z47uJtk.roa
Signing time: Wed 01 Jan 2025 19:49:04 +0000
ROA not before: Wed 01 Jan 2025 19:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202061
IP address blocks: 93.159.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:1f:02:9f:4d:08:4a:00:0d:61:06:f8:92:74:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 19:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48b7a48e605fdadc8830e0770896f4678eee26d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c9:9d:99:e5:9f:31:ba:f9:c1:ec:ee:3f:37:
ca:b4:4b:9e:f0:e3:bf:0f:24:a9:8a:07:d8:af:32:
c6:ef:2b:11:1a:4e:fe:0f:f5:96:f8:48:32:a4:df:
74:70:73:d6:96:30:29:37:93:44:4e:29:8a:30:46:
06:60:1f:f7:2b:0c:d1:09:f5:55:b5:5a:e8:92:e0:
b0:32:d4:54:e9:19:1b:cf:bc:60:80:7f:a6:37:fc:
f8:d0:7e:f2:c0:18:2e:54:a6:34:b5:ca:7e:c0:15:
46:4d:d1:8f:3a:dd:5b:93:d8:b3:9a:91:9b:a8:2c:
f3:86:cc:c7:a5:29:c4:29:99:05:ae:76:cb:af:e3:
83:0e:35:b3:a2:24:ae:50:7d:0f:aa:ac:0b:0d:74:
cf:27:7c:f1:06:ba:d0:73:18:bd:39:64:1c:80:d9:
cf:41:b3:98:34:b7:6c:21:d7:1d:db:15:ed:91:a2:
cd:23:bd:a2:c2:f5:fa:a1:b5:2d:2b:2a:79:3a:64:
a1:e1:72:e2:36:f2:e1:47:cd:00:e0:b9:20:a9:3c:
3c:e7:5a:ad:c8:82:9c:29:49:c9:d5:55:91:e7:08:
57:e8:f1:5d:fd:3b:bc:93:03:c4:8c:58:4b:cc:52:
1b:d5:fe:52:53:7b:cd:7e:c2:d4:78:7d:79:4c:63:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B7:A4:8E:60:5F:DA:DC:88:30:E0:77:08:96:F4:67:8E:EE:26:D9
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/SLekjmBf2tyIMOB3CJb0Z47uJtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.185.0/24
Signature Algorithm: sha256WithRSAEncryption
74:f3:23:e8:f8:6d:52:8f:9c:ae:0d:09:74:ed:f7:81:87:4d:
9d:92:ba:e0:53:d3:7f:8a:d3:d3:f6:96:36:66:b5:fc:52:1a:
e4:fb:37:a5:2a:f9:49:cd:1c:11:63:f1:33:b4:ed:25:64:a9:
1b:4a:8a:da:7e:b5:3f:3f:6c:6c:65:11:1b:35:08:c5:de:6d:
c1:cf:34:b3:84:62:01:12:64:65:7b:d6:bd:26:b1:db:5e:24:
de:56:fa:82:3e:6a:fe:17:40:8c:e3:fd:07:8e:d2:b8:43:d2:
d3:ac:8a:22:0c:14:e4:15:23:bd:89:72:1b:77:6d:87:59:91:
a6:ba:7c:69:e8:97:14:97:12:69:cd:15:45:4b:23:3a:e8:ee:
e9:e6:04:42:50:37:0c:40:4c:77:09:f7:86:28:c9:14:b8:ac:
42:44:a9:bb:48:2a:11:c4:0d:74:07:83:c4:35:c7:4a:16:60:
12:14:c8:cb:e8:b0:bc:63:72:7e:c9:a6:85:88:cf:56:8b:64:
eb:00:75:1d:d5:c2:19:9b:f8:68:27:70:21:90:3e:f6:32:fd:
1d:7d:f7:ad:7e:0d:87:b9:26:a2:d9:13:86:48:3d:26:13:67:
e6:27:00:57:c9:0a:1a:fa:64:bf:7f:5f:35:5f:a4:d2:c2:9e:
b2:1f:ed:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:39:13 2025 by rpki-client