Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/gFreThJqNlHPvyHQ79dnfJgTPWo.roa
File: gFreThJqNlHPvyHQ79dnfJgTPWo.roa (raw, json)
Hash identifier: L3hMFyzcKxYUiA62qUifu4SJz3107QolnvNpa2edIOo=
Subject key identifier: 80:5A:DE:4E:12:6A:36:51:CF:BF:21:D0:EF:D7:67:7C:98:13:3D:6A
Certificate issuer: /CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Certificate serial: 0194282549BE669E74CC1C1F467540F28878
Authority key identifier: E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/gFreThJqNlHPvyHQ79dnfJgTPWo.roa
Signing time: Thu 02 Jan 2025 17:51:59 +0000
ROA not before: Thu 02 Jan 2025 17:51:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50606
IP address blocks: 93.105.88.0/22 maxlen: 22
95.160.58.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:49:be:66:9e:74:cc:1c:1f:46:75:40:f2:88:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6596f1b163cab0c45a84eeb13261b65f1a22962
Validity
Not Before: Jan 2 17:51:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=805ade4e126a3651cfbf21d0efd7677c98133d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:67:ab:b9:6d:98:d8:ee:f4:81:20:4d:da:
7f:1c:8d:78:16:d7:45:7b:55:f4:9d:37:d1:70:18:
1d:d0:68:91:0c:c8:ea:1c:b8:43:f8:95:ad:af:57:
2e:10:50:54:ae:c5:53:7d:47:1b:3f:8d:4f:1e:0b:
57:b6:7c:b9:fa:be:d0:7d:0a:78:ac:98:99:ae:a1:
29:fe:df:be:91:c5:12:fb:87:6b:96:23:1c:70:ff:
de:02:2f:87:a4:02:4d:fa:7a:79:91:81:d2:64:b4:
94:a2:b6:47:0a:ce:1d:31:4e:4e:68:bd:93:c9:84:
a1:5c:29:8e:63:aa:81:36:c3:88:e2:b0:17:49:06:
1a:95:4e:f8:a6:1b:62:42:c6:44:6a:bd:b3:fb:33:
06:3e:38:c4:f1:9f:d8:8d:be:2a:a2:b2:3e:76:d0:
5c:8b:71:53:2a:cf:5f:4d:c8:ac:14:4e:06:06:0d:
52:53:19:f9:cf:b7:04:1c:1d:69:03:f1:c8:cf:17:
8c:19:51:d8:27:33:69:76:8a:92:77:f7:f6:ee:cf:
51:64:7b:f3:f6:98:59:31:aa:5f:c7:df:ce:8f:05:
cd:30:c0:31:7f:ae:64:31:ee:99:56:06:29:78:8f:
e5:80:aa:5f:dd:2f:08:76:f5:b3:6c:aa:2f:1f:cc:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5A:DE:4E:12:6A:36:51:CF:BF:21:D0:EF:D7:67:7C:98:13:3D:6A
X509v3 Authority Key Identifier:
keyid:E6:59:6F:1B:16:3C:AB:0C:45:A8:4E:EB:13:26:1B:65:F1:A2:29:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5llvGxY8qwxFqE7rEyYbZfGiKWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/gFreThJqNlHPvyHQ79dnfJgTPWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/ede94e-ba2a-41ee-b12c-e0534e23859b/1/5llvGxY8qwxFqE7rEyYbZfGiKWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.105.88.0/22
95.160.58.0/24
Signature Algorithm: sha256WithRSAEncryption
02:99:3f:6c:5f:36:54:11:00:89:45:61:63:5b:42:37:29:3f:
98:ba:a6:55:06:cf:ba:1f:9a:96:5b:05:c5:58:f3:ff:75:79:
ea:b3:0d:dc:b9:8c:63:56:15:81:6f:c9:bc:ce:db:f3:fd:35:
54:82:f6:de:fd:0e:7c:b3:35:7c:f1:ed:2d:32:1a:3c:73:3c:
f7:26:b8:1f:fa:87:e9:f8:06:e7:ea:e6:c5:0c:f3:d6:72:8f:
46:56:76:1f:77:39:da:4b:65:b5:da:c4:a8:36:63:a5:35:0e:
f9:07:b3:66:ea:d9:be:c9:b0:27:1c:c8:ae:04:ca:2a:00:c3:
6e:e8:77:35:bc:6c:f6:f4:cc:1f:f4:5a:ad:87:1d:f0:da:b4:
8e:c8:5d:dc:16:63:20:14:b7:e8:bc:1d:35:26:57:2b:f6:1b:
cd:ee:b7:a7:86:09:86:c1:91:f6:03:fe:8f:e2:92:b6:4d:73:
03:10:48:ad:94:f9:f8:1a:a0:bf:c8:4d:1b:b8:65:21:e7:ba:
11:45:fe:41:7a:91:fe:fd:0c:44:c8:83:0b:e9:79:1c:57:63:
d5:7a:b3:af:b1:9f:7a:71:4a:04:12:8e:63:30:9e:c1:11:fe:
45:fa:2d:aa:ac:15:2b:95:d4:e8:f2:d9:5b:1d:52:92:77:a7:
55:30:fe:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:33 2025 by rpki-client