Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/0JyAcPXL-bXwxT9T4RR50a8dw08.roa
File: 0JyAcPXL-bXwxT9T4RR50a8dw08.roa (raw, json)
Hash identifier: uXEDLrD6enC/axv995LzZVWavGREUCxmYJkE/6Uz3j8=
Subject key identifier: D0:9C:80:70:F5:CB:F9:B5:F0:C5:3F:53:E1:14:79:D1:AF:1D:C3:4F
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01941FFA67F317140DA15E3F41573FF02F57
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/0JyAcPXL-bXwxT9T4RR50a8dw08.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210392
IP address blocks: 93.126.14.0/24 maxlen: 24
93.126.23.0/24 maxlen: 24
93.126.36.0/24 maxlen: 24
93.126.37.0/24 maxlen: 24
93.126.38.0/24 maxlen: 24
93.126.45.0/24 maxlen: 24
93.126.46.0/24 maxlen: 24
93.126.47.0/24 maxlen: 24
93.126.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:67:f3:17:14:0d:a1:5e:3f:41:57:3f:f0:2f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d09c8070f5cbf9b5f0c53f53e11479d1af1dc34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:79:ee:08:65:16:9e:2a:13:58:75:9a:f6:
7c:4e:94:b8:89:3b:ea:d8:b2:05:fe:25:d3:59:de:
b3:0d:69:eb:fa:29:51:13:f9:86:9f:7f:b8:12:11:
74:9b:61:e0:ae:87:c7:fc:79:8d:5f:78:27:76:2f:
5f:b9:03:49:66:3e:49:16:cf:71:2e:4e:db:1e:17:
60:90:63:45:8e:7f:a5:e1:8a:75:72:a4:8e:57:9a:
16:3b:82:ca:79:fe:e3:b2:10:4e:44:33:98:62:97:
f6:8d:8c:f9:59:07:6b:f8:3d:45:52:36:67:2e:5a:
05:96:3f:cb:b1:60:9d:2b:29:a4:d7:de:79:54:47:
68:b6:bb:2c:1e:d1:c2:76:17:d0:6f:16:8f:bc:0b:
c1:61:7c:b3:25:64:f0:d8:e2:15:69:62:29:dc:af:
69:3d:1f:24:0e:4e:fc:b1:c9:78:13:39:ba:68:59:
a0:46:01:12:6a:47:d0:9e:f2:88:f0:6a:dc:08:de:
57:41:60:47:36:c7:54:bb:40:e8:1a:b1:60:12:e1:
0d:84:7a:45:bc:c7:97:91:e3:f9:9d:9c:9d:b3:ab:
c6:ae:fa:48:44:18:54:f9:ee:9f:fb:8b:c7:7b:e5:
8f:fd:fb:81:8c:03:3f:7a:fb:74:a7:8a:69:03:84:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9C:80:70:F5:CB:F9:B5:F0:C5:3F:53:E1:14:79:D1:AF:1D:C3:4F
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/0JyAcPXL-bXwxT9T4RR50a8dw08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.14.0/24
93.126.23.0/24
93.126.36.0-93.126.38.255
93.126.45.0-93.126.48.255
Signature Algorithm: sha256WithRSAEncryption
38:37:ef:3f:95:d7:53:06:0a:f1:c5:e3:2b:8a:b6:26:94:d7:
0a:e7:7f:c7:a6:89:75:8f:41:84:5d:f9:59:4a:c6:9f:c8:c7:
40:8b:19:e8:06:1e:f9:64:78:36:f0:b7:1b:7a:5e:c6:9c:62:
26:84:61:64:3c:04:45:85:14:dc:94:a6:08:0b:52:32:0b:3d:
be:32:16:e5:62:11:a8:58:b6:88:13:ee:8e:a6:78:5c:ec:1c:
93:63:4a:5f:4e:b7:a9:84:a0:ed:82:b1:2b:5a:d0:c3:f8:f0:
b1:77:3f:ba:bd:f3:94:5e:8f:ef:73:46:45:f3:83:c0:fd:05:
b7:14:5d:a2:2b:6f:4b:b2:94:30:ff:ad:9c:11:f7:e0:bc:ee:
74:3e:58:a1:af:9b:62:da:d0:fb:94:52:1b:de:fb:bd:9e:f3:
df:74:49:98:1a:f3:62:65:e8:1b:df:3a:15:70:ff:81:64:60:
d8:ee:64:ab:5f:06:6a:2a:12:88:62:7b:9c:67:0b:5f:f9:f8:
30:89:93:58:66:b2:f6:ed:5b:ee:82:f5:e4:b3:72:ee:0b:8c:
3b:57:87:64:07:4d:43:8e:a6:d3:c8:ce:29:9c:86:51:e7:4d:
5a:42:13:de:47:93:46:23:8f:77:ea:1b:04:36:41:54:2d:fe:
bd:ca:98:e1
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZQf+mfzFxQNoV4/QVc/8C9XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm
NDA0ZDMwHhcNMjUwMTAxMDM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDljODA3MGY1Y2JmOWI1ZjBjNTNmNTNlMTE0NzlkMWFmMWRjMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTx57ghlFp4qE1h1mvZ8TpS4iTvq
2LIF/iXTWd6zDWnr+ilRE/mGn3+4EhF0m2HgrofH/HmNX3gndi9fuQNJZj5JFs9x
Lk7bHhdgkGNFjn+l4Yp1cqSOV5oWO4LKef7jshBORDOYYpf2jYz5WQdr+D1FUjZn
LloFlj/LsWCdKymk1955VEdotrssHtHCdhfQbxaPvAvBYXyzJWTw2OIVaWIp3K9p
PR8kDk78scl4Ezm6aFmgRgESakfQnvKI8GrcCN5XQWBHNsdUu0DoGrFgEuENhHpF
vMeXkeP5nZyds6vGrvpIRBhU+e6f+4vHe+WP/fuBjAM/evt0p4ppA4StyQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFNCcgHD1y/m18MU/U+EUedGvHcNPMB8GA1UdIwQY
MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt
NmMzOTUwMTk0MzcwLzEvMEp5QWNQWEwtYlh3eFQ5VDRSUjUwYThkdzA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw
LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAXX4OAwQA
XX4XMAwDBAJdfiQDBABdfiYwDAMEAF1+LQMEAF1+MDANBgkqhkiG9w0BAQsFAAOC
AQEAODfvP5XXUwYK8cXjK4q2JpTXCud/x6aJdY9BhF35WUrGn8jHQIsZ6AYe+WR4
NvC3G3pexpxiJoRhZDwERYUU3JSmCAtSMgs9vjIW5WIRqFi2iBPujqZ4XOwck2NK
X063qYSg7YKxK1rQw/jwsXc/ur3zlF6P73NGRfODwP0FtxRdoitvS7KUMP+tnBH3
4LzudD5Yoa+bYtrQ+5RSG977vZ7z33RJmBrzYmXoG986FXD/gWRg2O5kq18GaioS
iGJ7nGcLX/n4MImTWGay9u1b7oL15LNy7guMO1eHZAdNQ46m08jOKZyGUedNWkIT
3keTRiOPd+obBDZBVC3+vcqY4Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:45:37 2025 by rpki-client