Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/i00Nyy2VhQK9HEEpvIhSRMcDQ0o.roa
File: i00Nyy2VhQK9HEEpvIhSRMcDQ0o.roa (raw, json)
Hash identifier: NEwL6l83UnBavD9cItWgIj0+1vFCka7pyL3HvdCPyl0=
Subject key identifier: 8B:4D:0D:CB:2D:95:85:02:BD:1C:41:29:BC:88:52:44:C7:03:43:4A
Certificate issuer: /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial: 019424B27D771E91F76E42F68305A90149AB
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/i00Nyy2VhQK9HEEpvIhSRMcDQ0o.roa
Signing time: Thu 02 Jan 2025 01:47:44 +0000
ROA not before: Thu 02 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60508
IP address blocks: 93.90.76.0/22 maxlen: 22
93.90.76.0/24 maxlen: 24
93.90.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7d:77:1e:91:f7:6e:42:f6:83:05:a9:01:49:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
Validity
Not Before: Jan 2 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b4d0dcb2d958502bd1c4129bc885244c703434a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a2:b2:bd:38:6d:8c:23:c6:f9:79:de:07:54:
15:a8:57:86:67:16:e1:5b:39:38:b4:bb:3b:93:b3:
13:6d:28:81:11:93:c7:ab:d8:68:54:b8:45:9d:d4:
2d:19:f9:89:92:4b:55:c6:95:a5:98:6d:3a:d5:f6:
bf:c3:7b:b5:2a:88:5c:fa:01:fe:1b:e7:fe:6c:24:
5b:2f:47:7c:dc:bf:35:ed:38:a9:0c:c7:48:16:a8:
8c:9d:ba:36:67:b3:88:de:32:fe:63:cd:76:d2:29:
64:37:ea:76:e6:11:92:54:20:b6:0a:d5:49:12:a7:
ac:34:bd:0a:1c:10:a6:09:ca:96:e2:fb:b9:3e:02:
7a:07:c5:8f:0f:f9:88:2b:22:65:e5:3b:3c:c7:eb:
b9:86:95:9a:45:bf:be:d7:f3:18:03:08:a2:a3:c1:
b1:84:4a:c4:43:e0:ca:f0:02:95:7c:85:52:bd:f4:
1c:54:00:47:5e:74:92:68:43:71:5a:46:f8:01:ef:
9a:19:4c:0f:7b:32:13:d5:40:bb:28:ce:6f:ec:62:
ea:ff:54:69:20:91:e2:27:d0:71:98:0a:62:b9:a0:
b4:18:ce:1a:97:b4:ee:6d:2b:f7:4e:ce:0b:50:16:
62:55:47:d5:b2:89:10:03:04:81:aa:e4:4b:31:a3:
22:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4D:0D:CB:2D:95:85:02:BD:1C:41:29:BC:88:52:44:C7:03:43:4A
X509v3 Authority Key Identifier:
keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/i00Nyy2VhQK9HEEpvIhSRMcDQ0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.90.76.0/22
Signature Algorithm: sha256WithRSAEncryption
25:b7:e3:a1:15:38:ea:b5:8b:66:ef:91:69:8d:ea:70:b5:73:
65:af:c6:d1:d4:b0:80:5c:60:61:83:e0:d6:88:1f:95:2f:0d:
72:4d:9a:8d:18:54:de:39:eb:10:46:8b:52:30:9c:42:22:b4:
20:cf:81:57:ab:83:78:eb:85:56:0a:32:16:fc:88:d5:fb:a3:
80:5e:3d:fa:9d:03:0e:9b:86:93:40:21:6a:c7:91:cc:da:f2:
76:20:2d:31:24:cc:87:bc:52:2e:1f:98:32:bc:34:54:d0:2b:
8a:f1:a4:63:19:6d:35:b6:84:33:19:1b:0e:68:87:0d:3a:34:
a1:11:ec:18:b8:90:7e:5b:92:3c:31:42:b6:7b:35:19:ad:88:
e2:35:0b:57:86:df:43:b5:a4:a0:92:bb:fd:3f:de:8a:1a:80:
93:b4:ad:d3:de:50:f6:5a:e2:51:c2:ee:e9:89:a2:8d:d3:7e:
0d:a7:e9:a9:ca:4e:b8:45:83:34:ed:2c:4a:9d:bc:32:28:0c:
2d:ba:45:9b:ce:f3:ae:0d:86:90:42:ac:17:0b:b2:10:48:d8:
36:bc:d6:b9:73:9e:52:39:d3:80:8d:d9:c1:8b:21:6f:c2:ea:
c2:e7:5b:6b:2d:9b:ec:17:96:27:fc:6d:42:4c:b6:f3:3e:e6:
55:ec:20:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksn13HpH3bkL2gwWpAUmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzc1NmM2OTEwNzM3NTIyNjBlZGEwYjI5ZGYzMTQwY2Vj
NDhjMTgwHhcNMjUwMTAyMDE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjRkMGRjYjJkOTU4NTAyYmQxYzQxMjliYzg4NTI0NGM3MDM0MzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqKyvThtjCPG+XneB1QVqFeGZxbh
Wzk4tLs7k7MTbSiBEZPHq9hoVLhFndQtGfmJkktVxpWlmG061fa/w3u1Kohc+gH+
G+f+bCRbL0d83L817TipDMdIFqiMnbo2Z7OI3jL+Y8120ilkN+p25hGSVCC2CtVJ
EqesNL0KHBCmCcqW4vu5PgJ6B8WPD/mIKyJl5Ts8x+u5hpWaRb++1/MYAwiio8Gx
hErEQ+DK8AKVfIVSvfQcVABHXnSSaENxWkb4Ae+aGUwPezIT1UC7KM5v7GLq/1Rp
IJHiJ9BxmApiuaC0GM4al7TubSv3Ts4LUBZiVUfVsokQAwSBquRLMaMimQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFItNDcstlYUCvRxBKbyIUkTHA0NKMB8GA1UdIwQY
MBaAFOLHVsaRBzdSJg7aCynfMUDOxIwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAt
NWE0ZDhiNGUzZjBhLzEvaTAwTnl5MlZoUUs5SEVFcHZJaFNSTWNEUTBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAtNWE0ZDhiNGUzZjBh
LzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXVpMMA0G
CSqGSIb3DQEBCwUAA4IBAQAlt+OhFTjqtYtm75FpjepwtXNlr8bR1LCAXGBhg+DW
iB+VLw1yTZqNGFTeOesQRotSMJxCIrQgz4FXq4N464VWCjIW/IjV+6OAXj36nQMO
m4aTQCFqx5HM2vJ2IC0xJMyHvFIuH5gyvDRU0CuK8aRjGW01toQzGRsOaIcNOjSh
EewYuJB+W5I8MUK2ezUZrYjiNQtXht9DtaSgkrv9P96KGoCTtK3T3lD2WuJRwu7p
iaKN034Np+mpyk64RYM07SxKnbwyKAwtukWbzvOuDYaQQqwXC7IQSNg2vNa5c55S
OdOAjdnBiyFvwurC51trLZvsF5Yn/G1CTLbzPuZV7CDO
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:01 2025 by rpki-client