Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/pdjC9ITQ24acWwqpMZ438xSZhiA.roa
File: pdjC9ITQ24acWwqpMZ438xSZhiA.roa (raw, json)
Hash identifier: J1OLMcnc+nGL4fyVYlLU268vrwR6/zxGbhF2T7OJ2uY=
Subject key identifier: A5:D8:C2:F4:84:D0:DB:86:9C:5B:0A:A9:31:9E:37:F3:14:99:86:20
Certificate issuer: /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial: 0194236A54B48E9B2F824A7D59E18C210E0A
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/pdjC9ITQ24acWwqpMZ438xSZhiA.roa
Signing time: Wed 01 Jan 2025 19:49:18 +0000
ROA not before: Wed 01 Jan 2025 19:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196733
IP address blocks: 93.89.64.0/21 maxlen: 21
93.89.72.0/21 maxlen: 21
193.109.134.0/23 maxlen: 23
2a01:ad80::/32 maxlen: 32
2a01:ad80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:54:b4:8e:9b:2f:82:4a:7d:59:e1:8c:21:0e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Validity
Not Before: Jan 1 19:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5d8c2f484d0db869c5b0aa9319e37f314998620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:d1:13:d7:bd:46:38:8f:0b:8c:af:a0:87:
3e:b2:ef:2d:f7:23:72:8d:b0:80:f4:9a:70:e1:b3:
5e:be:6a:14:76:95:c7:1e:9e:14:6a:6d:20:e7:34:
1b:46:ed:17:ed:bf:ad:f6:a8:c3:00:2a:5f:69:e3:
91:2d:cd:16:3d:5b:40:94:26:7e:0d:ee:a1:5d:34:
ea:13:be:87:55:04:38:d8:80:09:f1:eb:85:d3:02:
a4:4f:6c:74:ff:f5:be:4b:60:18:3b:a6:f7:f1:a0:
16:1a:7a:02:1c:df:5b:02:af:e3:49:f9:b0:53:74:
41:74:14:67:79:73:71:b4:3f:8a:34:a6:e3:86:a3:
7e:4e:b7:9e:4b:6d:23:2f:9c:ec:b8:d8:96:0b:f3:
4e:fc:8f:ec:9d:45:4c:6c:bf:cc:e8:53:fb:ad:43:
13:4c:fd:af:96:f7:16:0c:77:66:32:22:5c:e2:d1:
64:21:01:08:7d:7d:e9:a7:68:3a:14:c3:71:bd:bd:
75:03:52:50:aa:49:cd:3b:2b:9b:fd:71:4f:23:91:
45:e6:0d:9b:ae:b8:bf:85:f6:8d:17:63:bc:80:af:
1f:16:77:25:1e:88:69:bb:3a:81:70:ad:5e:58:4d:
ff:d2:85:05:19:70:e2:88:17:12:14:13:28:53:4d:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D8:C2:F4:84:D0:DB:86:9C:5B:0A:A9:31:9E:37:F3:14:99:86:20
X509v3 Authority Key Identifier:
keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/pdjC9ITQ24acWwqpMZ438xSZhiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.64.0/20
193.109.134.0/23
IPv6:
2a01:ad80::/32
Signature Algorithm: sha256WithRSAEncryption
08:eb:35:bf:17:fb:45:68:37:bb:73:4f:f3:59:2e:18:91:0e:
92:1e:74:91:17:f6:e1:24:e7:4a:1d:13:3c:eb:41:0f:22:8d:
b6:e3:cc:5c:9e:e9:50:99:ec:77:d5:50:5b:e5:37:7b:54:48:
a2:cf:b2:1b:62:b5:08:8a:ce:c9:14:37:31:71:d2:69:cf:eb:
08:80:b5:e4:b9:39:c8:de:56:0b:9d:a5:91:d9:59:f8:94:3a:
bf:be:d8:e8:60:a5:01:a9:c1:b7:09:90:54:37:f4:76:c4:ed:
4e:7a:c8:ef:77:49:61:08:b0:e8:2e:68:46:f4:4a:71:6c:2f:
78:17:0e:18:e7:0d:0c:ff:01:f6:35:ee:77:d3:27:5c:a8:68:
ef:af:34:91:dc:25:f2:c0:f7:76:bf:c1:57:35:fc:17:76:e7:
e5:03:5c:fe:20:db:38:71:7c:30:b8:71:79:b6:8e:eb:84:ce:
69:4d:fb:be:b3:41:08:05:3a:b3:ef:50:d2:e9:ed:90:06:9c:
f6:2f:8e:6e:8d:89:26:c9:84:9d:76:77:09:10:e0:e9:a1:26:
0d:39:45:9f:1a:f5:3b:e9:74:ae:c1:d8:f4:b9:e2:10:72:9b:
08:91:e2:86:2a:07:6c:12:f8:9a:32:cd:b5:28:3f:7b:13:6f:
15:32:d8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:28 2025 by rpki-client