Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/kNjxTs2znVvLY08E4W9HAeORpIc.roa
File: kNjxTs2znVvLY08E4W9HAeORpIc.roa (raw, json)
Hash identifier: iCvB3dIqghJ54VOy8M3fVHjOeELiRaWYAGP93zCiWmc=
Subject key identifier: 90:D8:F1:4E:CD:B3:9D:5B:CB:63:4F:04:E1:6F:47:01:E3:91:A4:87
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 0194236A522D5BD55A83641D974BE94C6680
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/kNjxTs2znVvLY08E4W9HAeORpIc.roa
Signing time: Wed 01 Jan 2025 19:49:17 +0000
ROA not before: Wed 01 Jan 2025 19:49:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44451
IP address blocks: 93.92.8.0/21 maxlen: 21
94.247.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:52:2d:5b:d5:5a:83:64:1d:97:4b:e9:4c:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jan 1 19:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90d8f14ecdb39d5bcb634f04e16f4701e391a487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:20:9d:94:7a:78:c8:88:cf:7e:0c:84:53:
89:1d:bd:f7:a7:3d:11:2c:1a:b5:7b:68:54:e9:51:
9b:e0:0b:b6:e8:57:f7:83:9f:b8:91:e5:4d:70:91:
2f:b5:71:82:fc:c2:01:c3:cb:f6:2e:40:d1:5e:42:
9e:36:4b:a7:08:0f:0d:e0:e1:77:23:c5:13:8b:69:
a6:55:c8:ae:8a:c0:3c:ba:2a:e1:34:db:92:5c:f4:
ef:c1:47:43:d2:25:e6:22:80:7b:35:95:de:57:92:
da:48:ea:cf:9a:cd:e9:e2:b2:18:66:d8:95:b2:a6:
ac:e7:0d:dc:64:6e:ce:fc:61:a4:a5:a8:64:fa:b5:
28:50:9e:c6:cf:d7:83:21:f1:ce:43:de:d1:d6:50:
fb:80:8f:ae:4a:ac:4f:2c:ff:aa:b0:c1:99:7c:8a:
b8:91:be:ff:28:1b:09:fb:c5:47:33:e8:4c:53:7f:
35:f3:ce:d8:f3:84:81:d8:80:e2:60:2c:a7:87:3e:
e4:ee:7e:89:8c:d0:9e:45:32:0f:36:2f:2d:e1:80:
28:52:67:d5:00:6d:41:e2:2c:2d:28:cf:3a:40:a6:
6b:06:7c:ac:18:f6:33:63:5d:76:b5:16:6d:6a:38:
07:fc:a7:eb:d1:ba:87:2d:b6:ce:64:a6:96:0e:43:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D8:F1:4E:CD:B3:9D:5B:CB:63:4F:04:E1:6F:47:01:E3:91:A4:87
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/kNjxTs2znVvLY08E4W9HAeORpIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.8.0/21
94.247.48.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:e4:29:17:d0:7a:b2:0a:57:b6:6a:15:fb:dc:eb:ee:fb:86:
97:c4:7d:3e:4e:38:26:aa:b5:76:67:2f:2b:e8:d0:c6:7c:f3:
05:7e:ca:79:10:dc:98:c3:fc:b6:ba:9e:ce:26:d8:c5:86:8d:
85:82:aa:2e:68:af:f4:e8:0c:2c:12:1b:a0:53:fb:d5:1d:01:
68:dc:d8:f4:c7:18:4d:4f:88:13:57:94:09:05:42:e9:c4:d8:
37:41:84:60:0d:15:5e:10:e8:33:0c:28:8d:0b:55:9c:ce:a5:
93:d8:7e:a2:34:38:01:e9:6c:50:28:08:92:78:94:50:2c:e5:
57:0f:33:2b:ce:6f:e9:da:2d:9e:e5:82:72:0a:63:55:40:0e:
12:33:9e:9c:e3:dd:df:c9:db:fa:87:f0:8d:7a:14:69:96:31:
8d:f2:1f:23:11:96:f5:1c:f0:32:4f:bf:a9:f4:9c:a1:50:3f:
9c:d3:7f:7b:73:44:61:7b:00:d7:3d:96:93:5e:ba:cc:2d:35:
47:34:1c:ab:cd:1a:c3:9d:62:7b:74:57:c2:fd:61:38:b0:70:
e6:48:e9:c3:e0:25:e7:b7:be:af:f8:31:ec:ab:19:c9:49:8d:
d0:08:a1:8f:d7:e3:7f:52:c9:a4:77:a3:9d:99:c3:d3:fc:b4:
d3:f0:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:37 2025 by rpki-client