Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/sPL5rUlzKx5_eiK0H41Atshaecg.roa
File: sPL5rUlzKx5_eiK0H41Atshaecg.roa (raw, json)
Hash identifier: gZZ6IxCmuB2B723uD8tUyKBaH66Mb5llFLuK/jyTEBM=
Subject key identifier: B0:F2:F9:AD:49:73:2B:1E:7F:7A:22:B4:1F:8D:40:B6:C8:5A:79:C8
Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial: 0194258F7DA493FB00A21682016CAB2A0ED6
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/sPL5rUlzKx5_eiK0H41Atshaecg.roa
Signing time: Thu 02 Jan 2025 05:49:08 +0000
ROA not before: Thu 02 Jan 2025 05:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61985
IP address blocks: 93.159.216.0/22 maxlen: 22
93.159.216.0/23 maxlen: 23
93.159.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7d:a4:93:fb:00:a2:16:82:01:6c:ab:2a:0e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Validity
Not Before: Jan 2 05:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0f2f9ad49732b1e7f7a22b41f8d40b6c85a79c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:dd:d1:66:2b:b8:de:b2:3c:e0:7d:e3:91:
f8:44:85:d6:00:4e:01:75:03:0b:7b:9f:a0:3f:20:
e6:23:c7:75:51:e6:32:00:8a:bd:b0:6e:ed:0e:93:
94:ef:b6:7b:a7:39:2e:da:db:7d:fa:b4:c7:5c:93:
f7:b0:ff:0e:ba:4f:83:f4:92:e5:46:f6:68:5c:ea:
6f:b3:21:41:3a:04:1e:05:d7:b1:fe:ae:39:00:ff:
6e:c1:9c:4a:4c:0a:c9:f6:7e:d0:c5:81:78:9e:52:
20:a6:4b:af:6d:94:36:c7:03:bf:aa:07:29:0e:03:
a5:11:c1:c5:4d:eb:0f:37:59:6b:d1:fa:0e:64:bd:
07:3d:df:54:7b:a9:0b:da:91:57:08:a1:1d:06:0a:
d8:30:f1:b1:e5:64:69:9a:50:ea:83:fb:cc:5e:f8:
ea:d8:ef:73:7f:25:c9:36:bf:da:01:54:27:23:d1:
b6:fe:57:b3:85:32:d3:17:ab:9c:0b:3a:c0:89:5d:
17:34:0d:5c:a0:aa:14:4a:be:75:ab:c0:c8:35:2f:
19:8b:05:0d:59:b9:38:0e:cd:87:9e:c7:22:ce:8d:
56:37:74:6e:40:18:e8:18:d3:10:46:13:ac:0f:a3:
ae:01:c3:fb:66:04:d0:a2:78:2b:39:ad:f5:15:25:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F2:F9:AD:49:73:2B:1E:7F:7A:22:B4:1F:8D:40:B6:C8:5A:79:C8
X509v3 Authority Key Identifier:
keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/sPL5rUlzKx5_eiK0H41Atshaecg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.216.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:21:08:e0:e1:9f:d6:b2:f5:17:95:49:5e:a2:3b:88:25:93:
85:6a:0a:22:e8:f3:1a:ab:41:02:a0:a0:71:5d:12:5f:61:2c:
d2:d0:29:a9:fc:0e:14:f0:33:92:11:54:81:9b:a0:37:8a:c8:
bb:5c:d1:2f:bd:00:ff:db:0a:96:33:b9:4a:57:d1:56:75:2f:
75:80:51:8d:f1:ef:88:93:fc:b5:9c:80:59:d5:21:ad:3a:18:
ed:4f:bf:17:eb:21:6a:f3:d1:26:cc:ed:01:bc:1e:48:8b:5c:
b8:bc:47:09:3c:56:46:67:95:be:31:2a:40:5b:05:4b:5a:38:
9b:a4:b4:28:0e:72:82:6d:d1:7e:86:8a:dd:7e:4b:e3:92:90:
65:30:3d:20:19:46:fb:d1:6c:86:a5:f5:46:9b:01:6e:e4:a5:
01:24:32:90:c7:41:2c:e8:b9:fe:30:42:b6:33:db:da:7c:08:
39:78:fb:83:d3:84:37:e9:89:15:d1:f5:cb:93:25:96:ab:b9:
05:27:6e:a3:1f:6f:db:8d:49:c6:58:fe:d1:68:78:ba:72:ea:
2b:6a:29:f5:b2:b1:55:7e:42:2b:e2:5c:3b:4c:34:4d:a7:3c:
98:65:0b:b3:67:d6:60:23:3f:22:02:b5:0a:2a:10:eb:8d:f4:
b4:ad:4e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:34:47 2025 by rpki-client