Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/V7TwuQchFJyj3FzgSo-quNHM3vk.roa
File: V7TwuQchFJyj3FzgSo-quNHM3vk.roa (raw, json)
Hash identifier: hjNtsrFF5n1yKl43GjiftBGk4/SSn0HVl0kFwJ8ePwY=
Subject key identifier: 57:B4:F0:B9:07:21:14:9C:A3:DC:5C:E0:4A:8F:AA:B8:D1:CC:DE:F9
Certificate issuer: /CN=4999010bbb1f48709aeac02e84338a49b7774611
Certificate serial: 0194221F77CC9B08E728C5B0742C44779D34
Authority key identifier: 49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/V7TwuQchFJyj3FzgSo-quNHM3vk.roa
Signing time: Wed 01 Jan 2025 13:47:55 +0000
ROA not before: Wed 01 Jan 2025 13:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43960
IP address blocks: 93.187.24.0/21 maxlen: 21
93.187.24.0/24 maxlen: 24
93.187.25.0/24 maxlen: 24
93.187.26.0/24 maxlen: 24
93.187.27.0/24 maxlen: 24
93.187.28.0/24 maxlen: 24
93.187.29.0/24 maxlen: 24
93.187.30.0/24 maxlen: 24
93.187.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:77:cc:9b:08:e7:28:c5:b0:74:2c:44:77:9d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4999010bbb1f48709aeac02e84338a49b7774611
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57b4f0b90721149ca3dc5ce04a8faab8d1ccdef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:b3:fd:e9:7e:43:78:67:5b:ad:62:c4:bc:
89:18:c0:8a:75:0b:0b:5a:49:dd:be:43:dc:af:ad:
3c:c3:c5:04:40:44:10:c0:99:04:3f:0a:05:4e:5d:
0f:39:0e:ac:f2:fc:69:4c:19:17:07:51:8f:f7:42:
36:8d:04:9a:c1:0d:9f:8c:5f:32:6e:9b:3c:e0:78:
68:66:1d:aa:f0:00:82:da:c9:9b:25:4c:f2:46:c2:
9f:24:99:cd:b0:67:0c:e1:30:62:8b:43:42:70:cb:
14:35:5b:ec:10:da:6e:eb:28:fb:33:0d:62:8b:fd:
dd:7e:b2:81:c2:e5:b4:3d:dd:75:57:6b:95:e3:6b:
ba:e1:a5:55:c6:ae:8f:1a:10:f0:e7:4e:50:00:7c:
38:5d:4e:92:7c:1c:0c:19:3f:b5:1a:77:da:89:af:
d7:9b:f3:f4:d6:eb:84:50:df:aa:17:1f:d2:72:bf:
de:2d:50:71:84:75:eb:47:09:f0:67:4d:3f:47:45:
19:c3:d9:d2:43:6e:80:61:ee:50:77:4c:f4:82:3b:
69:f1:5a:e5:dd:4e:e3:a6:34:88:c6:be:a6:35:d3:
5f:48:32:75:db:5c:68:94:b6:38:c5:2d:b9:9c:d7:
b0:a4:8c:55:9e:87:09:c2:2f:21:2d:83:6b:c0:de:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:F0:B9:07:21:14:9C:A3:DC:5C:E0:4A:8F:AA:B8:D1:CC:DE:F9
X509v3 Authority Key Identifier:
keyid:49:99:01:0B:BB:1F:48:70:9A:EA:C0:2E:84:33:8A:49:B7:77:46:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZkBC7sfSHCa6sAuhDOKSbd3RhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/V7TwuQchFJyj3FzgSo-quNHM3vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fc1fcf-2c75-41a6-81f9-5fe8afa35df6/1/SZkBC7sfSHCa6sAuhDOKSbd3RhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.24.0/21
Signature Algorithm: sha256WithRSAEncryption
07:ef:fc:85:20:21:27:8a:ff:9d:d6:4c:16:c7:ad:0a:58:9d:
ee:95:bb:3e:ed:8a:8b:cb:b0:73:10:ed:74:2e:04:7e:ce:ce:
fe:c7:7e:cd:1c:ef:47:b0:6b:f9:c6:96:d2:27:1a:70:c3:ea:
6c:31:db:72:27:c9:8b:69:dc:a0:7b:92:1a:a9:e5:33:12:db:
76:dd:6b:5f:bd:4a:c0:b0:e4:2b:0b:60:f2:ce:4e:fa:bc:d5:
b1:45:97:6a:75:c5:cc:43:18:cf:40:1f:56:b5:c9:1d:7f:07:
bd:55:51:8f:85:dd:30:7a:1a:8e:c6:e0:06:12:99:2e:af:75:
5b:76:1a:d3:d0:dc:2e:66:64:bc:98:13:5a:6f:ac:8c:a8:32:
c4:3d:2c:99:a7:20:01:04:96:36:ad:1c:b2:07:fe:27:72:8f:
9a:fa:45:48:72:e2:09:3d:38:24:56:5d:2c:b6:4f:f9:b2:1a:
64:ce:50:6f:19:c7:19:b9:4f:22:b5:eb:20:2f:9d:69:c4:c3:
0b:bc:97:a0:a4:ef:03:e1:0e:b5:c9:64:3f:ca:c5:d8:6e:53:
d9:a7:fe:e8:ab:e2:0f:a0:75:84:af:6c:11:7c:16:28:f0:49:
46:8e:6e:d4:30:97:eb:a3:a9:a8:61:5b:b6:52:3d:25:30:60:
91:67:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:14:58 2025 by rpki-client