Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/0Qls5JO9jjLXQGK9B40PajGKbpE.roa
File: 0Qls5JO9jjLXQGK9B40PajGKbpE.roa (raw, json)
Hash identifier: IJ0z/46nnzhP5+ihXIdT4Fm5/4uAlVBNSZ2/pLgDmrQ=
Subject key identifier: D1:09:6C:E4:93:BD:8E:32:D7:40:62:BD:07:8D:0F:6A:31:8A:6E:91
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019425FDC42547AD486FCCE5CF22AEA0CCE4
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/0Qls5JO9jjLXQGK9B40PajGKbpE.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57324
IP address blocks: 93.187.32.0/24 maxlen: 24
93.187.33.0/24 maxlen: 24
93.187.34.0/24 maxlen: 24
93.187.35.0/24 maxlen: 24
93.187.36.0/24 maxlen: 24
93.187.37.0/24 maxlen: 24
93.187.38.0/24 maxlen: 24
93.187.39.0/24 maxlen: 24
185.52.118.0/24 maxlen: 24
185.52.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c4:25:47:ad:48:6f:cc:e5:cf:22:ae:a0:cc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1096ce493bd8e32d74062bd078d0f6a318a6e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:4d:7c:2c:6c:c6:ee:b5:15:33:d6:12:61:
7e:d0:b6:05:8b:60:56:b5:34:90:27:a4:e1:6c:74:
4f:6f:c6:3e:17:7d:c8:40:3b:04:5b:90:e7:0f:66:
77:de:3f:91:b5:47:a9:f9:d6:1a:87:38:0f:d6:36:
09:af:9b:7b:24:2b:5c:6f:40:21:71:f1:df:b5:4f:
6d:34:1a:dc:24:53:25:09:7f:6d:58:02:9e:f1:c0:
45:ab:bd:5b:2e:86:89:87:7a:7a:b3:1e:a4:4d:fe:
d9:8d:b6:10:21:f9:25:04:3f:7c:53:82:7a:5f:1f:
be:05:85:db:d9:6f:f1:4b:97:2e:79:63:ff:f3:e7:
26:8f:7c:c5:04:d3:8f:c1:8c:ef:9a:30:96:fe:36:
6d:90:ff:20:e2:7a:cd:0f:cd:81:10:ed:bc:c0:ea:
cf:c9:9a:d6:ac:07:d2:75:e5:af:3d:c2:f4:87:45:
b5:fb:b2:7d:8a:16:ad:13:4c:56:e0:4f:bf:c6:4c:
49:76:e9:77:08:68:56:6c:95:95:79:61:a2:92:c9:
a8:fa:fc:86:ba:74:b4:94:c2:00:c2:ef:42:10:81:
c5:3e:07:2d:e1:7e:17:cf:82:1e:fe:4a:21:ae:1e:
6f:a9:d8:88:cf:64:6a:cb:e1:3a:76:9b:b1:37:f0:
0a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:09:6C:E4:93:BD:8E:32:D7:40:62:BD:07:8D:0F:6A:31:8A:6E:91
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/0Qls5JO9jjLXQGK9B40PajGKbpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.32.0/21
185.52.118.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:29:b1:09:a2:28:e3:44:3f:37:99:0a:ea:ab:c9:de:25:de:
de:3f:88:c0:94:8a:e4:a3:86:9d:a0:90:82:b8:7e:1c:62:c1:
ef:62:0f:f7:a3:b6:ea:8d:d7:1e:8d:82:1c:87:de:d1:21:e9:
4c:7a:4d:f5:d4:ea:44:89:3a:b8:7b:e3:b4:69:90:68:ce:fb:
d6:fc:5b:08:2f:43:89:ca:39:6e:e5:3c:e6:d2:65:31:bb:45:
e8:49:49:32:c7:72:04:14:d7:7d:91:66:30:ae:7d:f2:74:21:
bc:01:e7:5a:18:33:56:9b:a1:79:d0:99:4b:03:26:f9:ca:39:
83:4f:a6:60:4b:74:96:b4:a1:51:07:5f:04:1f:6e:0c:db:4a:
17:b9:50:08:fe:6a:ef:53:e0:6b:37:fe:36:3b:38:23:53:30:
cd:7b:6b:23:ae:88:ec:df:65:31:59:07:5a:a5:29:2b:32:60:
12:3a:e6:9f:fb:f4:94:13:fa:cf:30:e8:3f:0a:2c:93:02:19:
88:de:ec:23:be:03:0c:42:ee:65:e9:39:0b:8e:6f:ca:08:bd:
25:a6:ab:14:48:2b:76:f2:27:8d:bd:b7:d2:7e:56:b3:cb:57:
17:09:55:f7:11:3e:f6:b7:5c:e0:00:a6:ff:de:e9:20:89:9a:
d7:a6:d9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:23:17 2025 by rpki-client