Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/VrKnPWUHZqDvzs6ur0GOjZl2i2E.roa
File: VrKnPWUHZqDvzs6ur0GOjZl2i2E.roa (raw, json)
Hash identifier: mb8FZcI3peRcYmZtZcg+Q1vM47sFhZh3vrE8fwC75+A=
Subject key identifier: 56:B2:A7:3D:65:07:66:A0:EF:CE:CE:AE:AF:41:8E:8D:99:76:8B:61
Certificate issuer: /CN=1d01ed2364ec82265c68869fe72be757319a31eb
Certificate serial: 019426D8E31B4D4D02407BD0842AC3F043BC
Authority key identifier: 1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/VrKnPWUHZqDvzs6ur0GOjZl2i2E.roa
Signing time: Thu 02 Jan 2025 11:48:55 +0000
ROA not before: Thu 02 Jan 2025 11:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213111
IP address blocks: 93.177.82.0/24 maxlen: 24
2a0a:e540::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:e3:1b:4d:4d:02:40:7b:d0:84:2a:c3:f0:43:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d01ed2364ec82265c68869fe72be757319a31eb
Validity
Not Before: Jan 2 11:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56b2a73d650766a0efceceaeaf418e8d99768b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:53:a7:e0:0d:13:a9:b0:b1:66:f1:ab:c7:
ba:68:90:7c:0e:62:6f:c5:98:de:2f:7e:a8:f8:25:
ac:02:c7:ac:a8:64:bd:c8:88:6d:e2:99:18:56:72:
a2:da:51:62:93:84:f8:26:95:e8:a2:d8:b0:c5:8d:
4c:e2:b8:7a:4b:36:b0:2a:74:86:55:5b:33:c1:7d:
f8:20:f8:1c:13:17:68:71:8c:09:7f:07:50:87:51:
74:16:50:e6:a9:14:8a:b0:17:a8:2e:7b:9d:d4:0f:
32:c1:c8:f5:47:1d:25:8b:34:9e:4f:a5:53:5d:8e:
50:27:de:33:88:a2:50:39:b9:b0:a2:49:4a:3c:53:
b6:59:1a:e5:cc:e7:25:e3:3a:d0:a7:a3:3d:d8:6b:
8f:ff:e1:d7:0c:19:95:ac:ec:a6:a5:ff:1e:b6:e7:
51:95:2e:5b:28:f1:e2:8a:f8:04:1a:10:4e:3f:e1:
89:7f:5f:56:2c:1b:eb:68:c3:27:67:74:f7:e6:1a:
67:87:20:89:2f:6a:63:ba:bb:41:3d:db:af:92:73:
ec:60:da:7e:0f:55:07:7a:44:f6:b1:f5:76:7a:77:
9e:06:02:db:fb:c1:00:b3:cb:32:b5:10:36:36:50:
79:f3:a3:45:74:f7:d4:c7:29:ba:52:69:b8:7a:ea:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B2:A7:3D:65:07:66:A0:EF:CE:CE:AE:AF:41:8E:8D:99:76:8B:61
X509v3 Authority Key Identifier:
keyid:1D:01:ED:23:64:EC:82:26:5C:68:86:9F:E7:2B:E7:57:31:9A:31:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQHtI2TsgiZcaIaf5yvnVzGaMes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/VrKnPWUHZqDvzs6ur0GOjZl2i2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/99d683-43dc-484a-9047-b43cae6e2319/1/HQHtI2TsgiZcaIaf5yvnVzGaMes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.82.0/24
IPv6:
2a0a:e540::/32
Signature Algorithm: sha256WithRSAEncryption
71:fb:32:b7:10:ff:21:e7:7c:cd:db:ab:d6:a0:ae:1b:78:8d:
5c:97:aa:67:90:ef:90:3a:5d:01:c4:1f:14:64:ff:09:b1:d0:
17:3e:2d:36:58:3f:71:a4:0c:7a:07:ec:be:fd:b0:9f:ba:f5:
e9:68:6d:24:e5:65:21:41:f9:56:a2:7f:dc:45:ea:bf:14:1a:
5f:7a:1c:28:5c:92:c6:31:3a:64:72:99:c0:0e:cf:1d:9a:6a:
b2:33:bd:57:dd:c9:6e:9a:41:5b:49:4d:7c:90:a0:bd:ad:8e:
77:df:ed:e5:2a:50:f9:81:72:3b:4b:55:14:13:9b:d4:16:65:
86:e5:d0:7d:a1:4e:a1:16:63:3c:83:c2:f9:a5:36:60:4d:e1:
3d:ac:9d:62:5c:c4:11:cd:85:b8:97:b4:2d:ff:d8:f6:81:22:
dc:e5:bf:25:47:b4:48:08:96:fb:10:9e:0b:07:6f:b0:8d:2c:
b8:6d:74:c1:76:4a:65:4a:e4:2c:cb:88:7c:53:be:bb:77:d6:
b7:92:36:13:f9:26:7a:ca:ec:c5:57:c0:ad:59:13:2a:0b:99:
cd:45:bb:1f:6e:54:5e:ba:9e:2d:aa:e7:95:94:0b:e5:c3:e6:
5e:2b:0f:61:26:bb:56:ca:64:f9:7e:03:48:68:6c:37:e3:e7:
99:f6:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:24 2025 by rpki-client