Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ffWJVvRqdOITJMr_f_bvFJvZs2E.roa
File: ffWJVvRqdOITJMr_f_bvFJvZs2E.roa (raw, json)
Hash identifier: ZrUi+Jjs2w1LjSID2qlvtgp6S1XzANb4TL9J5cFhpK4=
Subject key identifier: 7D:F5:89:56:F4:6A:74:E2:13:24:CA:FF:7F:F6:EF:14:9B:D9:B3:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0195F2F3100624246EA0043E32E80841488F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ffWJVvRqdOITJMr_f_bvFJvZs2E.roa
Signing time: Tue 01 Apr 2025 20:02:50 +0000
ROA not before: Tue 01 Apr 2025 20:02:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201409
IP address blocks: 93.123.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:f3:10:06:24:24:6e:a0:04:3e:32:e8:08:41:48:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 1 20:02:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7df58956f46a74e21324caff7ff6ef149bd9b361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e0:9a:9c:1a:62:be:fd:90:7a:4b:8b:65:46:
5c:b1:c3:ee:67:bf:f5:64:8d:32:8d:95:59:91:dc:
79:81:75:62:f4:16:1c:d2:1c:a2:10:f3:dc:07:86:
fe:3b:ac:5f:fe:40:01:d0:61:68:21:4e:11:81:43:
07:0a:42:13:f0:12:d3:89:fc:83:81:ce:72:3b:12:
f4:16:e5:34:e6:9c:96:48:be:07:b3:af:27:fe:ee:
16:fc:ef:0a:62:a0:71:75:04:2a:e8:1b:dc:68:f4:
a4:2f:53:52:a0:48:55:90:25:2c:28:07:ee:58:dd:
84:4b:f1:3c:00:ba:8f:1a:29:9f:fa:0c:29:83:b9:
e9:db:35:ce:9e:0e:ab:9a:b2:61:fa:f7:c4:ff:b4:
6c:98:d4:73:a9:49:bc:67:13:54:30:90:e5:9d:21:
7c:10:19:09:81:0e:7a:1f:df:90:5b:eb:3d:ed:4b:
ce:01:e6:42:f5:33:e8:8e:d8:8e:57:b7:3c:bb:ce:
d0:41:fa:71:c5:1c:8e:19:8f:4c:c9:a3:45:1d:f0:
75:03:59:43:71:99:c1:b8:c0:ca:4b:c0:15:95:f0:
a2:b0:81:bc:b3:7c:b2:fc:6e:90:fd:62:bc:e2:3b:
0f:15:00:d4:2b:fd:da:9b:54:71:0b:1a:12:5b:03:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F5:89:56:F4:6A:74:E2:13:24:CA:FF:7F:F6:EF:14:9B:D9:B3:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ffWJVvRqdOITJMr_f_bvFJvZs2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.118.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ab:b3:43:3e:d4:00:0f:51:9c:fe:16:79:cf:0a:3a:cc:8e:
1c:8f:c7:9c:17:38:41:d0:15:1f:09:7b:3b:7e:ce:3f:80:4c:
c3:84:08:1b:fb:c2:71:f9:1e:82:85:e3:65:2d:47:05:a0:e3:
bf:14:cf:04:71:4b:e1:d7:47:55:13:f7:ea:cc:47:b8:98:7e:
da:94:74:61:31:10:46:33:49:85:2c:6f:27:75:22:1f:84:16:
a3:36:4d:f6:33:00:23:58:59:4d:5b:9c:c5:5c:d7:5f:1e:53:
2d:44:43:93:ea:d8:ee:f8:8a:c0:16:5e:25:86:1c:41:8a:e4:
7c:84:94:cf:f0:b7:ff:f7:54:ff:00:32:35:5e:3e:80:bf:58:
da:a9:94:03:6d:b2:67:7c:0c:c0:63:b6:88:86:00:92:97:92:
97:92:ee:6f:3c:04:8a:6d:63:02:77:72:17:9b:bb:ba:92:31:
28:2e:84:7d:0d:3c:e0:bb:35:7c:ff:26:13:33:b8:07:71:d9:
a9:65:8f:31:9a:b4:2a:19:ad:ea:4a:70:83:70:72:92:19:71:
d1:38:e7:75:b7:6d:82:17:02:28:b5:f3:ca:d5:b6:44:18:07:
b2:e4:f1:60:98:cf:4e:26:54:5a:ca:37:17:5b:c3:db:11:f5:
39:dd:b1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:44 2025 by rpki-client on console.sobornost.net