Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/wB7zO9znSbsEaFVzHFAP7dE2rN0.roa
File: wB7zO9znSbsEaFVzHFAP7dE2rN0.roa (raw, json)
Hash identifier: oKOkiDomqnZDUq9zEDTivQ41nb+DuiZJIDMY2vxiFOA=
Subject key identifier: C0:1E:F3:3B:DC:E7:49:BB:04:68:55:73:1C:50:0F:ED:D1:36:AC:DD
Certificate issuer: /CN=810cd50db437c789464cb64dfabfe405ca981b1a
Certificate serial: 0194258F23E0648EDF2A593B0F28BA218D3E
Authority key identifier: 81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/wB7zO9znSbsEaFVzHFAP7dE2rN0.roa
Signing time: Thu 02 Jan 2025 05:48:45 +0000
ROA not before: Thu 02 Jan 2025 05:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44999
IP address blocks: 93.188.120.0/21 maxlen: 24
176.62.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:23:e0:64:8e:df:2a:59:3b:0f:28:ba:21:8d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810cd50db437c789464cb64dfabfe405ca981b1a
Validity
Not Before: Jan 2 05:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c01ef33bdce749bb046855731c500fedd136acdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:c4:e1:6b:de:d6:76:39:99:f7:d6:78:5f:
c6:dd:07:d8:95:f5:18:ed:be:40:48:0e:a3:da:9a:
a1:0d:7c:59:74:c3:5a:f3:bc:8c:63:80:f1:11:59:
14:67:cc:c7:91:cf:44:24:58:b8:0e:ea:f9:1b:18:
25:52:8d:12:70:0b:a0:ff:ac:48:35:73:49:7b:0d:
d8:88:ae:6a:d2:ca:c3:78:c1:a4:ff:05:7f:a4:eb:
0a:58:cf:f2:c0:70:1f:53:7e:9c:db:f1:7f:e5:61:
d3:e9:6c:52:21:85:fc:30:13:66:b8:20:23:fc:72:
c7:8d:9f:2c:b8:ef:01:2b:62:16:c6:c6:ab:2f:29:
57:82:98:a8:da:ac:69:69:a0:a8:8d:78:df:5b:67:
15:2d:fe:8f:ae:02:9e:25:2a:5b:6b:01:3f:95:af:
fd:fb:3a:73:dc:bb:9a:90:92:71:ed:a8:05:75:b2:
dd:5c:d3:b4:e9:9c:79:3a:8c:d7:33:a0:83:60:f2:
6e:a9:60:f7:9b:27:96:8d:7e:95:09:7b:9a:b6:23:
74:85:ea:9b:37:2c:e0:e3:80:c0:27:52:ac:92:0b:
ad:68:b9:b1:66:19:e8:aa:4f:83:bf:1e:85:ec:f3:
7f:68:77:aa:6c:75:49:ee:93:8c:1a:39:8a:b6:8b:
17:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1E:F3:3B:DC:E7:49:BB:04:68:55:73:1C:50:0F:ED:D1:36:AC:DD
X509v3 Authority Key Identifier:
keyid:81:0C:D5:0D:B4:37:C7:89:46:4C:B6:4D:FA:BF:E4:05:CA:98:1B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/wB7zO9znSbsEaFVzHFAP7dE2rN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecaa96-9af6-4b99-957f-6b7599fcdc33/1/gQzVDbQ3x4lGTLZN-r_kBcqYGxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.120.0/21
176.62.216.0/21
Signature Algorithm: sha256WithRSAEncryption
b4:b4:15:c5:f0:3d:d2:a2:34:7c:ef:8c:3c:8f:7d:1f:e3:63:
d3:f7:20:bf:a9:5e:cc:19:c7:48:63:fb:c2:99:31:ab:52:ff:
40:a6:fc:e6:de:e4:15:33:40:57:6b:f0:13:82:35:c4:a4:ee:
a4:03:8f:2d:1b:e7:f9:4a:31:b5:0c:bb:ec:84:99:5d:c0:8b:
3d:e1:38:94:a4:4b:7d:c4:2d:52:46:e8:88:06:93:e5:53:2d:
e5:0e:5a:36:48:4c:24:e9:e5:b2:e2:8e:49:39:32:cb:a1:cf:
4e:7f:dc:58:57:c7:e6:44:d0:7a:2f:18:8e:a1:90:31:22:cd:
4a:ee:55:65:86:2c:77:6c:fc:fc:ee:e6:4d:a3:1d:9f:73:9b:
e5:13:fe:dd:54:ed:12:ab:56:a3:d1:f5:66:cd:38:6d:7b:5b:
a9:15:b7:e9:84:4a:9c:cc:46:1f:b8:0c:f4:61:08:11:3c:92:
0a:3e:fe:dd:b2:2e:9a:1a:00:2d:6c:31:d0:c8:aa:b7:1b:eb:
73:53:0a:cb:b8:20:15:e0:8b:92:0a:d7:e3:ec:f5:05:d2:44:
fe:3e:be:41:27:90:0b:46:b9:13:fe:f8:68:44:65:5f:b5:7f:
14:ac:f7:79:bb:fe:f3:a8:18:f3:db:a7:1d:76:43:16:24:a3:
65:83:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:32 2025 by rpki-client on console.sobornost.net