Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/s4sWrAYojXr7xfsAzWwtDRAyflg.roa
File: s4sWrAYojXr7xfsAzWwtDRAyflg.roa (raw, json)
Hash identifier: UbGNGNDrvi8NvpaemW5oXC+8HmQiZipid6oKa91jckA=
Subject key identifier: B3:8B:16:AC:06:28:8D:7A:FB:C5:FB:00:CD:6C:2D:0D:10:32:7E:58
Certificate issuer: /CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Certificate serial: 019424B3F01657511700493B6035CA5CEA5C
Authority key identifier: 2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/s4sWrAYojXr7xfsAzWwtDRAyflg.roa
Signing time: Thu 02 Jan 2025 01:49:19 +0000
ROA not before: Thu 02 Jan 2025 01:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12773
IP address blocks: 93.157.12.0/24 maxlen: 24
93.157.13.0/24 maxlen: 24
93.157.14.0/24 maxlen: 24
93.157.15.0/24 maxlen: 24
193.254.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f0:16:57:51:17:00:49:3b:60:35:ca:5c:ea:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ccb9b89bc0bc21752474e650dc34f069da5c0b3
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b38b16ac06288d7afbc5fb00cd6c2d0d10327e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2d:5f:a3:dc:3b:d1:36:df:9e:66:0b:fe:25:
91:d8:87:78:13:31:0f:d0:5c:37:0b:1f:43:6e:07:
bc:63:64:2b:59:da:9b:ae:bc:2f:b9:0a:d8:df:d4:
d1:cd:87:e6:13:43:1b:6e:b6:c6:e5:d0:d3:d2:11:
1f:28:9f:c8:bc:2e:2f:54:17:8e:5b:5b:e6:c5:ec:
50:b7:eb:60:d5:31:7a:a7:4f:85:42:c0:90:da:c2:
8d:6d:a3:d8:78:b4:94:3a:a0:53:39:fa:55:7c:e1:
4e:c4:c9:ed:7c:1b:40:e0:6c:cb:e6:13:4a:ee:5c:
b9:fc:c5:23:49:ea:8d:a0:b6:df:51:29:27:50:ee:
e2:3f:aa:4e:86:86:18:e3:19:9b:07:92:29:c3:82:
24:79:b5:cd:5f:4b:e1:9e:f2:61:1f:7b:7c:6b:9f:
0f:53:ba:43:8a:da:ab:1e:fb:12:d3:00:e2:fc:bd:
ad:90:d3:cc:78:d0:cf:7a:b3:1f:5d:b1:36:ef:74:
91:10:f7:2d:e4:a4:cf:33:64:fb:ea:9d:1f:6f:b7:
60:4f:ff:22:ec:5f:60:fc:45:b2:ef:83:30:bd:cf:
1f:aa:a4:bd:30:b0:6d:a6:a3:e5:fd:f0:e2:8b:a1:
57:10:eb:00:87:b2:7d:9a:e5:e4:ab:84:0f:e1:4b:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8B:16:AC:06:28:8D:7A:FB:C5:FB:00:CD:6C:2D:0D:10:32:7E:58
X509v3 Authority Key Identifier:
keyid:2C:CB:9B:89:BC:0B:C2:17:52:47:4E:65:0D:C3:4F:06:9D:A5:C0:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMubibwLwhdSR05lDcNPBp2lwLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/s4sWrAYojXr7xfsAzWwtDRAyflg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/23f7c4-6e3b-4fda-931b-062aed51381c/1/LMubibwLwhdSR05lDcNPBp2lwLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.12.0/22
193.254.232.0/23
Signature Algorithm: sha256WithRSAEncryption
04:d1:92:d3:78:f5:23:1c:5e:e6:90:f0:3c:4f:65:d2:f3:9f:
c1:e1:97:a6:0a:2f:89:d8:c0:8a:09:c4:11:63:2b:0d:42:2c:
d4:6a:73:f6:2e:31:ed:ba:db:99:bd:67:d8:b8:05:c8:6d:b3:
b8:5f:59:a2:82:6e:6d:e8:70:ca:ba:b0:20:38:6e:90:2f:8e:
ef:de:46:c6:2d:a2:f6:e8:45:66:29:3a:72:76:ec:9e:e9:2f:
cd:b8:8b:11:b3:1f:c4:8b:d5:44:b7:f1:f4:60:b1:27:86:0b:
4c:57:2c:64:bd:2e:c3:57:f9:b3:74:98:ef:de:fd:97:43:92:
61:a4:77:41:6b:8a:6d:f0:29:43:76:22:be:7f:16:7d:2c:ab:
76:64:06:95:2f:26:44:35:4d:eb:38:09:e3:95:4b:2f:aa:52:
08:dd:ad:9b:54:c4:d7:36:be:20:8a:49:9c:65:04:08:1f:52:
57:ed:45:31:80:9e:f6:7e:43:54:22:5d:01:19:eb:70:5a:5d:
87:f7:aa:67:2b:c3:eb:28:65:4e:c9:e7:e6:5b:e7:ed:f6:c9:
89:50:77:f6:9f:fd:63:91:a4:38:4a:a4:d5:86:f6:22:a8:2f:
29:ca:a3:98:e1:ee:d2:dd:6c:88:41:9e:db:d5:3f:80:1f:ec:
be:12:01:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:38 2025 by rpki-client on console.sobornost.net