Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_jm2DUfpW5VdlAbqbAh4v0n01i4.roa
File: _jm2DUfpW5VdlAbqbAh4v0n01i4.roa (raw, json)
Hash identifier: Oe96Judxf1fBTTJ9e60Q+1XcAnX4hdTEc26wz1IsBFw=
Subject key identifier: FE:39:B6:0D:47:E9:5B:95:5D:94:06:EA:6C:08:78:BF:49:F4:D6:2E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01954CC53B1EB2C4C17C436D93D1BF76B6CD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_jm2DUfpW5VdlAbqbAh4v0n01i4.roa
Signing time: Fri 28 Feb 2025 13:35:48 +0000
ROA not before: Fri 28 Feb 2025 13:35:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212365
IP address blocks: 93.88.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:c5:3b:1e:b2:c4:c1:7c:43:6d:93:d1:bf:76:b6:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 28 13:35:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe39b60d47e95b955d9406ea6c0878bf49f4d62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:17:98:af:89:22:2d:c5:7a:2d:45:6d:8f:
25:12:1f:d2:03:47:3d:f1:de:68:c8:2e:c2:83:03:
e2:06:b1:bd:1b:d0:57:92:d8:e7:6e:6c:e2:52:87:
c0:cc:78:6f:db:c0:82:11:76:4d:3d:c4:5f:94:34:
0d:c1:46:f6:b9:61:90:cd:88:6e:54:d6:34:4b:44:
04:b5:e8:73:6e:22:82:b6:62:8e:0d:79:02:16:2e:
d3:0f:48:0c:3c:9f:73:d4:c6:1d:ad:13:14:65:a1:
16:12:c5:37:86:96:59:06:e1:08:7d:82:34:8f:91:
9a:07:14:82:28:56:28:b4:79:dd:98:1e:4c:03:5f:
a6:85:02:5e:51:cf:f3:9a:20:f2:b4:e7:f4:7b:2b:
ca:4c:ae:8f:89:dc:9a:bf:b7:c5:c1:db:86:de:45:
20:1a:c7:27:81:e9:5b:ca:e8:e4:a6:ff:67:b2:95:
b1:38:13:6c:ca:01:7f:88:f2:10:77:11:7c:83:c1:
a7:41:e3:f0:e8:85:f5:cc:54:2d:d3:10:50:7e:dc:
01:6e:b4:1f:9f:19:65:3c:1f:33:9d:69:90:6b:e8:
a1:97:9d:d8:7f:ee:35:19:44:c5:98:5b:e5:5c:31:
4d:ea:be:b7:31:21:37:ec:52:07:4c:08:40:70:f6:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:39:B6:0D:47:E9:5B:95:5D:94:06:EA:6C:08:78:BF:49:F4:D6:2E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/_jm2DUfpW5VdlAbqbAh4v0n01i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:35:4d:0e:cf:30:92:6c:90:7a:2a:45:e6:6c:6a:4e:31:b4:
0c:b1:f6:32:31:ab:82:04:fd:3b:fc:f1:64:ff:a5:cd:68:b5:
c4:8f:7e:d6:dd:14:9d:1d:d3:3a:81:2a:fe:23:2d:9d:4e:d3:
f7:f0:d1:3a:47:68:a6:91:c4:33:69:63:6a:53:29:4c:b9:4e:
02:11:59:3c:76:7d:27:37:6e:72:33:82:11:5d:36:f4:12:32:
03:7c:5d:1b:d5:cd:7d:78:1b:3a:9c:88:17:eb:a9:40:61:d6:
82:17:7c:f2:42:97:0c:d8:2b:51:3a:08:71:af:d3:d0:fc:0c:
c9:79:e3:4d:81:ab:ee:7b:8b:f2:14:1f:1f:03:c4:57:4f:64:
a4:43:5e:45:d5:25:7d:00:a4:e8:a5:b6:6e:0a:13:bf:cb:a9:
27:5b:d1:b5:7b:aa:42:40:91:31:40:ba:92:7b:91:35:7e:15:
ff:1b:5d:33:1e:36:fd:ee:32:f2:26:76:52:cb:9f:f8:bc:2c:
43:30:bf:d4:5f:2d:3b:0c:58:8b:ce:8b:57:bc:b6:a4:cd:73:
54:b6:28:a5:6e:78:d2:0a:32:ff:14:4e:e5:c0:b3:3f:b7:cf:
3e:9f:51:5b:61:72:e9:6d:60:25:c1:83:d3:dd:6c:d7:2b:5b:
c0:c8:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 1 23:52:11 2025 by rpki-client on console.sobornost.net