Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/x22xk2A-Apb8dLpmSadyKyJCkDo.roa
File: x22xk2A-Apb8dLpmSadyKyJCkDo.roa (raw, json)
Hash identifier: gu74rPveiHXJ2A/NDXg+xf+4EJriNsSl+5m/7KHQAxg=
Subject key identifier: C7:6D:B1:93:60:3E:02:96:FC:74:BA:66:49:A7:72:2B:22:42:90:3A
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 0195FC96664E527D59210C7B4F1B28A2748D
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/x22xk2A-Apb8dLpmSadyKyJCkDo.roa
Signing time: Thu 03 Apr 2025 16:57:49 +0000
ROA not before: Thu 03 Apr 2025 16:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16789
IP address blocks: 93.93.203.0/24 maxlen: 24
94.127.116.0/23 maxlen: 23
94.127.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:fc:96:66:4e:52:7d:59:21:0c:7b:4f:1b:28:a2:74:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: Apr 3 16:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c76db193603e0296fc74ba6649a7722b2242903a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1b:8a:5c:2c:1a:34:7c:9b:17:9c:b4:a8:4e:
f1:9f:08:8c:3c:51:86:ce:97:00:37:74:8c:61:28:
e6:5d:3e:63:cc:c0:94:54:54:b2:9a:67:40:7e:ba:
0a:db:bd:10:c1:04:bd:5d:96:29:5b:12:c9:4c:aa:
8b:34:2a:6e:e2:44:4a:c1:37:46:b1:12:21:52:04:
a4:06:dd:e8:a3:b8:e5:e3:3d:cd:7a:86:56:96:2f:
a8:b4:a9:08:74:b8:e1:20:b4:47:01:48:1c:ce:be:
54:17:76:9b:cb:76:37:a5:00:bd:ae:71:34:aa:88:
54:e9:09:28:c3:39:88:97:5a:ee:7a:9e:30:79:40:
34:f4:8f:e7:2a:31:e3:55:16:ff:c7:f0:15:52:51:
1b:56:93:d7:e5:3b:0c:4d:1e:62:0c:00:9f:5f:35:
90:79:c9:70:6c:97:7e:4e:e4:04:f2:d2:6d:bb:cc:
af:df:52:a0:70:5c:2d:10:5f:06:be:06:1a:8c:b5:
89:9b:80:ac:be:2c:a5:9b:d3:66:e6:bd:b0:23:a0:
cf:1f:11:36:7b:e1:00:0a:ac:f1:c3:5c:fe:df:70:
4c:fd:89:74:8a:5e:2e:16:a0:e7:0a:55:30:b6:68:
07:e9:6a:6e:67:01:b3:64:94:65:fe:8f:9b:97:f3:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6D:B1:93:60:3E:02:96:FC:74:BA:66:49:A7:72:2B:22:42:90:3A
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/x22xk2A-Apb8dLpmSadyKyJCkDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.203.0/24
94.127.116.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:70:98:09:24:bb:ee:b7:50:7d:0b:8e:c7:84:d5:ac:ed:3d:
5e:6e:26:37:25:2e:28:67:35:d6:e2:59:b1:11:1b:d1:86:21:
e1:cb:1b:2b:e7:4f:8f:cf:4a:a6:6f:05:08:f0:c1:dd:d4:04:
fb:d3:01:f7:14:26:78:4c:52:50:4f:56:b2:99:ae:e8:48:3c:
94:ee:8c:ba:13:45:d6:58:a3:97:62:e5:57:40:a0:9f:bf:7a:
3b:b5:9e:37:1f:53:c9:4f:e6:51:60:54:b4:03:12:8e:71:da:
e5:8d:f8:81:5b:75:60:00:95:97:25:33:01:d2:40:6e:70:b9:
b7:ac:19:3b:80:8b:f0:62:a4:0d:de:13:c8:04:f0:5f:dc:c9:
61:3f:65:c3:63:46:e5:71:75:49:9b:49:73:3a:8e:4f:0b:e9:
ad:1f:0e:bd:7a:e1:8e:ef:e0:ea:76:18:35:ae:d7:82:ee:fc:
cd:1e:61:b6:94:2e:6f:a3:b1:91:c8:33:4b:3b:ba:e8:ab:81:
c3:e3:99:da:c0:48:24:74:38:74:c1:d2:b1:27:fe:bf:d7:d4:
17:dd:3d:f8:c8:f0:2e:e2:2f:d1:f9:40:ce:a4:83:c8:e9:fe:
3f:66:b9:9a:08:c1:d7:ea:ce:18:6d:84:15:7a:b1:2a:46:1c:
30:3d:e3:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZX8lmZOUn1ZIQx7TxsoonSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMzFkYmVkMDg5N2NjZTg1YzE0ODM3MWI0N2NjODA3ODJl
NWU3MmIwHhcNMjUwNDAzMTY1NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzZkYjE5MzYwM2UwMjk2ZmM3NGJhNjY0OWE3NzIyYjIyNDI5MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxuKXCwaNHybF5y0qE7xnwiMPFGG
zpcAN3SMYSjmXT5jzMCUVFSymmdAfroK270QwQS9XZYpWxLJTKqLNCpu4kRKwTdG
sRIhUgSkBt3oo7jl4z3NeoZWli+otKkIdLjhILRHAUgczr5UF3aby3Y3pQC9rnE0
qohU6QkowzmIl1ruep4weUA09I/nKjHjVRb/x/AVUlEbVpPX5TsMTR5iDACfXzWQ
eclwbJd+TuQE8tJtu8yv31KgcFwtEF8GvgYajLWJm4Csviylm9Nm5r2wI6DPHxE2
e+EACqzxw1z+33BM/Yl0il4uFqDnClUwtmgH6WpuZwGzZJRl/o+bl/MQrwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMdtsZNgPgKW/HS6ZkmncisiQpA6MB8GA1UdIwQY
MBaAFHMx2+0Il8zoXBSDcbR8yAeC5ecrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmIt
MDQ2NTA3MmU0MWEzLzEveDIyeGsyQS1BcGI4ZExwbVNhZHlLeUpDa0RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jNWYwYzMtMjJlNS00ODAxLTkwZmItMDQ2NTA3MmU0MWEz
LzEvY3pIYjdRaVh6T2hjRklOeHRIeklCNExsNXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXV3LAwQC
Xn90MA0GCSqGSIb3DQEBCwUAA4IBAQBNcJgJJLvut1B9C47HhNWs7T1ebiY3JS4o
ZzXW4lmxERvRhiHhyxsr50+Pz0qmbwUI8MHd1AT70wH3FCZ4TFJQT1ayma7oSDyU
7oy6E0XWWKOXYuVXQKCfv3o7tZ43H1PJT+ZRYFS0AxKOcdrljfiBW3VgAJWXJTMB
0kBucLm3rBk7gIvwYqQN3hPIBPBf3MlhP2XDY0blcXVJm0lzOo5PC+mtHw69euGO
7+Dqdhg1rteC7vzNHmG2lC5vo7GRyDNLO7roq4HD45nawEgkdDh0wdKxJ/6/19QX
3T34yPAu4i/R+UDOpIPI6f4/ZrmaCMHX6s4YbYQVerEqRhwwPeMe
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:31 2025 by rpki-client on console.sobornost.net