Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/vSD8XToST3_PVTIy1XwVerhMPWI.roa
File: vSD8XToST3_PVTIy1XwVerhMPWI.roa (raw, json)
Hash identifier: Yvhr0/CtepPwOm3ynZwacKeoADnHcOUi9JQFKNsVsJQ=
Subject key identifier: BD:20:FC:5D:3A:12:4F:7F:CF:55:32:32:D5:7C:15:7A:B8:4C:3D:62
Certificate issuer: /CN=02c2c187d98b4603804ed1165adb4509b630a83a
Certificate serial: 0194266A229D4A6A0E0AD63FC6A2A2C76BA3
Authority key identifier: 02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/vSD8XToST3_PVTIy1XwVerhMPWI.roa
Signing time: Thu 02 Jan 2025 09:47:57 +0000
ROA not before: Thu 02 Jan 2025 09:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45047
IP address blocks: 93.188.216.0/21 maxlen: 21
93.188.217.0/24 maxlen: 24
93.188.218.0/24 maxlen: 24
2a12:9dc0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:22:9d:4a:6a:0e:0a:d6:3f:c6:a2:a2:c7:6b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c2c187d98b4603804ed1165adb4509b630a83a
Validity
Not Before: Jan 2 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd20fc5d3a124f7fcf553232d57c157ab84c3d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:7e:2c:fb:5c:92:68:9c:1b:3e:d0:64:8d:
88:9c:7c:32:83:35:a6:4d:66:2c:70:a7:32:09:61:
c4:9a:e2:85:df:0c:fb:60:6b:6e:34:ff:f8:bf:b6:
a9:f2:1a:55:79:c3:50:1b:b0:75:75:d2:db:34:e2:
b7:df:c4:25:d4:1d:80:c3:18:46:db:66:fb:07:8f:
5f:52:f8:84:e0:49:ae:b4:90:49:15:fc:bc:14:29:
3f:74:e3:84:68:b8:a3:0e:79:16:d8:7e:c3:a2:fe:
82:41:b3:e5:9e:3e:b2:e3:ef:a7:7c:db:64:f4:30:
f8:04:06:89:1c:01:d4:f6:47:7c:ac:c6:67:97:ad:
39:fb:59:62:03:59:70:46:1f:50:2e:b4:fc:da:61:
97:01:87:df:c3:03:05:91:86:5e:00:35:f6:62:b9:
70:05:56:17:37:17:c0:89:a2:b3:59:4b:ea:1e:ad:
61:24:b3:ae:6e:5a:96:0a:11:55:20:81:a2:bc:09:
21:c5:8c:9d:2d:96:b3:6f:ea:14:f2:5f:bd:ef:51:
12:5a:dc:04:4b:22:23:b7:b0:46:fb:13:9f:f8:0d:
d2:a5:a2:cc:5c:ee:cd:5d:bf:b9:b2:eb:cc:4d:f5:
77:37:25:3b:94:5c:b1:6b:63:a7:cc:ee:87:9f:a4:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:20:FC:5D:3A:12:4F:7F:CF:55:32:32:D5:7C:15:7A:B8:4C:3D:62
X509v3 Authority Key Identifier:
keyid:02:C2:C1:87:D9:8B:46:03:80:4E:D1:16:5A:DB:45:09:B6:30:A8:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsLBh9mLRgOATtEWWttFCbYwqDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/vSD8XToST3_PVTIy1XwVerhMPWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/729ea4-6a68-4838-8fec-7feb18b9f552/1/AsLBh9mLRgOATtEWWttFCbYwqDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.216.0/21
IPv6:
2a12:9dc0::/29
Signature Algorithm: sha256WithRSAEncryption
45:ec:55:9c:21:00:98:ed:18:26:78:4d:db:85:bc:dd:78:35:
a5:9d:20:fa:1d:2d:c2:51:69:77:8e:cf:69:17:74:ac:11:36:
d7:80:63:f6:5e:b9:8d:60:a8:17:d3:e1:2b:57:70:45:e6:f3:
b7:48:48:74:65:bf:4d:0d:be:23:47:e4:aa:51:e4:c1:a2:fd:
b7:cb:1c:b7:16:cb:64:4a:a6:28:68:43:6c:b8:3f:d9:0c:7f:
9a:6b:ea:ad:11:9f:4e:37:a9:8d:ec:3b:70:9f:99:b7:f5:2f:
8d:81:50:31:1a:41:5f:64:bd:bd:ea:e3:aa:27:5b:39:98:d0:
4f:bf:8b:de:61:82:a1:d0:4b:be:a6:9b:91:97:32:7a:03:f6:
25:48:3d:fa:1d:65:b9:a1:6d:5b:98:9c:45:cc:d2:33:03:22:
18:cc:5a:95:28:68:b1:22:00:3b:13:20:2e:00:a9:b8:d5:c3:
2c:78:af:eb:c1:5e:cc:c6:b6:49:83:ef:1c:1a:8e:b9:a9:95:
2e:fc:a8:91:e6:ac:fe:dc:d2:de:1c:19:88:56:7e:68:37:3b:
a8:35:84:86:c2:13:ab:39:fe:60:91:4f:41:14:4b:49:71:47:
b6:1a:78:a4:58:96:8e:f7:21:2f:59:39:ac:af:13:25:bd:d1:
e5:cb:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:33 2025 by rpki-client on console.sobornost.net