Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0Wt0ug94yDrrnQ57m2Y6quDNdo4.roa
File: 0Wt0ug94yDrrnQ57m2Y6quDNdo4.roa (raw, json)
Hash identifier: NqZj+klZwXH2wmhczRHk2IA66BSZBgcYYp1tO2BTHlo=
Subject key identifier: D1:6B:74:BA:0F:78:C8:3A:EB:9D:0E:7B:9B:66:3A:AA:E0:CD:76:8E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F8A7174933CAF1AADA2E3CC71EB30
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0Wt0ug94yDrrnQ57m2Y6quDNdo4.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9058
IP address blocks: 93.170.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8a:71:74:93:3c:af:1a:ad:a2:e3:cc:71:eb:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d16b74ba0f78c83aeb9d0e7b9b663aaae0cd768e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:b8:c0:ae:f9:ef:22:e1:7d:af:92:e8:48:
ad:ef:9a:f9:01:03:4b:4c:1c:1b:7a:2b:17:b0:51:
9c:d6:9b:12:7b:d7:9a:d5:14:0e:1c:11:ec:be:7e:
34:25:bc:3b:8b:08:b2:c1:44:e5:01:81:f1:8e:71:
e8:5b:25:e0:5a:f3:d5:eb:3c:ca:0e:30:a1:07:e1:
db:fa:53:ac:cf:ef:0f:f1:ba:2a:59:e0:39:84:8b:
6b:05:ed:3f:97:a5:0a:8b:26:7a:5a:37:39:12:b9:
f1:ea:9a:b8:59:1e:ab:fe:f2:1c:e3:6f:5f:08:b4:
8e:69:e2:02:97:fd:d5:11:d4:c0:de:85:d7:0e:86:
96:74:2c:85:34:1d:d7:39:5f:d9:39:42:17:19:dd:
8d:d4:9a:3d:bc:d3:88:94:6f:f1:a1:4c:86:46:4d:
47:6d:fd:14:56:51:9c:6a:19:6b:1b:a2:ff:46:78:
bb:db:c9:16:82:55:66:ea:1a:11:c6:60:00:0e:1c:
63:90:c1:ea:fa:c3:22:79:1c:4a:f0:9f:8c:3f:fd:
21:7f:d0:32:5a:47:11:5b:94:72:cb:06:e2:72:3c:
55:93:7d:4b:1b:d2:c3:c3:82:11:c9:fb:4e:a6:4a:
73:ff:a6:26:0f:2b:f0:84:28:50:2c:f1:0c:43:74:
1e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:74:BA:0F:78:C8:3A:EB:9D:0E:7B:9B:66:3A:AA:E0:CD:76:8E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0Wt0ug94yDrrnQ57m2Y6quDNdo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:fc:2c:6a:eb:4a:46:6e:b8:69:46:9e:d5:4e:71:11:1b:74:
4f:b8:3a:b9:96:40:c4:97:b4:88:cd:3c:e8:4d:c1:59:ab:0c:
99:0d:4e:fa:1a:e7:81:f8:f8:9a:4d:61:bf:e2:cf:d1:31:d4:
39:b9:0c:3b:b6:da:b8:0b:34:7f:3e:cf:85:e7:3f:71:91:31:
e3:55:38:5e:15:27:b3:1f:dc:24:dc:5d:08:cf:f0:e8:bb:12:
d1:0e:05:3e:ed:21:ef:34:02:27:40:0c:01:66:5b:a5:85:85:
44:06:e9:ac:ab:7e:5e:b7:36:4a:09:87:7f:ac:ec:97:79:5b:
d8:93:c2:19:df:a7:a3:01:6a:f6:17:42:40:5c:6f:26:a5:18:
8c:1e:3f:76:64:d9:08:99:47:54:0c:92:fb:44:91:75:40:0d:
5b:ba:75:0f:62:79:91:fb:a5:56:2b:39:cf:9a:e2:a1:8c:2f:
26:77:98:b3:e8:c5:b1:c1:bb:0c:e0:3c:26:10:20:20:64:3b:
e3:db:78:55:38:53:d7:5a:89:7a:a6:62:67:9a:c6:70:09:7a:
fb:ed:3b:42:4b:91:cd:56:5d:9f:ab:06:ef:95:99:87:0b:aa:
e6:58:f0:2c:a6:47:45:63:e6:22:b1:3c:71:bc:10:3a:47:7e:
c6:8e:7b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:55 2025 by rpki-client