Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0tskPfnrunRX6jwrQqP1vjolqQM.roa
File: 0tskPfnrunRX6jwrQqP1vjolqQM.roa (raw, json)
Hash identifier: UgPXARZ3xPgAOOGngFtHfvtBgyb/UB+aulN+abI7vbw=
Subject key identifier: D2:DB:24:3D:F9:EB:BA:74:57:EA:3C:2B:42:A3:F5:BE:3A:25:A9:03
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27C72EDD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0tskPfnrunRX6jwrQqP1vjolqQM.roa
Signing time: Sat 01 Jan 2022 16:08:51 +0000
ROA not before: Sat 01 Jan 2022 16:08:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56387
IP address blocks: 93.171.8.0/24 maxlen: 24
93.171.7.0/24 maxlen: 24
93.171.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 667365085 (0x27c72edd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2db243df9ebba7457ea3c2b42a3f5be3a25a903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4f:42:c3:3d:f3:9c:e6:77:1c:3f:09:12:eb:
bc:7d:c3:ca:c4:dc:a9:3f:69:b8:26:5b:d1:c1:ba:
32:b0:39:a5:bc:e9:2a:25:6c:bf:c6:1b:f5:6d:63:
32:da:29:13:8e:4b:e0:74:45:e8:60:4f:95:b3:dd:
a5:6f:9e:72:16:d0:2a:6d:6d:3c:cc:b1:b2:ed:14:
da:ad:62:49:93:0a:7a:9f:bc:0e:80:57:d4:06:02:
6b:31:53:46:ee:5c:95:f9:d5:c8:a0:b3:15:8a:72:
2a:65:87:84:18:09:ab:5d:6e:1e:98:65:8f:80:5c:
de:77:78:07:7c:ea:74:97:f0:6f:b2:bc:e8:46:21:
52:95:44:23:3d:53:2a:2e:4b:09:31:61:e4:24:0a:
55:02:ab:51:6f:29:85:eb:8c:44:f0:b7:b9:b1:14:
7a:d3:6d:f9:78:6f:3a:80:53:4a:3b:e4:78:30:49:
f2:e3:f3:de:26:23:d6:e1:08:79:88:6b:a9:98:c7:
0c:32:90:8b:b1:29:d7:d0:c8:43:4c:67:43:87:7e:
44:ca:60:80:37:80:1b:43:70:f7:5b:b7:7a:85:62:
48:d2:15:6c:ea:50:57:1b:d5:57:a1:3b:bb:2d:9d:
87:00:c2:20:61:5f:33:d9:0b:26:e5:90:92:a4:ec:
74:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DB:24:3D:F9:EB:BA:74:57:EA:3C:2B:42:A3:F5:BE:3A:25:A9:03
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0tskPfnrunRX6jwrQqP1vjolqQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.7.0-93.171.9.255
Signature Algorithm: sha256WithRSAEncryption
37:ed:ff:8f:f2:39:13:5b:86:d4:5e:25:a1:0e:f1:f9:21:b5:
13:ef:68:c2:ef:2c:42:d9:02:04:d4:ac:40:fd:5d:ce:28:28:
61:48:12:16:1d:bb:64:9d:2b:60:89:34:4a:c2:ec:16:0d:1f:
8a:68:c1:3a:44:e0:5b:11:df:5f:b0:c4:ec:fe:18:15:4d:c1:
e4:ba:2d:75:33:d8:8e:8e:c2:98:43:d7:ec:5a:66:52:98:79:
35:84:1d:89:3e:3d:51:bf:0a:ae:cc:8b:fa:60:69:6a:ea:33:
54:7a:35:78:d6:f0:0d:ff:f6:b9:73:20:09:bc:a5:ed:39:c7:
36:1f:3c:f8:79:42:60:f2:58:55:cf:b6:7e:5c:17:b6:f6:77:
fe:4b:b3:08:84:49:3c:31:ca:48:9a:82:dd:30:6f:41:7f:05:
be:97:f2:db:13:4d:dc:0b:8f:24:ba:4e:a2:75:d9:c8:e0:c5:
81:a2:88:de:b7:a3:3d:4b:63:cb:b2:e0:b2:93:48:e0:2b:bf:
88:5b:7f:e6:b3:e0:c2:74:54:36:45:17:f2:05:c9:f8:94:1d:
18:b2:04:f0:d0:50:22:64:5f:bf:0a:57:0f:b9:4c:87:38:b4:
67:71:82:b7:eb:6f:d0:64:d7:31:b1:89:cf:d1:07:33:ee:88:
e2:07:bc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:21 2025 by rpki-client