Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0v26ZHEmdeAJggJtYohjiBw4dEk.roa
File: 0v26ZHEmdeAJggJtYohjiBw4dEk.roa (raw, json)
Hash identifier: ZXWMAgK8lkd6MveonAIcagk4R6GnnVIQPvnf+3lsB0E=
Subject key identifier: D2:FD:BA:64:71:26:75:E0:09:82:02:6D:62:88:63:88:1C:38:74:49
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F9C5E7FE8F339C452D0412C0B253C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0v26ZHEmdeAJggJtYohjiBw4dEk.roa
Signing time: Thu 02 Jan 2025 05:49:16 +0000
ROA not before: Thu 02 Jan 2025 05:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42704
IP address blocks: 93.170.174.0/24 maxlen: 24
93.171.142.0/24 maxlen: 24
93.171.177.0/24 maxlen: 24
93.171.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9c:5e:7f:e8:f3:39:c4:52:d0:41:2c:0b:25:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2fdba64712675e00982026d628863881c387449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:2b:66:c8:8e:31:08:97:ef:67:94:dd:f5:
ab:49:70:2f:a4:04:1c:10:4f:42:76:84:4a:63:9b:
7e:67:fb:de:49:a6:21:b7:c7:a3:d2:6f:9b:62:72:
bd:ae:f9:cf:32:42:80:c2:a4:ac:bf:21:1b:43:f6:
51:35:00:47:88:b1:7f:0d:96:41:7c:3d:7f:b9:89:
bc:3b:ab:c3:c5:05:a2:24:5f:58:08:9d:ad:27:62:
da:6d:83:b9:b6:5f:bd:5f:91:86:1a:e9:b8:a2:a0:
a4:58:76:28:1a:c8:a6:2d:49:54:3a:05:7b:1c:23:
78:f2:ce:88:8a:ea:50:30:2e:7a:bb:0f:e8:bb:7c:
57:27:47:52:13:25:6b:bd:4d:7a:7e:02:08:1c:41:
df:1d:59:85:9d:21:f4:e2:93:02:e6:e2:af:15:a2:
c8:92:4f:b1:4b:12:ac:12:33:2e:5a:b1:41:1d:ad:
99:ec:24:50:49:85:c2:81:ff:34:8f:fb:c9:bd:9d:
26:2f:b5:44:05:c5:d5:c7:58:37:7f:7f:02:32:ce:
53:1e:f9:ca:23:7a:c5:4d:c5:18:eb:d6:59:32:69:
5d:93:d8:f6:d6:1b:d2:b5:16:d3:d7:b0:99:33:cb:
e4:63:3a:aa:c2:0f:f2:1b:16:6d:56:66:b7:f9:e6:
2f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:FD:BA:64:71:26:75:E0:09:82:02:6D:62:88:63:88:1C:38:74:49
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/0v26ZHEmdeAJggJtYohjiBw4dEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.174.0/24
93.171.142.0/24
93.171.177.0/24
93.171.205.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:d5:33:45:cb:59:76:83:5a:63:4d:bf:e6:30:ef:7a:ee:c2:
7d:d2:60:a1:c9:46:fa:25:e2:1f:d9:af:56:6a:45:52:f3:95:
8c:f9:d8:26:b7:ea:ed:c3:31:0d:94:7c:45:8b:c6:d0:c0:86:
ee:5b:cb:52:58:a8:a5:22:c1:33:d5:fa:ac:47:b4:66:7c:89:
86:4a:8a:be:a0:43:37:13:cb:8e:b1:97:85:2d:0a:e6:0d:88:
f6:92:e0:91:31:5b:15:a7:5a:79:1f:6f:39:71:a6:f0:57:63:
b7:8d:6d:d0:8c:91:36:6c:20:40:c7:c2:f8:fd:77:53:96:8a:
5b:4e:cf:09:3d:ac:a2:a4:29:b6:a6:85:28:ce:19:f0:b4:69:
f8:02:b8:24:89:37:2f:72:c7:86:f8:1c:88:31:37:78:f9:48:
4f:5d:d5:d8:f1:73:8a:74:c4:fd:f3:65:b4:87:26:93:41:dd:
e3:69:ba:f8:5a:92:ca:92:73:bc:09:bc:a5:a1:b5:57:75:f7:
5a:e7:63:c3:b4:4c:24:fd:85:f8:4e:fa:f5:c9:c1:4b:a1:69:
d3:93:9c:60:9f:05:0f:68:93:ad:91:2d:76:48:a4:b7:77:cc:
29:2e:54:c5:5b:0a:59:f9:e4:fc:43:17:77:bf:ca:eb:86:d9:
ee:34:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:10 2025 by rpki-client