Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-uFpLi2RPY7momopDmm8VYDDrvI.roa
File: 1-uFpLi2RPY7momopDmm8VYDDrvI.roa (raw, json)
Hash identifier: xWWvnCUkQRx30qyNSp2UP2joPiMpOtWFtNkV52fGNQc=
Subject key identifier: FA:E1:69:2E:2D:91:3D:8E:E6:A2:6A:29:0E:69:BC:55:80:C3:AE:F2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F91878EDE273968141125EE5EE17A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-uFpLi2RPY7momopDmm8VYDDrvI.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35004
IP address blocks: 93.170.116.0/22 maxlen: 24
93.170.118.0/24 maxlen: 24
95.46.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:91:87:8e:de:27:39:68:14:11:25:ee:5e:e1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fae1692e2d913d8ee6a26a290e69bc5580c3aef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:91:21:68:5d:9c:08:09:9f:ff:a9:ed:a9:ac:
a4:d7:03:fd:de:1e:d1:b5:0a:75:d5:67:77:0f:87:
c3:08:76:66:57:cf:cb:8f:c4:55:3c:5a:03:c9:b9:
2a:1f:92:2a:ca:15:9a:ae:dc:f2:d1:f8:31:51:2f:
52:85:dd:7b:cd:42:15:7f:de:da:f2:25:57:8d:f3:
45:72:a3:7d:c9:15:05:f1:c5:6b:10:1d:f8:39:3f:
62:68:fd:e6:20:4e:27:a8:1f:f8:0a:c4:f1:0f:f2:
4a:e5:59:63:a9:43:9e:8b:5b:fe:a9:e7:09:7d:84:
9b:57:07:fb:6f:d1:97:09:c4:8d:bb:1a:8a:ff:ad:
b1:be:fa:2c:c8:ba:b5:5c:b0:f4:e0:d6:c6:8b:63:
f9:16:a9:9a:2c:6c:19:5e:2f:ae:58:19:2a:5a:0e:
a1:9a:16:c1:32:99:15:92:2a:69:36:52:43:51:ba:
48:ae:a5:ef:05:70:0f:bb:18:e7:d2:8f:1b:15:8f:
18:04:53:c9:63:e9:50:49:7d:10:46:df:71:45:94:
c5:42:2d:2b:24:85:15:c5:92:66:c7:91:53:c7:3d:
02:cf:6c:64:ba:cd:f4:ba:2c:89:1e:40:fc:b7:52:
91:b2:22:a0:1e:f7:56:39:49:e2:d4:07:49:eb:11:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E1:69:2E:2D:91:3D:8E:E6:A2:6A:29:0E:69:BC:55:80:C3:AE:F2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/1-uFpLi2RPY7momopDmm8VYDDrvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.116.0/22
95.46.212.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:3c:e3:57:5e:d3:83:6e:f1:5f:34:28:f4:bc:03:eb:56:51:
23:81:c5:88:f5:bc:de:71:60:46:e8:54:56:84:b5:ba:a1:43:
bc:de:71:9c:b8:ab:a1:86:51:e2:09:e3:2e:72:02:ce:d2:fe:
1e:58:04:56:ef:e5:45:1a:f4:a6:1b:5d:c3:3c:5c:c8:b0:83:
8e:48:e0:24:ab:c6:c8:1a:ff:3a:be:fc:7d:24:d1:2a:12:bd:
52:aa:8a:fe:64:e6:ca:13:a0:d6:6c:91:09:89:ad:d8:b9:a8:
92:17:61:07:cb:92:d3:52:7d:23:20:af:87:d1:bc:c9:42:85:
24:26:fe:32:14:78:4f:9c:08:3b:d1:15:97:2c:45:9e:25:c0:
b7:36:60:ff:45:3b:c2:3c:92:dd:70:f4:f8:e8:b4:22:d5:8c:
60:20:3c:3e:96:60:3e:05:ca:61:42:c6:28:c1:eb:3e:5a:e5:
71:2a:01:6a:5d:c8:8c:00:fd:d2:d7:b1:42:ab:0f:f9:ce:e4:
56:ad:3e:b8:be:5c:fe:e4:23:31:5e:8a:ff:d7:0d:13:cf:6f:
66:b5:f1:12:54:6d:28:9e:1e:0a:12:43:42:fb:dc:88:d3:8f:
c3:c1:0e:b7:0d:a3:bb:cc:7b:33:ae:ca:e8:6d:0b:a4:63:cd:
76:9a:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:30 2025 by rpki-client