Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/20jzTV1G0APB8xut9IEXDRckivE.roa
File: 20jzTV1G0APB8xut9IEXDRckivE.roa (raw, json)
Hash identifier: qO74AO83HJVjubr3wa708Yfbj3Qh0mrdvKrqp1B8ovs=
Subject key identifier: DB:48:F3:4D:5D:46:D0:03:C1:F3:1B:AD:F4:81:17:0D:17:24:8A:F1
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 275E15F1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/20jzTV1G0APB8xut9IEXDRckivE.roa
Signing time: Sat 01 Jan 2022 16:07:51 +0000
ROA not before: Sat 01 Jan 2022 16:07:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16066
IP address blocks: 93.170.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660477425 (0x275e15f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=db48f34d5d46d003c1f31badf481170d17248af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b7:dd:e4:34:c4:3a:9c:b6:db:7d:ca:1e:3b:
cc:90:a8:f1:71:76:ca:34:ef:ed:a6:f8:72:45:af:
6c:9e:d0:49:25:88:b0:21:a3:5f:d8:47:f8:cd:3d:
d3:38:23:b6:20:c3:3e:59:d4:8d:54:70:a4:80:2c:
d3:1d:5d:2a:3b:65:48:f6:d7:c8:34:7c:2a:ec:26:
62:26:ab:97:be:8f:c6:06:0c:30:d2:d3:35:9a:ae:
ee:b3:d7:3b:ae:a6:41:2b:e1:01:83:13:de:94:98:
26:9d:d2:12:ea:4b:e7:46:2a:98:89:a6:4b:89:9d:
78:0e:c9:95:50:f8:a0:78:7b:f9:fe:eb:f4:23:1f:
09:9a:bf:b6:e6:37:20:20:00:ec:8b:89:a3:68:a7:
dc:82:27:14:7d:1f:1a:7a:ae:b1:0a:ee:6f:27:94:
a2:27:10:4c:dc:c7:84:1b:ac:1c:09:c8:e2:8d:9f:
24:ae:6b:a1:ec:ba:a0:34:aa:06:13:ae:91:66:08:
f5:54:e1:5d:f0:ce:4f:2a:21:18:9e:39:30:0e:5c:
26:32:c3:52:90:71:be:4f:86:08:fa:a3:7c:80:97:
65:fa:9e:ed:37:b7:ef:67:1c:dc:c1:c7:d4:81:9c:
89:d2:5b:b0:67:53:ae:fa:47:d2:c6:9e:c8:21:c2:
12:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:48:F3:4D:5D:46:D0:03:C1:F3:1B:AD:F4:81:17:0D:17:24:8A:F1
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/20jzTV1G0APB8xut9IEXDRckivE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.81.0/24
Signature Algorithm: sha256WithRSAEncryption
76:68:44:66:ac:3f:15:4f:f6:a3:81:ff:a6:8a:2c:40:ad:15:
3d:01:b2:cc:d6:f3:91:af:c2:17:1d:34:d6:17:1b:d5:b6:82:
98:b8:73:c5:cd:40:90:c5:f6:c2:93:66:fb:3a:b1:87:98:05:
d2:bf:63:b3:89:4a:82:d4:f3:91:bc:64:ba:97:f7:60:61:c3:
df:58:1c:46:a1:38:46:8c:12:bf:56:06:03:5d:63:b1:43:8a:
79:77:e4:08:a9:e7:40:a3:4d:e8:80:fd:be:a7:aa:04:a0:3f:
40:48:1f:3f:73:99:2b:ca:70:5f:c4:cd:76:20:8b:17:0e:c4:
4b:c1:5d:f1:2e:3a:4c:c4:3a:35:c2:9e:fc:e9:45:dc:6f:4f:
27:da:d4:0f:f2:c8:f4:07:57:cc:65:ee:31:8a:a0:52:1b:1d:
eb:61:bc:3c:13:c8:54:2a:33:70:36:f2:3c:8a:f2:20:3f:02:
7b:24:3e:87:51:1b:61:a3:9a:0b:eb:07:cf:cc:53:62:0c:54:
d3:d4:af:6c:1b:bb:52:63:04:b8:8c:95:92:7e:59:be:af:12:
95:4b:ef:5d:fd:f3:34:f6:74:b3:6d:cf:5c:3a:89:3d:56:b2:
fb:a7:f9:82:88:a4:fb:31:31:9d:1b:17:60:3a:5a:a9:11:bc:
96:fa:38:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:53 2025 by rpki-client