Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2NKOTr0A35fO4obISYEizYmUNys.roa
File: 2NKOTr0A35fO4obISYEizYmUNys.roa (raw, json)
Hash identifier: tnsnDjmZKUAE+NbM7N/XUdg0D9klpSF407ieuucE928=
Subject key identifier: D8:D2:8E:4E:BD:00:DF:97:CE:E2:86:C8:49:81:22:CD:89:94:37:2B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019425900AF385790E5F58B29DB97D8702C2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2NKOTr0A35fO4obISYEizYmUNys.roa
Signing time: Thu 02 Jan 2025 05:49:44 +0000
ROA not before: Thu 02 Jan 2025 05:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211570
IP address blocks: 93.171.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:0a:f3:85:79:0e:5f:58:b2:9d:b9:7d:87:02:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d8d28e4ebd00df97cee286c8498122cd8994372b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:82:0b:0b:4f:e9:89:01:95:fc:cf:d9:5d:
e5:25:08:9b:f4:2f:8a:10:b5:65:2f:55:2b:49:ce:
17:92:22:e2:bf:05:c4:16:86:ce:cc:46:6c:dd:45:
77:46:4d:38:d1:ea:18:70:21:eb:f7:36:8f:04:ba:
0e:a4:c7:32:92:46:f7:2e:c0:9b:15:83:93:26:af:
7c:be:ee:23:f6:34:ce:d0:f1:5b:c0:db:9e:8d:31:
0b:d8:ad:37:34:df:18:22:9a:b3:4b:54:37:40:67:
83:87:ec:53:59:8e:7d:c8:2b:2c:ae:16:97:64:53:
66:28:b7:da:75:e7:73:b6:2d:73:7b:86:63:7c:ff:
c3:08:8d:2f:b8:f1:a3:a6:ab:1b:b1:e1:3e:63:91:
80:e0:45:da:f2:93:ca:c3:5e:15:ae:01:80:5b:f5:
49:55:9f:8c:3c:61:e1:82:34:2c:57:8b:e9:6e:b3:
7d:14:ee:6a:b7:1e:9a:d0:31:14:46:71:a2:4d:cb:
48:40:4a:b1:35:88:c9:d7:d6:f6:e5:0e:f7:9c:53:
cc:b8:74:82:f7:fb:d4:27:80:76:d3:87:b7:1d:0e:
ed:3c:8a:bc:bd:1f:15:f1:ba:e4:35:d1:50:a7:4c:
16:92:71:89:19:e3:42:fe:03:71:d2:5d:41:fe:c8:
13:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D2:8E:4E:BD:00:DF:97:CE:E2:86:C8:49:81:22:CD:89:94:37:2B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2NKOTr0A35fO4obISYEizYmUNys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.224.0/24
Signature Algorithm: sha256WithRSAEncryption
28:4a:29:10:3d:53:e7:f8:95:57:4b:9e:64:10:8f:68:89:ac:
9e:50:40:44:ff:bb:0d:6b:77:95:99:ad:1c:f2:7c:f8:37:dd:
c7:c6:ff:fb:87:07:aa:bd:aa:79:2c:da:0a:c3:1b:1f:8a:cd:
65:de:94:b8:c4:05:b9:ea:4d:c6:00:e4:32:10:2c:d6:7f:a2:
cb:24:5c:ae:71:95:16:d9:a2:92:3d:40:c6:7e:cf:4e:f3:58:
75:d5:bd:41:ac:92:90:ea:12:9b:30:15:83:08:c8:e5:61:1c:
72:f4:f3:7d:d5:c8:c0:da:49:4a:d5:d7:8b:b2:a7:d6:1b:75:
73:f0:1c:4b:56:e6:e2:55:e8:01:e6:ee:2c:fd:20:b0:c3:ab:
f6:82:e5:6c:50:7b:98:66:bb:e1:b7:db:dc:a9:0a:14:7f:7a:
0d:f6:b3:9f:e0:53:48:3b:5a:62:9d:c7:e6:22:d1:06:74:ae:
c1:04:e5:79:fc:d7:aa:de:3b:eb:06:0e:8e:34:98:c0:0b:bf:
e5:f4:12:db:e3:df:23:e8:66:36:51:09:11:95:0b:00:ca:5b:
b8:b3:48:d2:e6:76:64:4f:4d:25:e6:38:17:ff:30:59:58:df:
6f:ed:f7:6e:1f:a6:a8:99:8b:79:1e:51:14:83:64:a9:eb:01:
87:a2:35:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:50:57 2025 by rpki-client