Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2Ss0DL665jBmvYK8QN7GPxsqEyE.roa
File: 2Ss0DL665jBmvYK8QN7GPxsqEyE.roa (raw, json)
Hash identifier: 6IMKUXRYm6MtavKiroEm0JHsJXmLmjCTBUQqNTsmz0k=
Subject key identifier: D9:2B:34:0C:BE:BA:E6:30:66:BD:82:BC:40:DE:C6:3F:1B:2A:13:21
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0189D5974CDA3706D7B3CE443FB6EA374DDE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2Ss0DL665jBmvYK8QN7GPxsqEyE.roa
Signing time: Tue 08 Aug 2023 14:40:09 +0000
ROA not before: Tue 08 Aug 2023 14:40:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44429
IP address blocks: 93.171.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:97:4c:da:37:06:d7:b3:ce:44:3f:b6:ea:37:4d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 8 14:40:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d92b340cbebae63066bd82bc40dec63f1b2a1321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0c:ce:66:50:d9:19:a5:b8:4a:f6:d5:ca:39:
b3:dd:9b:2c:e9:4a:52:ff:87:01:b8:39:b2:8b:e8:
61:eb:69:38:3d:dd:e8:87:82:8e:05:3d:bd:38:c1:
90:73:ec:7a:25:cb:04:03:cf:07:b1:82:c5:d0:35:
ad:c1:e4:53:f8:3e:be:53:1e:49:1a:e7:02:77:98:
1b:a2:25:65:12:7d:98:f0:e6:fe:d0:ea:23:48:a9:
75:ec:ae:fd:65:e1:9b:3d:f5:b3:fc:93:f3:bb:7e:
f7:66:e9:8a:55:a3:c1:88:79:47:33:3f:4d:c6:9e:
a0:71:ae:eb:87:90:9e:19:ad:fd:0f:9a:51:d8:93:
ba:71:5a:0f:89:a9:9f:c1:62:db:c9:ca:e8:cc:6e:
57:9e:7c:16:6e:b1:14:f5:df:d9:31:a1:a6:ad:e0:
9f:e6:47:e5:7c:20:db:32:3b:2f:d2:32:df:25:23:
c7:27:b6:54:a1:23:24:4d:10:c1:8b:ee:78:1a:5a:
e4:98:04:08:50:5d:f3:9b:59:b0:ab:65:2e:f7:cb:
59:c8:5b:a7:5b:f9:44:97:06:e9:2f:68:49:14:54:
a9:8a:a8:97:27:84:57:c4:7b:56:fb:38:d3:60:a7:
b6:58:9f:15:ab:01:eb:b5:ed:b5:77:f8:0a:40:1c:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:34:0C:BE:BA:E6:30:66:BD:82:BC:40:DE:C6:3F:1B:2A:13:21
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2Ss0DL665jBmvYK8QN7GPxsqEyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.140.0/23
Signature Algorithm: sha256WithRSAEncryption
19:2f:3d:90:65:a9:33:3b:19:e4:1f:4c:82:c9:90:25:c0:cd:
bb:08:11:cd:31:28:b6:58:96:28:f1:05:55:f4:1f:90:3f:0f:
fa:c9:9c:9d:2d:bc:d8:23:2f:39:19:88:54:b1:23:78:9a:be:
da:97:70:b7:a4:22:0b:e8:a4:cc:ec:51:cd:ad:33:ac:01:a5:
f2:cc:a0:3d:eb:68:8e:03:32:e3:f7:7b:52:e3:73:61:90:c6:
8f:ca:8b:3a:69:7f:12:a0:1f:f7:a6:8c:2c:71:2e:97:88:42:
e1:7f:c5:3b:e4:ea:02:e5:53:a2:54:f3:b8:38:14:84:ad:49:
10:aa:66:71:3d:ea:7b:66:21:a3:53:e4:ce:bc:49:d7:a5:f4:
6c:d4:16:ae:b4:d7:28:cb:88:a9:13:a3:b4:b9:45:6b:e6:89:
80:2c:de:4a:6f:b6:0e:60:d1:a3:5e:a6:cc:1b:4d:7c:29:4b:
a7:f0:06:f5:bb:f1:1e:8e:f7:76:6a:86:09:a8:f4:09:f1:fe:
09:78:a5:d8:5a:79:04:41:82:7c:72:d7:50:3a:a9:25:33:61:
30:6d:10:b8:b9:79:b2:13:f9:70:c9:fe:db:3c:18:b9:ca:95:
97:61:ad:22:2e:e0:83:66:3c:99:f9:13:1e:a9:4a:8f:6f:a5:
65:47:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:54 2025 by rpki-client