Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2Vn236CS0O84n5OsAKKWKh6ANak.roa
File: 2Vn236CS0O84n5OsAKKWKh6ANak.roa (raw, json)
Hash identifier: YKbTANeOrMZfdkMS0auSPg9pt4V6sHYi35JZnO/Mw3w=
Subject key identifier: D9:59:F6:DF:A0:92:D0:EF:38:9F:93:AC:00:A2:96:2A:1E:80:35:A9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD8A24B45276FCE38621A4B3EC9EF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2Vn236CS0O84n5OsAKKWKh6ANak.roa
Signing time: Thu 02 Jan 2025 05:49:31 +0000
ROA not before: Thu 02 Jan 2025 05:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61277
IP address blocks: 93.171.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d8:a2:4b:45:27:6f:ce:38:62:1a:4b:3e:c9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d959f6dfa092d0ef389f93ac00a2962a1e8035a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:82:6f:0b:d6:7d:26:90:5e:d2:04:9b:a9:
e3:8a:a3:a2:41:a5:b6:95:23:04:51:28:e6:e3:c5:
99:f5:34:65:b6:81:0c:a4:5c:42:57:0e:ca:88:f1:
7a:22:b2:4f:12:5d:fb:bb:ab:e2:57:9e:47:e0:69:
eb:5d:7c:cf:72:2a:7a:fa:44:58:6b:61:2a:5b:50:
8e:11:49:45:d2:6c:f3:5b:11:eb:d1:54:32:57:b3:
5b:e5:c0:15:c8:9d:f2:2f:7f:e5:63:bb:e1:38:40:
0a:61:eb:da:92:6f:67:e3:f4:65:54:18:ef:54:3a:
68:b2:b9:3d:46:35:e4:5a:05:99:36:7f:76:d7:f1:
aa:8c:6f:7c:ed:f8:7b:97:73:9b:7c:4c:8b:b6:46:
70:6a:19:85:b9:a5:81:98:b3:f3:08:6c:69:56:94:
02:70:35:e0:96:28:14:92:21:62:42:8d:6f:0d:9b:
ac:62:8b:4e:f4:6f:3e:aa:27:88:55:de:75:3c:3e:
f2:03:fa:7c:30:e3:09:c0:67:e6:ee:df:48:cd:b6:
fa:53:23:2d:20:81:ef:b0:9a:e2:35:aa:87:65:d5:
2f:09:82:2c:dc:9f:90:3c:0e:c7:74:7a:76:44:f7:
e7:e5:fa:54:01:3f:8c:25:54:24:01:c7:f2:0e:e2:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:59:F6:DF:A0:92:D0:EF:38:9F:93:AC:00:A2:96:2A:1E:80:35:A9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/2Vn236CS0O84n5OsAKKWKh6ANak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:33:f8:ca:0a:85:06:fd:a9:fc:9d:b2:42:2a:c1:44:41:ff:
50:23:45:24:b6:ec:c7:a7:20:c4:e2:b4:28:28:6b:03:00:16:
c3:0d:ce:34:91:e2:1b:14:5b:dd:c1:8d:76:be:35:47:25:1c:
8b:54:56:28:3c:bd:bd:87:c3:46:50:60:e2:4c:f9:7d:58:fd:
d5:37:49:ce:b7:86:24:89:cd:3e:d7:ad:43:bc:62:99:6a:69:
55:70:c6:b0:24:3c:53:0e:49:1a:ca:10:03:27:6a:79:bc:dc:
58:13:44:26:72:02:3a:1a:0c:a2:41:47:73:51:b4:5b:2f:2a:
b9:0d:24:6f:98:7b:78:59:ce:11:d0:ef:ff:fc:05:38:00:91:
c4:39:dd:cb:fc:f7:c0:15:63:88:8d:49:ff:65:72:0d:ed:c8:
88:39:57:e8:cf:e1:2b:7e:18:0a:b6:ad:57:f0:9c:20:01:fc:
6c:05:3c:ab:12:04:1d:09:52:b4:c9:31:be:fe:7f:2a:2f:3e:
11:60:29:e7:60:f9:3c:13:10:c4:e4:9c:87:a6:33:90:e2:75:
ed:85:50:a0:5a:b3:b3:7b:89:50:27:38:d6:ae:36:8a:9a:a7:
74:4b:fa:c4:ec:ab:1a:a7:e2:ab:02:ef:0f:0e:6f:e9:6d:d5:
6e:a1:4e:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj9iiS0Unb844YhpLPsnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTU5ZjZkZmEwOTJkMGVmMzg5ZjkzYWMwMGEyOTYyYTFlODAzNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O+CbwvWfSaQXtIEm6njiqOiQaW2
lSMEUSjm48WZ9TRltoEMpFxCVw7KiPF6IrJPEl37u6viV55H4GnrXXzPcip6+kRY
a2EqW1COEUlF0mzzWxHr0VQyV7Nb5cAVyJ3yL3/lY7vhOEAKYevakm9n4/RlVBjv
VDposrk9RjXkWgWZNn921/GqjG987fh7l3ObfEyLtkZwahmFuaWBmLPzCGxpVpQC
cDXgligUkiFiQo1vDZusYotO9G8+qieIVd51PD7yA/p8MOMJwGfm7t9Izbb6UyMt
IIHvsJriNaqHZdUvCYIs3J+QPA7HdHp2RPfn5fpUAT+MJVQkAcfyDuKEswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNlZ9t+gktDvOJ+TrACilioegDWpMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvMlZuMjM2Q1MwTzg0bjVPc0FLS1dLaDZBTmFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavPMA0G
CSqGSIb3DQEBCwUAA4IBAQB/M/jKCoUG/an8nbJCKsFEQf9QI0UktuzHpyDE4rQo
KGsDABbDDc40keIbFFvdwY12vjVHJRyLVFYoPL29h8NGUGDiTPl9WP3VN0nOt4Yk
ic0+161DvGKZamlVcMawJDxTDkkayhADJ2p5vNxYE0QmcgI6GgyiQUdzUbRbLyq5
DSRvmHt4Wc4R0O///AU4AJHEOd3L/PfAFWOIjUn/ZXIN7ciIOVfoz+ErfhgKtq1X
8JwgAfxsBTyrEgQdCVK0yTG+/n8qLz4RYCnnYPk8ExDE5JyHpjOQ4nXthVCgWrOz
e4lQJzjWrjaKmqd0S/rE7Ksap+KrAu8PDm/pbdVuoU5t
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:02 2025 by rpki-client