Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3Ua9O389agn9HHGDjPoYm8-3q54.roa
File: 3Ua9O389agn9HHGDjPoYm8-3q54.roa (raw, json)
Hash identifier: T/FM1ZY9q8y+HLa42wZm6+64+ZultfsXwqqk2/Fc20M=
Subject key identifier: DD:46:BD:3B:7F:3D:6A:09:FD:1C:71:83:8C:FA:18:9B:CF:B7:AB:9E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD8FC745F04D770E041B0C60CD97F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3Ua9O389agn9HHGDjPoYm8-3q54.roa
Signing time: Thu 02 Jan 2025 05:49:31 +0000
ROA not before: Thu 02 Jan 2025 05:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61308
IP address blocks: 93.170.200.0/21 maxlen: 24
93.171.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d8:fc:74:5f:04:d7:70:e0:41:b0:c6:0c:d9:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd46bd3b7f3d6a09fd1c71838cfa189bcfb7ab9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:f3:08:fb:85:31:30:9c:2f:b2:7f:87:db:
4d:d3:95:63:07:77:fd:d4:c3:4a:18:52:3c:cd:fc:
a9:79:f0:05:e4:c8:a1:0f:e4:86:ff:d8:3e:3c:16:
13:10:dd:4a:60:24:0b:7d:61:db:48:c4:f6:3f:ec:
b3:a7:8a:5d:87:b8:8d:18:de:7f:de:92:29:e4:22:
f5:b9:66:91:fe:ef:4a:1f:55:80:94:41:a5:6f:9d:
92:ec:57:f2:48:fa:42:98:c1:eb:de:4a:e8:80:d0:
5f:f9:62:e8:f3:7a:b2:9a:4a:25:4b:14:44:8f:6c:
6a:8e:38:36:c8:a1:db:e6:b9:bb:8b:2b:72:3b:55:
98:8e:c2:b5:3b:41:10:d9:08:a7:11:33:d6:01:6a:
35:c7:51:73:9e:d7:5c:c0:a6:4f:e5:fc:77:58:57:
d7:21:40:dd:78:89:eb:36:6e:97:3e:4c:a4:b4:69:
d2:91:47:7d:c7:ce:e4:4e:dc:37:a2:e4:5e:e7:5d:
b0:a1:c4:22:13:5c:92:29:64:27:cb:34:8e:c0:f0:
d1:66:66:c7:a6:3f:4b:0a:f8:b7:fd:a9:e9:ed:98:
81:34:14:50:80:a3:03:ee:b5:da:3c:a0:bb:9e:c5:
c8:2b:19:51:fd:9c:9e:92:c0:ed:88:71:3b:4d:0e:
64:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:46:BD:3B:7F:3D:6A:09:FD:1C:71:83:8C:FA:18:9B:CF:B7:AB:9E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/3Ua9O389agn9HHGDjPoYm8-3q54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.200.0/21
93.171.192.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:75:66:83:15:7a:ef:96:e7:0a:d9:88:1e:5c:f1:c2:9a:37:
9a:65:63:26:07:47:87:4b:6d:f0:3a:d0:63:1e:28:11:37:74:
0f:4d:3f:b9:54:9d:cc:a4:8b:e0:61:ee:49:8d:63:fa:89:8a:
9d:63:f7:23:75:f3:3a:ad:0a:ca:29:0f:86:1b:fa:a6:d9:c3:
5e:86:4d:48:71:72:74:d9:5c:d0:c7:96:82:65:76:b7:97:a1:
d7:6c:92:c3:cd:ac:46:76:fe:23:6d:bc:0d:5d:72:79:fb:23:
0f:e4:89:06:33:80:47:2f:9e:9d:8d:54:ce:b6:7d:1e:c3:d2:
f1:0d:5e:0d:cb:a6:cb:08:42:10:2a:62:28:06:4a:14:9e:ca:
d7:f0:ac:e1:7d:88:25:10:7d:ad:ee:9b:39:c3:17:e7:a1:56:
64:18:5e:a4:0d:af:4e:de:b8:2c:08:66:38:45:cd:14:39:c7:
7a:02:3d:41:54:93:1e:49:40:99:eb:b4:6d:a8:23:09:19:3c:
a6:49:41:73:73:3c:95:b2:29:1f:a8:cc:bd:6f:38:2c:b4:eb:
35:9d:b4:80:2f:8c:28:21:2c:fc:26:98:1e:d7:85:44:15:a5:
44:5c:27:4e:d5:e5:90:1e:d4:24:c2:0a:45:e4:88:cd:fc:04:
ac:79:b1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:34 2025 by rpki-client