Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5tKOj3l6QrcEfui1DqXkbgNOUOc.roa
File: 5tKOj3l6QrcEfui1DqXkbgNOUOc.roa (raw, json)
Hash identifier: n+IUPIbI1K9ANpOj5gRWNMofBC7qeBiHDXARkcbs+Ks=
Subject key identifier: E6:D2:8E:8F:79:7A:42:B7:04:7E:E8:B5:0E:A5:E4:6E:03:4E:50:E7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FDB476E1AB120389AA5E91254B65E
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5tKOj3l6QrcEfui1DqXkbgNOUOc.roa
Signing time: Thu 02 Jan 2025 05:49:32 +0000
ROA not before: Thu 02 Jan 2025 05:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61433
IP address blocks: 93.171.164.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:db:47:6e:1a:b1:20:38:9a:a5:e9:12:54:b6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6d28e8f797a42b7047ee8b50ea5e46e034e50e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:c2:fb:bc:de:dc:0d:36:2e:d3:1b:59:94:
4d:c4:b2:e3:94:73:de:4b:d5:f4:90:60:5a:fa:72:
4c:b3:90:8b:4c:e0:e5:dd:bb:8a:75:34:41:24:59:
7e:26:e7:28:46:f1:2d:16:36:ac:ec:7f:a5:1b:d7:
6c:ce:47:b1:0c:7b:0f:e6:03:1d:c8:c9:38:3b:8a:
5c:be:12:39:1a:8d:33:a6:17:be:70:3e:18:25:a1:
97:6c:77:fa:88:13:e6:05:79:6a:f4:5a:f8:78:d9:
ad:8f:9d:e5:bf:54:e1:1e:bd:f7:ec:17:72:fa:2e:
f0:db:a9:03:ff:97:f9:20:76:9e:da:b7:0a:fe:f1:
1a:93:25:22:28:62:18:2b:53:19:47:14:6b:fc:c0:
e0:56:a6:dd:50:d9:d9:09:99:2c:dc:9f:50:ee:c6:
f3:18:38:8b:16:d1:28:5a:54:a8:2e:88:e7:eb:ee:
26:89:4d:70:22:5e:8f:1f:0d:2a:b3:2f:39:cf:3b:
45:85:49:55:f1:fb:ae:f5:c6:6b:68:58:38:72:da:
00:d1:13:cb:2a:ce:99:3d:30:ea:81:f5:12:e7:15:
c9:ee:67:68:b0:4d:de:85:42:7a:94:20:48:4c:6c:
21:04:17:d2:1c:eb:0c:4f:40:df:79:50:81:ad:f4:
93:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D2:8E:8F:79:7A:42:B7:04:7E:E8:B5:0E:A5:E4:6E:03:4E:50:E7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/5tKOj3l6QrcEfui1DqXkbgNOUOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.164.0/23
Signature Algorithm: sha256WithRSAEncryption
31:0e:5f:f1:50:6e:54:b9:b5:67:72:bf:4b:03:ab:17:72:64:
28:60:ec:b2:f8:1f:f4:53:58:b9:8b:e4:e7:b1:5b:e3:d9:f7:
65:9a:1e:7c:dd:9e:3f:5c:30:5a:3d:32:3f:a1:4d:63:e2:f9:
e3:89:c7:1b:8d:6a:24:58:62:00:88:54:ef:eb:cf:d6:63:ff:
5e:6c:4e:fc:11:c7:68:59:f9:ec:c0:ef:63:0e:0e:1b:fd:a9:
5d:02:b8:e9:5f:df:e7:95:72:32:b5:92:e4:7c:95:ad:f4:a2:
93:57:e5:55:66:eb:ba:5d:90:8c:f5:a5:9a:14:97:3c:29:af:
85:d9:ee:cf:de:e1:fb:92:68:33:1a:86:7c:68:9b:c2:b4:59:
c3:4f:19:91:93:4d:60:ee:e2:ef:a5:d5:78:ac:5b:da:e7:12:
9b:e6:0a:f5:bf:ce:50:25:16:84:35:76:8c:96:9f:6c:7a:89:
ee:f5:5e:01:8b:b1:76:e8:9a:05:5f:df:37:d7:f7:b3:d5:4f:
b9:2a:33:36:51:e8:7a:13:ec:77:28:6c:a6:f4:d8:49:9b:ae:
9b:05:71:56:85:8c:3c:41:0f:68:95:eb:8a:cb:d6:5d:55:7a:
be:0c:eb:78:d6:f4:82:47:5e:0e:d5:cc:ce:6e:16:69:04:f0:
ac:62:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:27 2025 by rpki-client