Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6eBIYPcWVjM6dLNOuc5LxLKUxlI.roa
File: 6eBIYPcWVjM6dLNOuc5LxLKUxlI.roa (raw, json)
Hash identifier: vebEYK2rZ1xRs7YrvhEMCrTqW2yo88FQOuwPXjGowoo=
Subject key identifier: E9:E0:48:60:F7:16:56:33:3A:74:B3:4E:B9:CE:4B:C4:B2:94:C6:52
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095A7FF8F2C1D865F385EEA8BB56363
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6eBIYPcWVjM6dLNOuc5LxLKUxlI.roa
Signing time: Mon 02 Jan 2023 03:45:34 +0000
ROA not before: Mon 02 Jan 2023 03:45:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208605
IP address blocks: 93.171.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:a7:ff:8f:2c:1d:86:5f:38:5e:ea:8b:b5:63:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9e04860f71656333a74b34eb9ce4bc4b294c652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:b6:49:34:99:7d:0d:e7:ef:9e:75:8d:81:
c1:1a:54:17:47:7c:36:9a:f9:3b:00:e5:c5:96:02:
22:af:4d:b4:57:69:31:96:eb:3f:a7:bd:47:b1:91:
b8:c5:42:98:60:05:bd:7f:f1:5a:3e:2f:1f:b7:ff:
54:c2:12:3c:81:3f:5f:4a:c7:35:bc:5f:92:6b:bf:
2c:93:ef:90:fc:2f:3d:9e:be:54:ed:46:02:71:50:
b5:ff:85:f2:12:2f:f5:3e:b8:29:ea:3c:c2:8a:af:
5c:74:b2:f0:5f:eb:a2:bc:13:d4:2b:32:f4:9c:bc:
d9:a4:0d:8d:fb:41:73:9f:de:73:5f:a6:fe:fb:c4:
8f:0d:30:38:e3:b5:ea:5b:f3:30:2f:90:90:9d:59:
9f:de:ba:74:46:17:88:0a:aa:e7:b5:3a:14:2f:73:
a8:1f:0f:93:42:14:fe:f4:d0:87:66:0c:bb:95:1f:
02:98:51:ac:0d:60:ce:20:1c:79:6b:f1:55:b9:e6:
f8:28:97:d6:3e:08:d5:c7:de:66:c4:7d:40:10:33:
93:3e:7f:00:d0:39:f6:4d:8b:cf:a4:f9:db:3f:89:
4c:5c:d5:36:4b:00:56:bf:05:04:d2:96:15:2a:d6:
c1:b5:ec:d2:8c:41:fd:d8:bc:2a:d7:fc:27:73:e6:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E0:48:60:F7:16:56:33:3A:74:B3:4E:B9:CE:4B:C4:B2:94:C6:52
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/6eBIYPcWVjM6dLNOuc5LxLKUxlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.227.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4f:b5:d3:6f:f7:98:b0:ca:52:88:c0:a1:85:ba:0b:49:3e:
a4:f5:dc:74:b8:51:45:17:7e:c0:48:f1:51:4a:d2:20:de:ea:
8c:f2:99:24:20:bd:82:54:ca:d9:cd:88:b9:4e:22:33:5d:07:
da:3f:5c:e1:72:69:27:b2:9c:c3:4d:b1:0d:a5:19:87:07:b3:
54:5a:81:33:c0:11:39:bb:d8:67:f5:aa:9b:8c:e9:52:e9:aa:
47:0e:e6:ba:8b:71:84:a6:6f:e0:d9:5d:cb:05:45:b9:0d:26:
8f:15:94:a3:a4:e7:54:da:0d:75:30:fb:51:5c:68:8e:36:ce:
0e:d5:62:3c:6c:e1:57:0c:f0:b1:c3:f9:1a:cb:d2:75:59:0f:
9a:48:b1:0e:a2:2c:ab:fc:6e:c4:cd:39:a4:84:a7:3e:eb:ea:
7a:99:44:e7:42:d4:75:50:e1:b4:5f:6a:63:a8:a1:73:32:a4:
b5:37:9a:c2:47:77:88:23:10:23:9f:7c:7f:9e:fa:d4:3a:5e:
e8:5a:d3:49:7a:34:ca:d3:21:5e:22:67:45:31:c7:02:f5:76:
26:0b:c7:0f:73:4c:fd:6c:ec:3b:b6:d3:76:82:c5:e1:88:42:
1a:1e:03:20:c0:0f:39:a1:dc:a8:c2:63:26:26:bd:18:6c:82:
b3:a5:6d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:07 2025 by rpki-client