Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7-a-hLf8yFTpX8TYEiS9tbftFVw.roa
File: 7-a-hLf8yFTpX8TYEiS9tbftFVw.roa (raw, json)
Hash identifier: RCdLWJ5RVznzfAs1YHz87WxxfO1uEs+JB6m0Fsh4lcw=
Subject key identifier: EF:E6:BE:84:B7:FC:C8:54:E9:5F:C4:D8:12:24:BD:B5:B7:ED:15:5C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F985E42302320191D20011CC0DCBE
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7-a-hLf8yFTpX8TYEiS9tbftFVw.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41773
IP address blocks: 93.170.26.0/24 maxlen: 24
95.47.250.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:98:5e:42:30:23:20:19:1d:20:01:1c:c0:dc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe6be84b7fcc854e95fc4d81224bdb5b7ed155c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:a6:fb:4b:4f:35:b6:f5:60:c6:a1:1d:a7:
81:03:b0:4e:6b:fd:53:14:9e:e7:ef:5a:57:d4:16:
c4:f9:89:7d:d5:99:14:7f:fa:22:6b:4e:cf:35:97:
d6:70:c6:9e:50:c4:32:69:fa:e2:c2:fc:d2:62:e0:
32:6f:95:20:99:38:5f:f6:38:cb:43:25:3b:81:af:
0d:d1:26:87:86:e4:6d:f3:76:36:4e:b4:77:77:ce:
62:da:5f:0b:2c:60:e7:04:fa:f6:e6:9f:3f:30:dd:
44:6c:a0:49:c7:74:9a:bd:45:cc:2f:2a:75:16:99:
03:ce:db:62:3f:e3:6b:4c:7d:77:e4:64:70:17:8c:
56:a0:d2:22:db:8e:cf:53:9f:75:78:e7:b3:83:90:
21:59:1c:1f:fd:81:47:5b:9c:47:54:03:68:d8:b7:
47:79:1c:cd:25:d4:eb:63:c9:a2:37:1a:58:d6:5c:
1d:81:87:7e:1f:60:94:85:21:b2:4d:36:cd:58:33:
a5:e3:90:9a:f9:76:90:a7:cf:7a:97:41:0c:1f:02:
55:aa:c1:ce:3a:f0:88:96:8f:5a:82:0e:28:c8:fe:
7f:1e:97:76:52:5b:1e:24:61:32:78:db:e5:f2:1d:
97:a2:f7:4b:14:bc:9c:c0:56:62:13:5d:f9:19:b4:
d5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E6:BE:84:B7:FC:C8:54:E9:5F:C4:D8:12:24:BD:B5:B7:ED:15:5C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7-a-hLf8yFTpX8TYEiS9tbftFVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.26.0/24
95.47.250.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:8c:9f:0c:4a:6b:76:7a:d1:56:e0:b4:f0:bd:c7:23:b5:c3:
8e:f9:ad:7e:c8:11:88:24:68:41:4d:2d:ea:bb:b2:8c:d6:bf:
68:7d:a4:82:59:41:0a:5a:39:80:16:ef:a8:e0:98:71:85:04:
9d:9f:ce:f6:cd:76:e2:4f:b0:90:15:da:0d:f2:4a:2f:b7:d6:
5f:0a:17:86:14:ce:b6:a7:0e:d9:80:5b:a7:d2:1e:16:08:45:
a6:eb:e6:50:cc:e4:83:32:73:09:ae:e7:6c:e6:04:33:89:86:
3b:4a:6d:b1:e4:e4:29:9d:a9:c3:d4:65:2a:a3:04:41:33:31:
0d:11:81:e3:50:14:8f:9f:d4:0b:fc:9d:ab:f8:61:89:23:9a:
43:10:8e:87:d4:40:a1:f9:78:54:ad:81:78:91:c3:9b:9d:aa:
6e:60:2f:86:fc:85:ff:8c:4f:68:ad:36:48:04:72:51:54:df:
df:00:ff:96:07:1e:54:f8:27:83:c2:61:5b:ac:6f:28:94:e1:
3d:b3:4e:11:f3:8f:b0:37:57:1b:dd:78:dc:b3:9e:c8:78:dc:
54:a0:f0:70:10:48:d9:9e:93:63:5d:0c:a8:42:5c:51:da:21:
17:84:f2:03:ad:e9:56:59:37:11:fe:f5:67:42:3c:78:52:b6:
54:87:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:55 2025 by rpki-client