Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7_3XGir2FvjQQEy4orMTGxiCikA.roa
File: 7_3XGir2FvjQQEy4orMTGxiCikA.roa (raw, json)
Hash identifier: orLGvm9DXcFelniUCZ5M/IDf6L5os96k10jo9x9HxRg=
Subject key identifier: EF:FD:D7:1A:2A:F6:16:F8:D0:40:4C:B8:A2:B3:13:1B:18:82:8A:40
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FFE2B9D968C99D29D9CEC01D221A0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7_3XGir2FvjQQEy4orMTGxiCikA.roa
Signing time: Thu 02 Jan 2025 05:49:41 +0000
ROA not before: Thu 02 Jan 2025 05:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208605
IP address blocks: 93.171.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:fe:2b:9d:96:8c:99:d2:9d:9c:ec:01:d2:21:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=effdd71a2af616f8d0404cb8a2b3131b18828a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f9:90:1c:00:1f:50:bb:11:92:d3:be:f1:f4:
5f:36:08:89:03:a1:52:76:f6:80:6d:a9:03:37:7c:
88:1e:d4:77:df:6d:88:2f:9d:a6:26:c2:21:11:e8:
eb:e2:98:7b:78:7d:54:ef:43:c1:9a:df:7e:25:46:
03:f2:87:be:e2:45:aa:50:5b:0c:55:25:dc:0e:1c:
70:f0:34:74:fc:bb:19:19:df:89:e0:65:06:96:cc:
a5:59:ae:17:79:c1:a8:74:0a:a3:cf:48:68:ac:75:
b3:89:a1:6e:a2:4b:7f:f7:7e:ff:2b:2f:26:67:5a:
9b:04:b1:b1:d6:26:84:e7:37:2e:cf:1d:9c:14:e6:
5f:05:d8:02:ee:19:2f:68:f9:fe:51:4f:5b:42:dd:
99:04:e0:e1:59:b8:6b:d8:7c:c8:4b:84:a9:94:8f:
8e:cf:ce:f2:28:c2:71:63:62:6f:ce:e5:6b:ce:ec:
ce:0d:e3:f2:b1:64:1a:6e:72:1d:f3:53:af:d8:65:
16:8d:6b:73:b4:74:7e:e8:f3:41:0f:62:4f:3a:67:
c5:f7:c1:5f:ac:f8:9d:d9:54:4b:bb:e9:b8:30:a5:
10:8f:43:2b:13:9a:3c:4f:27:1b:03:58:0f:b1:55:
b1:ab:1e:98:4f:ed:8c:55:fe:f3:6d:f8:f9:cb:36:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:D7:1A:2A:F6:16:F8:D0:40:4C:B8:A2:B3:13:1B:18:82:8A:40
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7_3XGir2FvjQQEy4orMTGxiCikA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.227.0/24
Signature Algorithm: sha256WithRSAEncryption
92:64:34:1b:ca:4f:d5:07:ef:ca:2b:1e:42:d0:82:7e:b9:21:
0c:d5:94:50:90:12:dc:4c:fa:2b:1a:df:98:fa:4b:f4:2d:ba:
28:cd:51:bd:46:c4:62:b3:94:61:49:0d:99:87:8e:98:ea:22:
ff:d8:04:4c:2d:c6:bb:c2:7a:a8:a9:50:1a:81:dc:9d:e1:5d:
fb:24:9f:01:14:10:ca:3d:68:a2:24:7c:2e:22:8c:9f:00:a7:
bc:68:e2:3e:f7:90:7c:e4:fb:4f:e6:e0:0a:fd:19:8d:90:86:
fd:a8:75:f3:ff:1b:03:d0:a4:3a:c3:2e:af:f3:09:e3:81:2e:
ed:fc:b1:ea:5b:3d:0a:17:22:fc:c1:47:37:95:1c:db:d2:7d:
bd:4c:a8:18:08:2c:87:46:c5:0d:b8:ed:a8:7a:2e:bd:85:1b:
21:14:6f:4f:13:d4:a1:e8:c5:1e:5f:c5:5b:3e:1e:ec:42:f1:
a4:ac:8f:bc:3c:0b:f0:cf:3c:db:1b:b6:c0:84:af:1f:cf:85:
ce:53:1f:fc:53:cb:eb:75:f2:1e:7a:eb:7f:a0:99:2c:be:0f:
fc:ad:0e:6f:47:01:ed:56:c7:61:f7:35:f8:88:46:7c:bf:0f:
fb:fc:0c:90:56:15:60:8c:c4:ca:6c:91:13:73:3f:60:37:c4:
fd:88:b6:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj/4rnZaMmdKdnOwB0iGgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmZkZDcxYTJhZjYxNmY4ZDA0MDRjYjhhMmIzMTMxYjE4ODI4YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PmQHAAfULsRktO+8fRfNgiJA6FS
dvaAbakDN3yIHtR3322IL52mJsIhEejr4ph7eH1U70PBmt9+JUYD8oe+4kWqUFsM
VSXcDhxw8DR0/LsZGd+J4GUGlsylWa4XecGodAqjz0horHWziaFuokt/937/Ky8m
Z1qbBLGx1iaE5zcuzx2cFOZfBdgC7hkvaPn+UU9bQt2ZBODhWbhr2HzIS4SplI+O
z87yKMJxY2JvzuVrzuzODePysWQabnId81Ov2GUWjWtztHR+6PNBD2JPOmfF98Ff
rPid2VRLu+m4MKUQj0MrE5o8TycbA1gPsVWxqx6YT+2MVf7zbfj5yzYQqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO/91xoq9hb40EBMuKKzExsYgopAMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvN18zWEdpcjJGdmpRUUV5NG9yTVRHeGlDaWtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavjMA0G
CSqGSIb3DQEBCwUAA4IBAQCSZDQbyk/VB+/KKx5C0IJ+uSEM1ZRQkBLcTPorGt+Y
+kv0LboozVG9RsRis5RhSQ2Zh46Y6iL/2ARMLca7wnqoqVAagdyd4V37JJ8BFBDK
PWiiJHwuIoyfAKe8aOI+95B85PtP5uAK/RmNkIb9qHXz/xsD0KQ6wy6v8wnjgS7t
/LHqWz0KFyL8wUc3lRzb0n29TKgYCCyHRsUNuO2oei69hRshFG9PE9Sh6MUeX8Vb
Ph7sQvGkrI+8PAvwzzzbG7bAhK8fz4XOUx/8U8vrdfIeeut/oJksvg/8rQ5vRwHt
Vsdh9zX4iEZ8vw/7/AyQVhVgjMTKbJETcz9gN8T9iLaJ
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:31 2025 by rpki-client