Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7m9eXXy71nfaMSqWE8MJlBFmh94.roa
File: 7m9eXXy71nfaMSqWE8MJlBFmh94.roa (raw, json)
Hash identifier: 6O3ginx90irVHNKDAOW7kGMR6G2i2l6T8BaI67ex00A=
Subject key identifier: EE:6F:5E:5D:7C:BB:D6:77:DA:31:2A:96:13:C3:09:94:11:66:87:DE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709529F63D1DCEF3A7E89E2BBC35BBD9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7m9eXXy71nfaMSqWE8MJlBFmh94.roa
Signing time: Mon 02 Jan 2023 03:45:01 +0000
ROA not before: Mon 02 Jan 2023 03:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44200
IP address blocks: 93.171.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:29:f6:3d:1d:ce:f3:a7:e8:9e:2b:bc:35:bb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee6f5e5d7cbbd677da312a9613c30994116687de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bc:0a:c1:d4:a5:14:8f:59:cd:55:28:95:1a:
fd:ad:e5:d7:03:b0:f2:e7:58:87:2f:98:35:88:36:
6e:62:10:75:27:36:18:61:af:b6:66:f4:c7:07:4c:
d0:8c:eb:e8:0c:7c:c9:fe:90:52:90:62:dd:d7:e2:
ee:96:e9:4e:58:2e:86:97:0e:a3:04:54:c7:df:b6:
57:59:85:76:cb:50:d6:82:0d:7a:03:5e:4f:08:3e:
7c:3d:74:46:b7:00:c4:59:88:fa:2a:92:e1:41:a4:
ba:f8:1f:90:51:1f:a7:e6:27:9f:a6:1d:94:7f:e4:
51:f4:06:0c:a2:6a:d3:69:70:7f:c0:fc:7e:a3:4c:
9f:77:73:37:0a:97:6f:da:60:18:d3:98:a7:30:31:
78:82:a0:cd:f6:c3:46:1c:eb:d2:da:a9:fb:7e:0e:
4c:bd:99:8d:23:62:53:dd:74:f4:bb:5f:53:07:04:
ec:a2:7f:63:07:2a:86:c2:89:d9:a1:12:19:2e:52:
1f:a7:a5:63:e9:8c:43:38:c4:3a:64:2e:ac:41:e6:
69:08:93:4e:0b:17:a1:20:33:0d:8e:82:4d:31:34:
b0:0a:4c:52:ef:b7:5e:e8:4e:be:d8:ea:fd:81:15:
e0:bc:13:0e:74:6f:74:07:0e:94:ac:ee:3d:be:79:
bf:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:5E:5D:7C:BB:D6:77:DA:31:2A:96:13:C3:09:94:11:66:87:DE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/7m9eXXy71nfaMSqWE8MJlBFmh94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.209.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c6:66:d0:22:1a:0f:65:d0:3a:4f:88:e6:ac:11:17:88:61:
08:d4:3e:c1:37:21:93:44:ff:86:c2:1e:13:ca:f4:68:bb:ab:
36:72:ae:99:1e:9f:97:c5:21:e2:31:2d:c1:fc:95:02:12:d0:
59:4d:8f:26:2f:b6:7a:f2:4f:a9:c6:ef:a7:0c:36:2b:14:9a:
75:61:69:a5:cc:47:0d:77:d3:82:1e:51:3a:6f:66:95:a8:0d:
c9:38:8a:b5:45:5d:c5:2f:15:fb:60:f2:8f:28:94:9d:11:ed:
ba:e3:92:a7:c4:3d:a8:95:fb:e7:33:8f:22:25:97:2e:26:46:
c4:0f:61:c9:e2:e9:44:c0:f9:d8:17:1f:13:c0:77:5f:17:6c:
36:13:a6:1f:38:ce:10:d6:d2:16:1f:06:0c:43:18:8b:ce:ed:
54:7a:60:b0:49:09:b2:e8:ee:16:2f:80:ee:32:65:81:4d:ff:
ef:eb:99:9a:7c:68:33:92:38:86:a7:4a:d4:31:a6:a2:44:fe:
c2:aa:e9:3d:62:e1:d5:07:ec:b7:a8:fb:98:c7:d7:1b:7e:68:
88:e2:68:ad:e1:02:89:57:b3:49:96:05:42:4a:e4:78:8f:ff:
9f:f6:8f:8f:a2:e0:73:f7:f4:b7:23:d7:6c:80:00:94:b0:09:
69:f1:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:43 2025 by rpki-client