Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9Qb7CXTQGORMnQLfjiykvLturM8.roa
File: 9Qb7CXTQGORMnQLfjiykvLturM8.roa (raw, json)
Hash identifier: iI+ADO7WClxJ/EnGvNNhiXvTeVjHcoAk03cGPIYedxY=
Subject key identifier: F5:06:FB:09:74:D0:18:E4:4C:9D:02:DF:8E:2C:A4:BC:BB:6E:AC:CF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 29F21362
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9Qb7CXTQGORMnQLfjiykvLturM8.roa
Signing time: Tue 24 May 2022 08:45:16 +0000
ROA not before: Tue 24 May 2022 08:45:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205264
IP address blocks: 93.170.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 703730530 (0x29f21362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: May 24 08:45:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f506fb0974d018e44c9d02df8e2ca4bcbb6eaccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:4d:78:4c:0f:c5:1c:97:3f:ca:3e:86:c0:
c1:8c:6f:79:a7:e5:a9:e9:75:bb:03:4d:b4:57:17:
4d:67:a5:70:d6:50:02:9d:22:70:29:97:22:3d:87:
5f:b1:0d:cf:b5:2a:65:ea:95:d5:84:7a:ae:15:74:
96:9f:7b:f9:ae:a6:3c:9a:78:39:29:b2:dc:1b:2f:
7b:fb:53:a3:99:d3:f8:b8:e8:19:f2:85:18:10:8a:
4e:7e:81:33:82:f5:93:03:7e:d1:9b:6d:3a:a3:f7:
ad:51:44:60:ae:11:28:bf:51:24:d8:07:93:13:18:
52:12:ec:18:5c:1a:f3:72:ed:c1:6c:5c:6d:92:76:
d9:77:45:43:52:98:00:77:27:e5:c7:91:07:77:8c:
5d:f6:58:14:54:d7:61:18:b1:08:77:d6:15:a7:41:
e9:1b:e9:7a:1d:b2:88:07:f9:d4:5f:0b:fc:16:aa:
4a:18:a0:ee:de:14:b0:18:a1:bf:f4:7d:3d:20:f6:
ec:c2:cf:56:c4:9e:22:c2:42:39:6a:e0:3d:b4:d9:
bb:94:00:fa:38:57:86:70:30:84:77:57:6c:a1:38:
6d:e2:9f:0c:4c:10:f4:49:24:c7:7b:ce:85:c9:80:
72:60:9b:ef:ba:8f:af:09:f1:3d:9a:6b:4a:83:9d:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:06:FB:09:74:D0:18:E4:4C:9D:02:DF:8E:2C:A4:BC:BB:6E:AC:CF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9Qb7CXTQGORMnQLfjiykvLturM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:9a:67:4d:6d:69:84:7e:5d:cf:23:64:d1:33:4c:cf:35:92:
3d:90:7e:de:14:c6:83:36:dc:bc:2e:0d:e0:d1:db:c7:a8:bc:
91:b3:e2:3b:12:ce:8e:b8:9b:81:6f:45:d1:39:ac:f6:43:12:
fe:4d:c4:f9:a0:54:0f:0f:00:04:4d:66:0d:71:93:a7:04:0a:
23:c5:4a:22:41:8e:98:a6:54:c7:29:e5:f3:fc:5f:33:eb:ca:
c4:97:09:71:a2:91:4b:4f:12:43:aa:f4:ba:97:8b:a6:01:3a:
42:02:1d:75:dd:62:f6:65:3d:38:00:92:a0:02:cf:a1:08:43:
d2:be:cc:72:26:b0:8c:2e:fe:dc:39:5f:4e:ac:62:ce:47:15:
00:37:b2:cf:7b:c8:22:9b:2b:39:de:01:39:9b:a6:71:69:c4:
fa:1f:86:16:f0:45:62:bc:25:02:78:12:bc:85:a7:d9:6e:4a:
cc:d1:85:82:32:bf:29:94:7c:9b:39:a0:2b:8c:87:41:d1:09:
6a:60:9b:00:26:3e:57:41:a3:7f:08:75:c9:d6:c7:79:75:7e:
61:9b:db:b2:c7:95:e4:28:e7:b2:56:77:85:b7:22:14:75:81:
6e:ed:e6:e0:57:39:0c:31:f7:0f:38:83:e4:b2:8d:d5:39:d3:
08:1f:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:29 2025 by rpki-client