Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9mYg4oQx48ucPhGPYMaHK0U92DU.roa
File: 9mYg4oQx48ucPhGPYMaHK0U92DU.roa (raw, json)
Hash identifier: z/9Ixm6MSrQdNtMMBo5WAqs2Vc72lzQD5jwG98zjxn8=
Subject key identifier: F6:66:20:E2:84:31:E3:CB:9C:3E:11:8F:60:C6:87:2B:45:3D:D8:35
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 283D6FDC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9mYg4oQx48ucPhGPYMaHK0U92DU.roa
Signing time: Sat 01 Jan 2022 16:09:55 +0000
ROA not before: Sat 01 Jan 2022 16:09:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207348
IP address blocks: 93.170.240.0/23 maxlen: 24
95.47.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 675114972 (0x283d6fdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f66620e28431e3cb9c3e118f60c6872b453dd835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:d0:a1:c1:87:40:30:9f:8e:74:f1:e8:8d:
70:0a:c8:c8:53:c5:de:e7:a9:a2:5b:cc:45:30:a9:
94:16:67:2f:11:1a:da:ba:3b:03:a7:a9:69:0d:df:
a8:b6:e1:7a:84:94:22:da:9b:2f:48:97:88:71:1c:
cf:e8:aa:d1:4a:ed:c7:fc:76:88:cf:38:1d:f7:73:
c3:49:fb:1d:a4:61:cb:82:7c:38:d0:66:b1:eb:d6:
e2:8c:e5:75:fe:ff:45:b7:af:43:ac:45:33:3a:d6:
0a:74:59:d9:b9:73:eb:54:8e:5e:e7:ad:82:3a:72:
ac:cb:fc:cc:70:74:53:7d:df:71:1a:5f:8b:39:1f:
d2:50:60:bb:1b:91:2e:49:03:44:c0:ed:5b:72:8a:
0b:13:78:f8:63:be:12:e9:7e:e4:4c:c2:b6:53:b0:
df:4b:be:b6:02:cf:78:bd:91:15:d6:84:3f:63:ad:
df:c0:cc:2b:58:03:c1:b8:c6:1e:da:a0:87:85:e9:
74:7b:26:9d:f4:34:49:0a:97:ad:4e:31:a9:11:e0:
c3:10:c8:34:63:fe:45:3a:70:f6:c2:62:fe:23:3a:
19:fd:9d:c4:48:1c:d7:18:db:38:28:9f:98:42:2c:
f6:74:40:a2:09:8a:c1:36:6c:dc:f9:9e:24:24:cb:
b3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:66:20:E2:84:31:E3:CB:9C:3E:11:8F:60:C6:87:2B:45:3D:D8:35
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9mYg4oQx48ucPhGPYMaHK0U92DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.240.0/23
95.47.160.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ee:2a:04:5b:27:0c:19:33:bf:03:29:de:6a:c1:42:f4:05:
eb:01:a5:3a:3e:05:63:fb:e4:46:43:1c:1e:1d:35:82:52:5e:
6c:15:cd:19:f3:29:2c:85:1f:e7:5a:f3:11:cb:6b:e1:e1:ce:
fe:a9:e6:f9:17:af:b9:92:4c:22:c3:05:74:85:3f:6d:f9:a4:
a5:c4:21:07:2f:8d:41:b7:de:02:bc:2f:2b:91:79:30:cc:99:
36:40:67:04:9d:07:8d:81:ef:dc:40:fb:6e:10:98:c2:cd:33:
18:bd:a7:18:65:ee:dc:32:7d:3a:8e:01:bf:b1:6e:60:76:85:
82:0c:ee:52:d3:57:3e:bf:3b:5a:7d:23:bd:85:de:2e:57:17:
a6:dd:97:ae:3e:60:36:32:f7:10:d5:4e:7a:34:3e:cc:d0:4c:
ca:cd:7d:db:79:69:bc:77:3b:94:bf:38:93:ac:8e:5c:aa:ee:
cc:79:fb:e3:bf:3f:a5:d6:96:62:32:b8:e0:61:48:74:ec:52:
c6:91:df:41:21:ec:1f:45:e8:d9:d0:1a:9f:f3:b1:a9:10:47:
25:c0:ea:e9:a3:94:58:c3:4f:bb:8d:78:a5:04:ff:b4:43:86:
6e:ea:3d:1b:5b:a9:18:18:0e:a4:6e:e9:4b:5d:42:a8:49:ce:
59:7f:a1:3d
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEKD1v3DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDk1NVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjY2NjIwZTI4NDMx
ZTNjYjljM2UxMThmNjBjNjg3MmI0NTNkZDgzNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJWW0KHBh0Awn4508eiNcArIyFPF3uepolvMRTCplBZnLxEa
2ro7A6epaQ3fqLbheoSUItqbL0iXiHEcz+iq0Urtx/x2iM84Hfdzw0n7HaRhy4J8
ONBmsevW4ozldf7/RbevQ6xFMzrWCnRZ2blz61SOXuetgjpyrMv8zHB0U33fcRpf
izkf0lBguxuRLkkDRMDtW3KKCxN4+GO+Eul+5EzCtlOw30u+tgLPeL2RFdaEP2Ot
38DMK1gDwbjGHtqgh4XpdHsmnfQ0SQqXrU4xqRHgwxDINGP+RTpw9sJi/iM6Gf2d
xEgc1xjbOCifmEIs9nRAogmKwTZs3PmeJCTLswcCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBT2ZiDihDHjy5w+EY9gxocrRT3YNTAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
LzltWWc0b1F4NDh1Y1BoR1BZTWFISzBVOTJEVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAV2q8AMEAF8voDANBgkqhkiG9w0B
AQsFAAOCAQEAEu4qBFsnDBkzvwMp3mrBQvQF6wGlOj4FY/vkRkMcHh01glJebBXN
GfMpLIUf51rzEctr4eHO/qnm+RevuZJMIsMFdIU/bfmkpcQhBy+NQbfeArwvK5F5
MMyZNkBnBJ0HjYHv3ED7bhCYws0zGL2nGGXu3DJ9Oo4Bv7FuYHaFggzuUtNXPr87
Wn0jvYXeLlcXpt2Xrj5gNjL3ENVOejQ+zNBMys1923lpvHc7lL84k6yOXKruzHn7
478/pdaWYjK44GFIdOxSxpHfQSHsH0Xo2dAan/OxqRBHJcDq6aOUWMNPu414pQT/
tEOGbuo9G1upGBgOpG7pS11CqEnOWX+hPQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:18:00 2025 by rpki-client