Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AGXDPEJt2WSadkt8WtBlFSiZd_g.roa
File: AGXDPEJt2WSadkt8WtBlFSiZd_g.roa (raw, json)
Hash identifier: 0MdMyP0bgdI+wr9Ss6RVkhvPaBhGnR6ucz8oSuIlwhw=
Subject key identifier: 00:65:C3:3C:42:6D:D9:64:9A:76:4B:7C:5A:D0:65:15:28:99:77:F8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 281EE291
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AGXDPEJt2WSadkt8WtBlFSiZd_g.roa
Signing time: Sat 01 Jan 2022 16:09:38 +0000
ROA not before: Sat 01 Jan 2022 16:09:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200123
IP address blocks: 93.170.9.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 673112721 (0x281ee291)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0065c33c426dd9649a764b7c5ad06515289977f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:fa:54:44:32:c1:b6:5d:25:6e:b2:bc:47:
97:ed:a8:f4:70:db:e5:43:08:06:62:71:8b:1e:8c:
2b:76:fd:9a:a8:f6:20:08:16:b0:09:5f:d0:f6:2c:
fa:ae:5a:37:09:0e:5f:f7:89:85:6f:68:80:7c:4b:
5a:70:52:02:dc:3b:5a:93:d4:be:ff:13:24:4d:a8:
36:4f:03:09:c5:b1:cb:d7:49:24:1f:4e:06:ec:a6:
37:9b:ae:97:2a:8b:d4:e0:02:98:4a:9f:b4:a9:5b:
66:aa:ab:23:31:c5:4d:9f:be:23:b6:ba:30:00:90:
47:52:e5:32:a6:27:06:6f:0e:fc:14:e4:53:d2:e4:
b3:d6:a8:3e:85:8b:10:50:f9:55:11:86:3d:50:df:
49:7e:6e:89:85:cb:08:e0:5a:1c:c1:f5:30:5c:d1:
4e:81:bd:bb:0c:fa:ab:2e:93:8c:90:64:a4:30:3d:
4b:7c:0a:3a:8e:57:87:7b:3f:ee:3b:55:ec:9c:c1:
e0:48:72:ba:8a:67:08:1c:0d:b4:c2:fd:fa:37:ff:
78:80:de:95:48:1f:37:5c:e0:18:ed:b1:5a:4e:33:
d4:79:28:4d:9d:b9:8a:b2:a4:ec:a8:5f:c1:1c:3b:
7c:eb:d4:5e:69:e1:63:6f:ea:9c:12:b6:d6:dc:a9:
44:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:65:C3:3C:42:6D:D9:64:9A:76:4B:7C:5A:D0:65:15:28:99:77:F8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AGXDPEJt2WSadkt8WtBlFSiZd_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.9.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a2:42:3c:d8:d0:94:d8:f5:20:04:b2:a4:cc:d2:59:a1:7e:
ec:ee:d5:b9:48:48:48:2c:70:52:0f:76:3c:31:e6:01:d2:24:
65:46:3b:5c:89:c9:c5:c0:d1:1b:bf:7a:9e:ec:e7:99:ca:d9:
63:7b:2c:91:9c:66:71:70:a7:42:a4:b2:12:9e:b9:f1:aa:c1:
cd:0b:89:1a:eb:00:2b:11:58:5f:10:ed:61:d5:f1:e3:17:41:
2e:ee:2d:6e:96:57:97:87:fd:fb:b3:f1:a3:ab:48:f1:3e:cb:
4b:24:0d:e3:be:dc:de:48:7c:c9:44:bc:27:f5:ac:28:36:90:
06:c6:3d:8c:88:84:78:29:f5:9e:66:81:92:97:50:c4:af:93:
b2:1f:ad:a1:86:c4:6f:e9:8b:d2:9b:f0:f1:ff:65:9c:d5:56:
b6:97:20:ee:15:1f:27:86:1a:10:9d:d2:32:39:15:e8:0a:45:
1c:56:28:60:f3:46:71:33:28:9f:72:e3:cb:cf:12:d5:f4:65:
af:d9:51:09:44:4a:53:63:7b:b6:f1:b5:2f:fb:2c:9a:fe:6f:
c0:e8:99:95:b2:90:4d:bf:74:9c:f2:4f:75:2e:de:a5:77:a1:
2d:eb:60:5b:00:34:31:ab:0d:c2:99:4b:a3:c9:ce:cd:00:09:
da:6d:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:27 2025 by rpki-client