Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AW6nl_rskAs_SHSWEB9EemhYY4A.roa
File: AW6nl_rskAs_SHSWEB9EemhYY4A.roa (raw, json)
Hash identifier: y184TWasWcqHvjrxzKscbNpA/OxzFfK+ku0VHsYPD84=
Subject key identifier: 01:6E:A7:97:FA:EC:90:0B:3F:48:74:96:10:1F:44:7A:68:58:63:80
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FBE5A0E75CF60CF97B927F9F9D7C6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AW6nl_rskAs_SHSWEB9EemhYY4A.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 52114
IP address blocks: 93.170.253.0/24 maxlen: 24
93.171.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:be:5a:0e:75:cf:60:cf:97:b9:27:f9:f9:d7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=016ea797faec900b3f487496101f447a68586380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c1:72:12:f2:54:65:95:29:1c:6d:63:c6:4a:
3d:78:4c:02:30:44:be:a6:d3:71:d8:aa:1a:63:57:
d9:a9:20:b2:d0:d2:ea:5d:3c:a8:89:dc:f9:90:11:
78:33:28:2c:cc:a3:56:19:b3:04:20:a2:44:4b:b6:
69:90:ba:45:95:45:4a:11:dc:57:2f:9a:ff:9e:06:
b0:14:66:0e:10:65:0a:1e:6f:24:93:fc:27:b2:0c:
6a:c3:14:78:59:fd:19:0a:dc:09:4b:67:0b:9f:9e:
38:3f:9b:cd:10:be:a3:4a:af:93:0e:02:f2:dc:4a:
f4:48:8a:e6:4a:1e:1c:88:18:f4:64:9a:a7:c9:62:
81:7a:24:ae:00:a2:05:d6:c3:89:ad:0f:56:e7:1a:
f9:e8:d1:15:93:ce:33:1f:aa:1f:f0:ea:66:b1:92:
d1:03:08:ba:04:a2:e4:f5:c1:f6:4a:f9:8c:07:31:
df:6f:2d:de:6d:41:d0:5f:b5:cf:a9:36:fa:bc:fc:
94:e2:61:77:cb:87:d3:25:4e:d1:8e:8a:3f:18:77:
98:6f:da:7d:44:53:79:51:ca:ae:f7:08:9a:75:b8:
81:87:f9:88:da:52:cd:20:9a:2e:34:9f:72:cf:09:
d5:c3:fd:69:df:38:e7:70:76:98:19:43:48:0b:76:
3b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6E:A7:97:FA:EC:90:0B:3F:48:74:96:10:1F:44:7A:68:58:63:80
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AW6nl_rskAs_SHSWEB9EemhYY4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.253.0/24
93.171.176.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ee:43:46:fe:06:3e:2b:e3:40:33:bc:20:25:5b:87:58:b0:
56:3a:7f:20:c9:45:1f:e0:9a:a3:03:eb:94:21:26:68:36:8d:
ef:0c:f6:a7:81:62:83:97:74:2f:da:d6:54:dc:ed:ab:62:51:
82:c3:8c:64:ed:2d:ae:ca:30:b3:2c:a9:f2:87:90:f5:8a:10:
69:25:b1:41:93:8d:2c:75:5a:bb:e1:ac:8e:a1:d1:03:68:43:
10:35:7b:2f:b6:44:b0:d2:4b:f3:2b:c4:08:49:2e:ab:60:67:
89:d2:63:3f:d4:3f:43:aa:a1:37:06:b8:90:15:2c:d3:90:a4:
6b:cd:79:4b:29:ac:fd:01:f6:2c:4a:a1:8a:7b:51:7d:92:fa:
b3:05:ce:bb:8e:2e:62:25:95:70:0c:cb:fe:57:7c:8a:bb:9d:
38:81:1d:f8:70:60:43:32:9f:79:70:27:f8:72:25:72:d7:91:
7b:a2:6b:73:1f:f9:82:b5:1e:12:69:f8:bd:97:3c:09:75:eb:
b3:17:c0:bc:7f:00:ad:d8:93:4d:38:92:53:c8:88:0f:a4:e5:
e4:e6:a7:14:5b:96:24:8e:02:22:cf:50:88:d1:1c:8f:10:9b:
02:20:c8:24:93:6f:21:70:b1:1a:c2:86:b5:d9:e4:da:cb:8c:
e3:57:ed:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:18 2025 by rpki-client