Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AWm3JsU6L49CyxLyhOKdemJcc18.roa
File: AWm3JsU6L49CyxLyhOKdemJcc18.roa (raw, json)
Hash identifier: +YRmEEgbUFUoZU0GMLD6//z3STQW503uxm9XedpLSMQ=
Subject key identifier: 01:69:B7:26:C5:3A:2F:8F:42:CB:12:F2:84:E2:9D:7A:62:5C:73:5F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FCD969C613FC62EAEC090CE9EE321
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AWm3JsU6L49CyxLyhOKdemJcc18.roa
Signing time: Thu 02 Jan 2025 05:49:28 +0000
ROA not before: Thu 02 Jan 2025 05:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59825
IP address blocks: 93.171.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:cd:96:9c:61:3f:c6:2e:ae:c0:90:ce:9e:e3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0169b726c53a2f8f42cb12f284e29d7a625c735f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:8c:c3:85:9b:54:05:74:37:fe:cc:9c:cd:
d3:52:1f:95:bb:7b:dc:cb:97:ba:59:79:77:05:65:
19:94:ad:02:25:fb:cc:47:a9:94:df:7a:4d:04:dd:
e9:c2:87:f3:55:04:18:99:7f:66:5a:11:ae:0e:94:
2b:c1:9b:27:56:f7:54:cb:68:c2:56:ce:c0:62:28:
c0:45:4c:8c:3b:82:f7:b6:1e:bb:61:c7:7f:ea:c6:
9f:0b:e9:90:43:db:84:d2:e3:17:b5:45:ab:c7:1a:
d9:6e:fd:73:f3:4c:73:97:c7:c0:96:bb:56:34:6f:
37:43:fc:96:49:9e:42:dc:a6:bc:fc:7b:7e:35:b6:
bf:31:66:7b:f2:69:bf:7a:b2:b9:58:4d:c6:f8:0e:
f7:5b:71:bd:32:46:43:e9:59:02:7a:05:58:53:49:
77:45:0c:79:47:9b:72:1e:5f:8e:5d:b2:b9:4f:79:
83:ae:7f:3b:48:17:bd:d3:21:9b:75:00:46:ee:f2:
a8:2c:92:76:db:ef:2d:b4:53:6d:a3:ff:52:fd:15:
63:62:f2:c0:71:8c:ff:a5:1f:f1:50:d2:c6:62:e9:
af:a6:b4:b6:d0:e9:48:81:5e:9d:0e:d1:d5:85:b2:
e5:94:1b:aa:9d:89:86:83:b7:79:ef:0d:a3:39:b5:
c3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:69:B7:26:C5:3A:2F:8F:42:CB:12:F2:84:E2:9D:7A:62:5C:73:5F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/AWm3JsU6L49CyxLyhOKdemJcc18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:1d:97:2f:f4:d5:a3:8e:50:59:0b:5d:19:eb:d9:3f:0e:e1:
33:c3:b8:fa:31:b5:ee:c1:bf:77:86:9a:bd:07:52:77:3c:3f:
ad:f0:aa:f9:50:cc:0d:03:82:42:a6:39:14:77:a9:33:a7:dd:
11:bd:e6:70:bc:98:a1:00:4d:4e:f6:d7:b7:a5:09:37:48:71:
99:31:69:15:ee:38:2e:a6:75:ed:9c:4a:24:a6:8d:e4:34:72:
13:63:c8:08:ac:c9:05:65:06:b4:83:46:55:50:42:13:19:f5:
3e:78:d2:c3:41:34:81:dc:0a:6f:37:5b:ac:37:64:b6:a5:a0:
17:7a:e3:5a:11:75:fe:91:9e:33:b9:c4:61:61:e1:58:88:3e:
6c:23:b9:cf:e5:35:16:ba:76:be:6c:44:bd:cb:86:05:e7:81:
54:37:94:1a:1f:7a:bd:93:4c:d1:bd:3f:13:01:12:f7:31:c6:
ce:cd:64:0a:5d:cc:b3:43:8a:33:f0:f5:03:ba:89:70:3c:32:
3c:c7:70:82:b3:c3:bc:e4:35:bf:33:9b:5a:01:a6:8e:0f:a8:
79:4f:39:4f:b2:be:2b:3f:79:e9:f8:18:3d:0c:c6:a4:37:99:
43:38:ba:bf:46:4e:64:4a:52:15:f4:c2:6b:ee:b8:46:c9:75:
fb:0f:ad:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:39 2025 by rpki-client