Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CGzXZ8J3XVmWdt3Dh2DjfNJpfXA.roa
File: CGzXZ8J3XVmWdt3Dh2DjfNJpfXA.roa (raw, json)
Hash identifier: VIcz1Cf3l5lvvK7tf5aF/8ef5oJayjHGj1QkjmBlA4g=
Subject key identifier: 08:6C:D7:67:C2:77:5D:59:96:76:DD:C3:87:60:E3:7C:D2:69:7D:70
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956543F77D4F2210286A400293590F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CGzXZ8J3XVmWdt3Dh2DjfNJpfXA.roa
Signing time: Mon 02 Jan 2023 03:45:16 +0000
ROA not before: Mon 02 Jan 2023 03:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59718
IP address blocks: 93.171.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:65:43:f7:7d:4f:22:10:28:6a:40:02:93:59:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=086cd767c2775d599676ddc38760e37cd2697d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:69:08:f3:e8:23:2d:90:1e:2b:d8:31:67:
02:fe:87:59:54:9f:3c:1e:b2:45:26:d8:bc:cd:89:
48:18:00:c5:92:1f:8a:c4:89:d1:ee:c2:52:d2:a3:
53:7d:85:4b:11:5e:eb:e1:81:79:bc:08:5f:0c:27:
a9:fa:f6:b2:9c:71:3e:e4:5f:76:3e:aa:b4:ac:25:
38:08:e7:2e:70:b3:bf:f6:a2:6e:fc:58:f4:10:fe:
ac:58:0b:c0:34:18:d2:87:96:02:ad:ac:4e:aa:aa:
74:d7:f5:ec:10:93:f9:88:40:e1:c0:22:37:0a:76:
ca:ce:23:d7:79:c9:65:be:82:71:d3:8d:24:26:f4:
e0:83:26:37:9c:73:1b:51:86:b1:f2:91:b2:fc:dc:
b9:fb:6e:c3:91:6a:25:bf:02:8e:b1:a9:6c:d2:a1:
4d:b8:1b:84:b4:08:d7:0d:62:5e:c6:84:fc:75:8a:
7e:9c:eb:ea:fc:c0:c0:c2:ad:43:9d:92:c4:fc:e7:
72:1e:9c:3e:82:ff:82:02:d8:63:f4:80:7e:51:cc:
c7:b1:a9:e3:84:ad:3c:45:4e:ca:20:23:0d:92:f0:
b3:fd:a4:70:cd:fc:34:80:1e:6d:35:4f:88:45:6e:
b2:ba:73:ef:1c:d9:d4:72:60:64:98:f7:c3:9c:85:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6C:D7:67:C2:77:5D:59:96:76:DD:C3:87:60:E3:7C:D2:69:7D:70
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CGzXZ8J3XVmWdt3Dh2DjfNJpfXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.139.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c9:21:76:9e:94:7d:ba:24:fd:a7:04:59:bc:92:83:80:94:
88:57:24:5a:15:88:d2:42:b4:b1:35:2d:39:a5:f8:2b:d5:34:
24:aa:50:73:cc:49:c0:3f:e7:7d:c5:bd:74:c8:75:a9:70:20:
43:f0:c5:e6:72:eb:03:45:9d:d9:50:b1:49:ef:7c:a1:d1:93:
f7:a4:b6:1f:3f:be:62:4d:67:a7:04:43:3b:42:35:82:ba:e2:
d6:26:ee:65:db:07:0d:d1:96:90:5c:30:9d:a5:29:46:74:c8:
f4:ed:d4:4d:55:51:26:fc:fc:b9:30:13:f2:e1:09:1b:80:ef:
06:e3:00:8e:bc:29:5a:f9:3d:9d:03:3b:dd:1f:88:17:ec:d0:
de:cc:e6:10:9b:42:a3:1c:47:ff:11:0a:6f:90:8a:71:87:cb:
1a:27:8f:33:68:9a:34:75:1d:0a:20:56:b0:3b:4e:bd:81:13:
8c:66:99:43:2d:89:20:db:ed:95:99:00:be:54:b6:1e:38:ed:
17:cd:ce:bb:68:21:db:93:a0:2d:c3:31:ca:95:fa:42:17:8a:
75:c9:e8:89:24:5c:ec:57:04:df:fe:92:61:1f:ef:4a:b8:69:
b9:77:73:d3:a6:f2:df:98:cb:24:03:4d:99:e5:bc:95:f2:ea:
d0:f3:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:01 2025 by rpki-client