Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CHXiGwwi5GSTatYoulLZVVNFeeI.roa
File: CHXiGwwi5GSTatYoulLZVVNFeeI.roa (raw, json)
Hash identifier: Xcsrq6/yG8T8vLV7i8mF8r5Ql83GQ7zGP79qpBMWZes=
Subject key identifier: 08:75:E2:1B:0C:22:E4:64:93:6A:D6:28:BA:52:D9:55:53:45:79:E2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01946A5C62D0D54219E156083F0F6735E540
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CHXiGwwi5GSTatYoulLZVVNFeeI.roa
Signing time: Wed 15 Jan 2025 14:27:06 +0000
ROA not before: Wed 15 Jan 2025 14:27:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213029
IP address blocks: 93.170.6.0/24 maxlen: 24
95.46.210.0/23 maxlen: 24
95.47.124.0/23 maxlen: 24
95.47.127.0/24 maxlen: 24
95.47.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:5c:62:d0:d5:42:19:e1:56:08:3f:0f:67:35:e5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 15 14:27:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0875e21b0c22e464936ad628ba52d955534579e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:44:5e:c9:f2:d9:bf:04:20:7f:7e:b0:7f:
60:05:11:97:5b:06:ba:6e:72:59:17:89:65:b1:79:
e0:2d:cf:42:25:71:8d:15:83:94:fe:aa:61:87:a6:
b1:bd:90:9f:ec:03:75:00:ee:a3:1a:69:1a:be:4f:
eb:e9:d7:72:ce:61:14:5d:d3:b3:1d:3a:fb:8e:31:
1b:b6:6b:81:fe:8c:36:ae:b0:00:63:4b:39:93:52:
52:d1:24:84:a8:30:cc:40:de:f3:96:58:7a:6d:7a:
25:fc:10:04:f0:54:f7:ff:d5:c9:61:6a:8b:bf:6f:
b0:44:e2:40:4a:f0:59:fe:91:26:08:93:d8:67:57:
10:8c:9f:6a:5a:99:1a:96:49:68:6e:24:77:78:43:
f5:18:5f:af:6e:8c:17:ce:79:eb:8f:7c:4c:f3:17:
9f:74:0c:93:a7:32:4e:b5:b1:e3:f2:26:cc:74:b5:
56:5f:14:e6:47:c6:90:ec:cd:db:c4:87:32:3a:70:
6d:f8:91:27:2a:c1:48:95:d3:ab:59:8b:5c:5c:45:
80:a2:e0:7c:b9:08:6b:ef:3f:75:eb:90:bc:da:42:
b0:47:f6:ca:6b:29:96:3d:7d:e2:f8:02:fa:99:95:
95:6d:0e:87:80:d8:a8:8b:8f:25:0b:0b:7f:0a:2d:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:75:E2:1B:0C:22:E4:64:93:6A:D6:28:BA:52:D9:55:53:45:79:E2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/CHXiGwwi5GSTatYoulLZVVNFeeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.6.0/24
95.46.210.0/23
95.47.124.0/23
95.47.127.0/24
95.47.238.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:81:81:4d:1d:b0:18:36:fc:dd:77:84:82:2d:94:db:00:2a:
34:9b:7e:24:b1:9d:f0:95:a4:d8:d4:4d:14:c3:96:23:b1:13:
c4:9f:39:77:de:fe:27:77:04:e1:b7:92:a8:bb:ab:02:14:21:
71:7d:1b:52:d8:3a:42:fd:bf:a2:b4:af:ad:a6:29:72:04:2d:
0b:6f:9d:ef:c8:15:ee:5c:44:7b:27:94:45:a1:f9:f3:cc:8c:
3b:9b:bd:5d:6b:e5:a2:9a:64:d8:9d:94:9a:d5:be:15:e7:0b:
72:48:8a:f9:0b:90:2d:c7:11:48:5d:b9:36:25:42:e3:97:79:
fd:cc:30:b1:81:21:21:52:fa:72:c3:bf:b9:fc:12:9a:96:f5:
ab:f7:fd:58:7a:61:89:6a:60:b3:62:2c:a3:52:49:d3:1a:71:
d1:b6:67:ad:c0:1c:78:af:cd:f9:6d:93:04:b8:3a:c9:4c:b6:
3c:61:31:78:ac:10:73:e7:47:16:50:1e:27:ce:8a:ef:0b:88:
3e:b1:aa:85:c1:0e:b3:40:c6:70:53:c4:9c:5b:76:ec:04:c4:
5b:9d:f2:7c:60:92:d1:d9:98:8c:01:56:1b:d4:84:9d:20:ac:
a2:e3:09:db:52:2a:d0:c8:39:a9:f0:d1:8d:60:e1:e0:52:70:
b4:8f:f3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:13 2025 by rpki-client