Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DdSqaIPu1ZDIa7i4Afj-cAcffks.roa
File: DdSqaIPu1ZDIa7i4Afj-cAcffks.roa (raw, json)
Hash identifier: ySTtPHq2CD1QTSxJE9pBOGrKWXjY28wrCm2xygDQxTk=
Subject key identifier: 0D:D4:AA:68:83:EE:D5:90:C8:6B:B8:B8:01:F8:FE:70:07:1F:7E:4B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018A27BD1FC1ACC10B6917652D456FE7DE85
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DdSqaIPu1ZDIa7i4Afj-cAcffks.roa
Signing time: Thu 24 Aug 2023 13:30:20 +0000
ROA not before: Thu 24 Aug 2023 13:30:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61390
IP address blocks: 93.171.40.0/22 maxlen: 24
92.38.33.0/24 maxlen: 24
93.170.108.0/23 maxlen: 24
146.158.60.0/22 maxlen: 24
93.171.182.0/23 maxlen: 24
146.120.120.0/22 maxlen: 24
146.120.236.0/22 maxlen: 24
95.46.116.0/22 maxlen: 24
93.170.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:bd:1f:c1:ac:c1:0b:69:17:65:2d:45:6f:e7:de:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 24 13:30:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0dd4aa6883eed590c86bb8b801f8fe70071f7e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:ac:e2:15:26:df:83:4a:30:c8:43:bf:d4:
c7:a7:38:74:9e:de:d7:f7:7e:dc:03:2d:d0:98:bd:
e1:e1:d8:51:94:ae:dc:f7:27:f1:ea:62:d4:42:bb:
f1:69:79:9d:71:11:ba:40:45:8b:f3:f1:51:5e:cd:
c3:4a:43:46:f1:5f:c6:f1:68:74:6c:39:47:34:e7:
ee:c6:4d:3e:09:f2:c3:91:70:94:1e:76:12:ef:22:
f3:ae:83:8a:6f:13:09:2c:0e:aa:7b:94:37:2c:d3:
1b:34:ae:3c:f8:4b:7b:d5:83:51:26:7c:37:03:32:
55:53:45:32:67:fc:36:e7:e1:5b:a0:e8:90:b3:e4:
07:0e:0c:17:4c:bc:aa:3a:36:33:98:73:06:a0:fc:
a2:30:6f:a5:80:96:3d:a1:a4:4e:13:e9:0e:a6:24:
fc:ed:f5:3e:c8:b1:b1:4f:9c:96:5c:a0:ed:69:9f:
7a:99:c7:86:54:a8:34:ac:9c:71:9a:f2:24:82:6e:
9b:3b:f8:55:07:cb:fe:37:ab:12:d7:0e:2c:09:7a:
cb:af:b9:1d:8c:15:74:05:03:f0:d7:ba:92:60:c4:
a5:41:84:84:09:48:51:6b:a8:1f:9c:25:c6:90:8a:
3d:fb:af:f2:b4:68:cb:6b:7b:f0:2b:b8:94:17:97:
6d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D4:AA:68:83:EE:D5:90:C8:6B:B8:B8:01:F8:FE:70:07:1F:7E:4B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DdSqaIPu1ZDIa7i4Afj-cAcffks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.33.0/24
93.170.108.0/23
93.170.180.0/22
93.171.40.0/22
93.171.182.0/23
95.46.116.0/22
146.120.120.0/22
146.120.236.0/22
146.158.60.0/22
Signature Algorithm: sha256WithRSAEncryption
45:37:6d:ed:6e:ce:9b:b0:0c:66:3e:f6:11:2d:ac:68:53:0a:
de:0a:c3:0d:d2:10:b0:62:80:fa:0f:67:d6:e1:d1:47:9f:6b:
b8:66:4f:14:b5:63:ec:67:f2:08:ee:4d:93:ec:71:1f:76:7c:
b2:6b:ac:37:24:4f:60:61:bd:0d:d3:d9:5d:f4:ed:39:88:ca:
56:d9:81:8f:1e:98:54:fb:0e:01:fe:0a:21:7e:1d:fa:c7:13:
dc:03:8a:72:73:3e:6f:1a:39:74:ff:ce:79:cf:44:37:03:b8:
08:8f:9b:f8:1f:6e:8b:db:b5:8d:10:a8:5e:1e:dd:b4:b1:80:
5d:38:de:d2:34:23:bd:74:ca:82:9d:64:74:94:53:73:f1:96:
fe:33:08:14:ff:3c:05:77:35:ba:ae:6b:4e:02:c0:c7:d4:9b:
56:74:07:a5:c3:74:92:11:ba:30:7e:cc:c8:73:d0:97:e5:c0:
23:94:86:7d:5c:fc:60:c2:b0:16:52:d1:66:e3:4f:e9:94:a0:
13:7f:49:79:12:8f:94:63:4f:d7:c3:cf:b5:91:c0:8d:76:51:
40:2c:42:db:61:36:9a:d1:1c:da:ab:45:7c:8e:7b:18:c6:c2:
44:a4:96:ed:c3:83:1d:70:80:aa:b6:e1:b6:20:66:ea:e5:a2:
27:ba:bf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:55:58 2025 by rpki-client