Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FToAAXY4QvSne6F-mDOS4LE6bG4.roa
File: FToAAXY4QvSne6F-mDOS4LE6bG4.roa (raw, json)
Hash identifier: OkcwOk//89SjklFfgXOrjXb+/e2pJSNgWSXr4j+5SSI=
Subject key identifier: 15:3A:00:01:76:38:42:F4:A7:7B:A1:7E:98:33:92:E0:B1:3A:6C:6E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0189D5954EAB86F25724EAE2E0CCEEE60BA9
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FToAAXY4QvSne6F-mDOS4LE6bG4.roa
Signing time: Tue 08 Aug 2023 14:37:59 +0000
ROA not before: Tue 08 Aug 2023 14:37:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49184
IP address blocks: 93.170.3.0/24 maxlen: 24
93.171.96.0/24 maxlen: 24
93.171.96.0/23 maxlen: 24
93.171.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:95:4e:ab:86:f2:57:24:ea:e2:e0:cc:ee:e6:0b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 8 14:37:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=153a0001763842f4a77ba17e983392e0b13a6c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:62:a8:90:33:1a:b0:2f:84:1a:de:fa:47:
03:4b:58:6f:fa:74:b7:9c:f1:9a:41:51:6c:78:8e:
dd:05:ff:1b:69:a1:b0:a3:13:5e:da:e0:04:9f:f9:
76:a5:19:93:72:70:c0:03:31:c0:52:a8:b3:c0:3e:
25:df:7b:19:86:d3:fc:a4:8f:b4:50:96:0b:90:75:
8b:e7:62:be:cc:69:95:42:c8:b9:7d:01:6a:b5:f7:
b3:ec:b5:8e:6f:c4:9c:e0:cb:bf:39:dd:a4:af:7f:
f6:33:ad:fd:f4:ac:00:85:f7:09:2e:50:9c:4e:84:
0b:ad:f1:7e:9f:fc:1f:04:e5:3e:30:b4:e8:54:2b:
14:a2:f0:c2:11:17:ba:f4:96:74:1b:c3:46:3f:b5:
f8:06:9a:e5:82:69:61:7f:d9:1d:48:45:fd:f4:c4:
e2:73:68:29:b7:94:17:df:fe:c3:0a:19:60:92:11:
7b:96:97:39:7e:81:d1:a3:d7:f2:8d:df:8d:52:5e:
64:4c:61:3f:00:76:a2:c2:dd:9f:e1:25:9d:49:5c:
61:73:7a:d1:87:36:20:98:2d:05:3d:8c:db:3a:1e:
e3:8d:99:49:a5:0a:bb:f1:2f:e2:99:e2:04:b6:21:
b3:08:dc:40:19:f5:b6:89:95:34:61:b9:b4:47:0d:
d7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:00:01:76:38:42:F4:A7:7B:A1:7E:98:33:92:E0:B1:3A:6C:6E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FToAAXY4QvSne6F-mDOS4LE6bG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.3.0/24
93.171.96.0/23
Signature Algorithm: sha256WithRSAEncryption
27:bd:d0:39:8d:3e:19:3c:38:da:a8:12:9c:13:e2:c6:5a:e2:
a5:ba:7e:5e:94:98:f9:97:e9:31:42:1d:99:c3:e0:b5:74:ab:
c6:2d:3f:70:0b:92:88:e0:0e:c6:ef:8c:43:70:cc:72:3b:1f:
b2:a6:39:c9:55:7e:29:6a:89:25:31:8b:c9:7b:81:a3:78:20:
b3:46:07:e8:56:b4:e5:21:68:c2:a3:a6:99:bc:f9:e8:28:9b:
c7:65:dc:9d:fd:e3:71:e6:bd:29:ad:16:eb:4a:a9:fb:80:a5:
07:95:34:ff:9e:30:a4:92:f3:f8:80:08:41:e7:f4:28:3f:ed:
68:07:ae:bb:f0:7f:d6:57:60:05:b1:ed:e2:fa:3e:13:13:37:
c9:2f:7c:5f:de:bb:f5:a7:fb:b0:30:32:14:d3:aa:1a:14:76:
73:57:6b:9f:1d:71:47:3c:1f:27:78:02:75:38:3c:a6:ff:31:
8d:fb:10:9c:ae:ab:72:db:cf:05:bb:a6:f3:c7:d9:17:de:d0:
50:9b:5e:b8:5d:14:c8:dc:38:ea:46:cb:37:f4:ed:c2:e0:58:
dc:2e:16:bc:54:f4:a0:9a:43:51:13:a3:27:82:6c:4b:a1:c0:
0a:59:fb:63:ec:03:36:9e:c8:cf:75:ba:2a:c4:12:74:7c:ae:
4c:a6:fc:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYnVlU6rhvJXJOri4Mzu5gupMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwODA4MTQzNzU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTNhMDAwMTc2Mzg0MmY0YTc3YmExN2U5ODMzOTJlMGIxM2E2YzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPNiqJAzGrAvhBre+kcDS1hv+nS3
nPGaQVFseI7dBf8baaGwoxNe2uAEn/l2pRmTcnDAAzHAUqizwD4l33sZhtP8pI+0
UJYLkHWL52K+zGmVQsi5fQFqtfez7LWOb8Sc4Mu/Od2kr3/2M6399KwAhfcJLlCc
ToQLrfF+n/wfBOU+MLToVCsUovDCERe69JZ0G8NGP7X4Bprlgmlhf9kdSEX99MTi
c2gpt5QX3/7DChlgkhF7lpc5foHRo9fyjd+NUl5kTGE/AHaiwt2f4SWdSVxhc3rR
hzYgmC0FPYzbOh7jjZlJpQq78S/imeIEtiGzCNxAGfW2iZU0Ybm0Rw3XtQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBU6AAF2OEL0p3uhfpgzkuCxOmxuMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvRlRvQUFYWTRRdlNuZTZGLW1ET1M0TEU2Ykc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXaoDAwQB
XatgMA0GCSqGSIb3DQEBCwUAA4IBAQAnvdA5jT4ZPDjaqBKcE+LGWuKlun5elJj5
l+kxQh2Zw+C1dKvGLT9wC5KI4A7G74xDcMxyOx+ypjnJVX4paoklMYvJe4GjeCCz
RgfoVrTlIWjCo6aZvPnoKJvHZdyd/eNx5r0prRbrSqn7gKUHlTT/njCkkvP4gAhB
5/QoP+1oB6678H/WV2AFse3i+j4TEzfJL3xf3rv1p/uwMDIU06oaFHZzV2ufHXFH
PB8neAJ1ODym/zGN+xCcrqty288Fu6bzx9kX3tBQm164XRTI3DjqRss39O3C4Fjc
Lha8VPSgmkNRE6MngmxLocAKWftj7AM2nsjPdboqxBJ0fK5Mpvzb
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:26 2025 by rpki-client