Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FinHEc46Xe71R1_lOkeyqh1yC2k.roa
File: FinHEc46Xe71R1_lOkeyqh1yC2k.roa (raw, json)
Hash identifier: FhZXmn8YmdcUo2Zq0C7LnYFXHlTVuepa6p3HxgQayuk=
Subject key identifier: 16:29:C7:11:CE:3A:5D:EE:F5:47:5F:E5:3A:47:B2:AA:1D:72:0B:69
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194259015BACBA1E26D6A39C75B351131C0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FinHEc46Xe71R1_lOkeyqh1yC2k.roa
Signing time: Thu 02 Jan 2025 05:49:47 +0000
ROA not before: Thu 02 Jan 2025 05:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215222
IP address blocks: 93.170.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:15:ba:cb:a1:e2:6d:6a:39:c7:5b:35:11:31:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1629c711ce3a5deef5475fe53a47b2aa1d720b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:ca:97:74:97:0d:3d:1b:02:e2:81:58:57:
7e:8e:13:7e:90:50:61:80:df:a5:f8:de:8b:b1:d8:
af:a6:de:00:3d:c9:05:f4:b1:0d:d0:c7:97:29:16:
13:50:f1:54:99:fd:0c:a2:85:1e:0d:42:0e:96:97:
77:22:3c:c7:78:d9:2d:f0:1b:8e:e8:ab:74:8d:79:
ed:05:1e:15:77:20:21:b7:e6:58:68:0a:b1:41:21:
0e:75:33:ee:7c:87:6d:d3:86:14:b2:bf:9f:b5:13:
3f:c4:bf:df:4d:d6:14:82:ea:a3:f0:9b:6f:cb:bf:
9f:45:90:c0:27:e1:74:87:89:9d:5b:15:36:f0:2b:
85:17:30:5f:db:5d:66:f1:db:20:24:4c:49:35:b5:
3e:09:4c:37:6d:6a:b6:47:90:b0:f8:56:0b:04:60:
37:65:e2:7b:c5:34:0f:34:8a:15:c8:eb:b4:1f:a4:
1d:d7:27:d1:60:79:70:91:d3:11:4c:15:12:23:43:
6a:69:ba:1a:ec:a4:15:12:13:d9:c3:19:8c:4b:9a:
b2:ee:33:0c:c7:e5:31:2a:66:e6:bf:b3:41:be:03:
88:14:98:64:11:da:bc:6c:ef:76:04:8e:ce:c0:4c:
f6:5b:58:e4:2d:aa:5d:2d:71:58:c4:3e:4c:4d:f3:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:29:C7:11:CE:3A:5D:EE:F5:47:5F:E5:3A:47:B2:AA:1D:72:0B:69
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FinHEc46Xe71R1_lOkeyqh1yC2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.11.0/24
Signature Algorithm: sha256WithRSAEncryption
83:41:e0:97:d4:66:73:02:63:ba:d3:a7:0d:e4:ce:a9:b6:f8:
08:98:51:fd:70:89:85:48:4c:92:28:17:84:d9:15:17:99:78:
07:f2:f2:ac:15:24:d6:d4:c0:47:7e:12:0e:41:50:54:1b:6e:
05:38:e0:a4:24:a5:05:e5:92:29:99:66:a1:af:5d:88:3f:cc:
a6:bd:ae:b9:bd:7e:93:3c:02:76:dd:3e:64:f2:aa:a5:f0:94:
b0:8e:28:80:74:4e:58:56:ee:4f:e3:a0:b4:eb:b6:44:e0:4e:
8e:7e:66:80:5e:17:81:c5:2f:64:01:a8:a8:cc:38:21:f3:6c:
e5:86:5b:90:2e:7d:8a:9a:1f:64:78:99:36:6c:30:dc:69:a0:
f9:5f:ad:75:c0:37:99:68:69:93:5b:76:cb:cc:a2:b4:77:09:
67:ef:04:ea:79:a9:32:8b:2c:9f:6c:49:f8:d9:69:d8:2d:e4:
a1:7c:37:30:8c:1f:83:20:13:96:f1:fc:df:dc:14:dd:e2:df:
b6:59:83:4f:06:c0:64:b4:0b:8f:39:4d:84:3f:88:60:74:8a:
45:ea:d1:ce:9a:c7:45:fa:82:f7:8f:01:6f:3e:70:2f:d8:15:
a4:c3:66:54:7a:e4:e9:74:76:18:97:2c:a7:d4:28:e9:97:16:
fb:84:29:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:49 2025 by rpki-client