Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Fucd7Dro3zlbAjWRz7wGy-QyHUk.roa
File: Fucd7Dro3zlbAjWRz7wGy-QyHUk.roa (raw, json)
Hash identifier: paDPil99217oycS6S8A/k1xMfBrg1VAq7wxkPoPrmnI=
Subject key identifier: 16:E7:1D:EC:3A:E8:DF:39:5B:02:35:91:CF:BC:06:CB:E4:32:1D:49
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28536BB6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Fucd7Dro3zlbAjWRz7wGy-QyHUk.roa
Signing time: Sat 01 Jan 2022 16:10:14 +0000
ROA not before: Sat 01 Jan 2022 16:10:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210188
IP address blocks: 93.170.100.0/24 maxlen: 24
31.148.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 676555702 (0x28536bb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16e71dec3ae8df395b023591cfbc06cbe4321d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:88:3a:f8:db:86:e7:97:56:82:b7:ea:f7:dd:
9b:0f:3d:6a:84:53:c3:c2:b9:6d:96:b6:37:2b:a1:
5b:a2:ae:69:0a:84:3c:fa:0c:c8:2a:98:ea:ea:bc:
bc:01:36:58:4d:da:cd:41:83:82:fa:c1:73:ef:81:
10:e9:33:54:98:47:f2:dd:b6:09:7c:bd:cf:62:5a:
66:25:9d:c9:a3:b3:e8:57:b7:df:dd:1c:f9:88:fa:
f4:cf:7e:e5:48:7f:d4:5c:89:ae:61:b0:1b:c2:b7:
3a:a1:78:12:ec:c8:b1:b4:61:76:23:bb:75:ed:c7:
2a:92:60:ec:d4:48:27:79:8a:00:e8:2b:38:44:76:
2e:c7:b3:1e:08:e0:91:d0:cd:b1:c1:f4:9a:a3:1f:
d8:fb:5d:84:1c:d7:d9:d4:5d:55:94:e5:ca:64:68:
d1:e0:0a:f4:fc:fa:a5:a3:0e:86:44:a5:9d:78:04:
84:7c:ff:d2:bd:cb:c5:0f:bb:02:15:a9:9a:61:9b:
27:20:f2:dd:fd:15:42:1c:86:8b:68:0a:dd:a1:74:
30:61:ce:1a:2f:5b:4d:72:74:79:db:51:4e:72:69:
f3:81:09:93:3a:5c:05:95:00:60:cd:bd:18:be:94:
c4:ab:b9:00:e3:82:f0:31:98:0a:ac:14:bb:3f:39:
0b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E7:1D:EC:3A:E8:DF:39:5B:02:35:91:CF:BC:06:CB:E4:32:1D:49
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Fucd7Dro3zlbAjWRz7wGy-QyHUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.246.0/24
93.170.100.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:3a:d5:f4:ce:ee:ad:32:b7:82:34:39:4d:67:9e:a0:e6:26:
ae:f6:20:ba:25:d6:18:8f:61:63:e7:f2:2d:73:3e:05:a1:eb:
df:b0:5e:b6:2d:17:4d:da:bf:b3:be:5e:26:d0:00:89:00:f6:
da:7b:7c:8c:e6:2b:4f:19:4d:f5:60:e9:e0:01:74:6d:83:cc:
6f:7f:3d:15:c6:09:17:ab:1e:bd:90:2d:94:2b:82:00:b7:42:
54:57:2b:16:40:24:77:16:bc:ae:45:f8:d2:9a:e2:4e:2e:e8:
1d:8b:de:3b:0e:ee:9e:08:17:48:24:6c:58:0b:dc:90:83:0d:
e0:21:14:14:09:8e:4c:be:d4:63:af:f4:c2:da:3f:4d:c8:ba:
b6:1b:17:52:c3:ec:f9:63:1f:a9:ce:87:4b:9b:54:f3:ea:2d:
43:a7:ac:2f:e0:65:f3:60:81:73:2f:e8:bb:0e:a9:6e:f9:42:
ad:3c:a3:d6:3b:b0:61:04:64:d0:7b:33:ff:1d:08:0b:2a:ca:
12:04:16:c0:a3:57:3e:b6:d5:13:7c:be:99:67:50:f0:ec:9c:
dd:50:e6:c3:4c:4c:38:31:a2:01:9c:e3:c6:df:fd:54:c9:21:
d1:4e:7a:14:48:b1:c6:31:48:14:c7:f8:9f:e6:2e:4a:2c:a8:
5a:ad:27:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:37 2025 by rpki-client