Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/G6ACKzal7jIXs5TcksM-SU7fgFA.roa
File: G6ACKzal7jIXs5TcksM-SU7fgFA.roa (raw, json)
Hash identifier: W77EKl272qsitu/3JxGar30CehfkzS3bqQNmN7N6bXc=
Subject key identifier: 1B:A0:02:2B:36:A5:EE:32:17:B3:94:DC:92:C3:3E:49:4E:DF:80:50
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF039C10EB6DB102C8A00296FF852
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/G6ACKzal7jIXs5TcksM-SU7fgFA.roa
Signing time: Thu 02 Jan 2025 05:49:37 +0000
ROA not before: Thu 02 Jan 2025 05:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204336
IP address blocks: 93.171.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f0:39:c1:0e:b6:db:10:2c:8a:00:29:6f:f8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ba0022b36a5ee3217b394dc92c33e494edf8050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:ca:05:b3:85:ae:7e:f5:c1:b7:f0:9a:59:
ba:7c:66:8f:6e:3d:9e:6b:ca:7f:f1:39:c9:38:5c:
50:fd:eb:bd:ed:be:a8:3b:2f:6b:89:f1:9d:e5:84:
d3:4b:f8:e1:4e:4c:9c:b3:7e:a6:90:4d:bf:0f:2a:
15:95:c0:c4:66:e2:ea:6f:e4:02:5c:98:d0:45:35:
db:b1:2e:91:bb:83:75:d5:1a:d9:72:4d:f4:8b:aa:
42:db:eb:d9:40:62:0c:80:c9:1e:c9:dc:f7:53:c4:
45:95:d8:8f:71:c9:c8:63:92:64:5a:70:1b:1d:d3:
47:84:c3:ab:2c:28:b7:23:7f:cf:9e:50:88:ec:df:
d3:7c:08:f6:b7:fa:c6:c0:fb:fc:58:f2:a0:60:b7:
4b:a9:83:74:d9:e8:6d:cf:a9:f9:95:34:6c:e0:d4:
2f:c1:3e:20:b5:8b:9a:12:5b:7d:15:4b:72:f0:27:
c0:3d:96:e1:7a:0f:90:f4:df:da:ae:5d:2d:5f:76:
88:4e:5f:fc:de:a2:b3:d7:87:d1:07:41:cd:09:1d:
7c:93:d7:e2:f2:1d:e5:c0:28:2c:c1:6c:15:c8:b6:
31:b0:08:b5:96:59:52:cb:37:52:f4:4d:a7:72:96:
8d:78:9e:55:e1:18:3f:66:b7:82:1c:31:82:b3:46:
da:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:A0:02:2B:36:A5:EE:32:17:B3:94:DC:92:C3:3E:49:4E:DF:80:50
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/G6ACKzal7jIXs5TcksM-SU7fgFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.226.0/24
Signature Algorithm: sha256WithRSAEncryption
33:30:13:a3:8d:64:5f:df:ad:df:df:58:68:c6:6f:f9:3a:6c:
48:ba:17:2f:bc:78:f0:c9:76:fd:eb:29:8a:23:d2:b5:09:73:
e0:4d:6f:12:18:b4:ea:b2:ab:4e:54:20:05:4d:9f:05:1a:28:
f7:79:2f:c9:2f:fe:fa:79:93:d5:cf:b9:ec:c3:74:6e:f8:64:
0c:b9:0d:3f:6e:83:b6:55:51:7d:2b:76:2b:73:bb:35:f4:44:
34:09:8f:c5:d7:ac:cf:59:19:bb:ac:d8:5c:aa:df:24:18:9b:
a1:bd:a5:bf:e7:b1:cb:58:84:26:cd:3c:34:34:40:e8:eb:d4:
62:ee:18:7e:f6:8b:94:70:cd:a7:7e:ea:26:38:62:63:ed:7d:
1d:50:dc:41:3e:ab:de:94:88:0f:60:21:5f:29:7e:19:1c:4b:
75:e8:ba:53:b8:7d:71:c2:1a:85:5b:04:94:8d:e5:2a:64:2a:
84:e2:92:59:50:36:00:57:8f:b2:56:78:9e:ed:42:45:60:1c:
44:33:2c:db:d2:c7:a2:92:a4:bd:0b:5e:dd:14:6c:d5:dc:cf:
07:b7:05:ab:db:ae:a1:24:94:91:e8:e4:3a:99:2a:2e:9e:f0:
40:db:02:94:2d:6e:8c:12:b4:9e:12:0e:4c:e9:c7:5a:e8:da:
3d:83:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:03 2025 by rpki-client