Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HVb8N3hjVo-PqfOf6hrSFue6-vA.roa
File: HVb8N3hjVo-PqfOf6hrSFue6-vA.roa (raw, json)
Hash identifier: vWr13chdxs6ZPTEXZ+s+J18+0CtuiKcNj1MWUasljW0=
Subject key identifier: 1D:56:FC:37:78:63:56:8F:8F:A9:F3:9F:EA:1A:D2:16:E7:BA:FA:F0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095BA32832CD75463BBA70519B0A536
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HVb8N3hjVo-PqfOf6hrSFue6-vA.roa
Signing time: Mon 02 Jan 2023 03:45:38 +0000
ROA not before: Mon 02 Jan 2023 03:45:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211570
IP address blocks: 93.171.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:ba:32:83:2c:d7:54:63:bb:a7:05:19:b0:a5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d56fc377863568f8fa9f39fea1ad216e7bafaf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:85:84:1a:06:14:34:87:32:bf:de:73:72:f6:
46:ca:27:36:fd:31:81:1f:1d:cb:62:60:c4:97:1b:
7f:1e:8b:e2:1d:48:e6:94:35:65:b1:df:21:9c:cb:
8b:38:f6:47:18:34:7d:0f:4a:3e:18:fc:19:fa:ef:
3a:8a:b6:df:fe:15:7e:2a:6f:d6:1c:be:d3:f5:6e:
1c:75:77:a9:25:d6:7b:68:19:24:43:e9:f0:8b:71:
67:7e:1f:ec:9d:79:46:52:3c:d8:4c:35:cb:5d:ad:
bd:53:15:cc:a7:e6:5b:9b:ed:90:27:32:b2:bf:89:
f0:01:9c:27:0c:06:14:12:b5:b7:27:34:9c:ab:48:
b2:6d:e9:b2:ac:4c:07:43:a0:b3:6f:25:a5:7e:6e:
73:01:b7:b9:33:b5:0d:f4:88:25:8f:a9:44:b9:73:
07:68:8b:31:ea:79:04:e6:01:7e:18:fa:dd:4f:7d:
a0:9b:c3:ac:17:6e:ca:b9:73:f4:a7:3f:cf:75:27:
cf:8b:a8:21:ed:80:17:c5:17:3a:05:81:6d:4b:87:
30:ba:2f:0d:93:e0:dc:88:49:ca:35:dc:4b:12:cb:
fc:2d:3a:43:bd:b2:a6:50:a1:5c:13:c4:25:60:61:
62:de:c1:b4:0e:ab:cb:71:23:21:b7:38:40:a5:3e:
23:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:56:FC:37:78:63:56:8F:8F:A9:F3:9F:EA:1A:D2:16:E7:BA:FA:F0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/HVb8N3hjVo-PqfOf6hrSFue6-vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.224.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:7e:62:73:c1:4d:d5:a5:6b:10:14:9d:4a:68:ee:c1:ca:1a:
61:4b:ad:7c:cb:c7:22:6a:6c:b1:10:b4:f7:f0:72:36:b4:37:
2b:d2:8f:89:04:72:53:5e:57:6e:7f:38:a7:dc:26:9b:5c:c4:
43:46:60:dd:88:f4:d8:fd:83:56:fd:50:da:b2:7b:9f:a4:34:
af:28:ce:5d:93:3f:8b:59:8f:0a:47:3b:90:61:06:1d:e5:53:
48:66:d3:87:73:6e:d6:da:2f:5a:2d:00:40:e7:55:aa:73:74:
7d:83:4a:72:c2:1a:d6:14:a7:f3:05:e7:a2:f3:ff:5c:07:86:
b4:6a:01:1e:08:a9:de:e6:df:0d:59:cc:43:79:a1:68:7a:7a:
e9:e3:80:b7:d3:04:8f:c0:80:a9:9d:b5:11:73:e1:49:b1:2c:
ad:d3:64:ce:4b:ac:55:73:d6:3d:b0:df:b2:ba:5d:0a:c1:2d:
3f:a1:b0:62:ed:7a:b8:bd:91:29:08:6d:5b:7c:08:66:01:4a:
18:38:45:bf:11:12:50:8c:ad:47:19:18:aa:e7:61:54:d8:c3:
67:0d:5d:f2:74:2c:dc:ff:8e:0c:6d:57:ee:e3:79:51:62:d5:
ea:f2:c9:6c:b9:80:82:68:20:48:4f:6c:4b:b3:31:0d:71:d1:
c8:01:17:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:08 2025 by rpki-client