Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JLBZf7p_A5C3RLghWCWkdYwkU_M.roa
File: JLBZf7p_A5C3RLghWCWkdYwkU_M.roa (raw, json)
Hash identifier: 847A1e4r/Rrv4BdmEa+YSDwRmcq7jN+7SOm8Tw7iSX4=
Subject key identifier: 24:B0:59:7F:BA:7F:03:90:B7:44:B8:21:58:25:A4:75:8C:24:53:F3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570954EA983EF91B5AEFD92EF50E54724
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JLBZf7p_A5C3RLghWCWkdYwkU_M.roa
Signing time: Mon 02 Jan 2023 03:45:11 +0000
ROA not before: Mon 02 Jan 2023 03:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50916
IP address blocks: 93.170.125.0/24 maxlen: 24
93.170.124.0/22 maxlen: 22
93.170.124.0/24 maxlen: 24
93.170.127.0/24 maxlen: 24
93.170.126.0/24 maxlen: 24
2a02:128:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:4e:a9:83:ef:91:b5:ae:fd:92:ef:50:e5:47:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24b0597fba7f0390b744b8215825a4758c2453f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e3:c8:c2:e1:2a:c3:20:54:11:a8:48:8a:66:
5b:48:bd:40:8f:07:c2:f9:19:f2:ac:3f:9d:e6:68:
c7:81:fa:de:52:83:42:8c:1a:8c:25:66:9a:41:01:
52:43:0b:d4:86:69:c7:7b:5d:84:cf:d5:44:e7:c0:
d7:2e:30:99:f1:8e:46:9d:46:4b:73:ff:22:09:93:
70:3d:c4:d2:13:40:5f:28:c4:35:d5:62:6a:6e:c1:
33:e3:c3:4d:c6:fc:2f:c1:1b:60:8b:f5:a1:64:b3:
1b:10:46:6d:31:9c:e8:75:44:28:e6:e1:80:50:b7:
94:e3:72:d2:df:5c:ec:18:3a:2c:50:18:81:d0:f1:
51:b4:45:ad:28:e8:6f:24:a9:22:fd:b4:e0:51:0f:
02:02:9a:fe:2f:c1:6e:12:32:f0:f1:9a:14:bb:1c:
c3:18:82:e5:92:d3:ec:ec:f3:a1:71:15:00:ba:fa:
0d:fe:f1:9c:28:a8:2c:e1:15:29:26:ab:00:fd:c5:
d4:eb:1d:5d:e0:e5:35:09:fa:93:53:97:4f:11:fe:
6a:e4:29:27:e8:8b:c3:8e:44:0e:5c:b9:fc:56:3c:
63:2d:a3:7f:eb:f3:fd:d8:94:db:13:e5:82:b9:d1:
97:c4:34:be:d3:f9:22:6d:6a:ed:00:29:3a:a3:e5:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:59:7F:BA:7F:03:90:B7:44:B8:21:58:25:A4:75:8C:24:53:F3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JLBZf7p_A5C3RLghWCWkdYwkU_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.124.0/22
IPv6:
2a02:128:8::/48
Signature Algorithm: sha256WithRSAEncryption
7b:db:44:bf:34:13:0f:af:20:49:ad:b0:6c:df:48:e2:35:a4:
87:c8:12:c0:3a:29:bc:4a:f8:d7:be:5f:89:83:d1:55:0d:86:
79:4b:24:63:87:1a:33:cb:48:5b:04:13:96:d6:40:82:40:0f:
2f:c9:7c:cf:80:b7:83:16:e3:36:b4:d6:66:1a:a9:b4:2c:54:
67:b2:71:3d:3b:84:9c:8e:62:95:d0:cf:61:e5:5f:a5:e3:40:
29:b4:de:c5:6b:49:7e:08:0f:47:0d:8e:d6:28:ef:25:e3:a6:
50:df:d5:d9:48:42:cc:71:d7:33:4f:c6:be:09:9a:15:5a:10:
89:57:b0:39:24:71:14:a8:c2:99:b6:ae:9e:88:2c:3d:17:9e:
4e:68:b1:2c:2c:d8:a7:62:2d:69:3a:18:eb:55:65:fa:95:b1:
16:54:10:17:0e:19:76:44:8b:9c:6d:69:7b:35:fa:00:f1:14:
29:f2:08:ea:05:36:9a:0d:f2:bb:20:ca:44:e5:b0:c9:bc:ec:
ae:aa:5e:a5:76:ee:2e:ca:0c:c2:63:44:e2:77:b3:a5:e8:e0:
e4:c0:96:f1:29:08:14:ed:05:6a:51:93:d4:3e:8c:ec:71:83:
59:6e:e5:2d:17:1e:17:86:0c:2d:78:48:b1:58:30:78:ca:10:
bc:d0:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:51 2025 by rpki-client