Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JNltk5M18lLfEagWVauW4Ha9owU.roa
File: JNltk5M18lLfEagWVauW4Ha9owU.roa (raw, json)
Hash identifier: HfPmAgisShvnG02BCUgOLcBQ3Cv26d+0fnxLtiooUQM=
Subject key identifier: 24:D9:6D:93:93:35:F2:52:DF:11:A8:16:55:AB:96:E0:76:BD:A3:05
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570958F72F37DB793B60DDCE268831555
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JNltk5M18lLfEagWVauW4Ha9owU.roa
Signing time: Mon 02 Jan 2023 03:45:27 +0000
ROA not before: Mon 02 Jan 2023 03:45:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201069
IP address blocks: 93.170.187.0/24 maxlen: 24
93.170.96.0/24 maxlen: 24
95.47.119.0/24 maxlen: 24
93.171.218.0/24 maxlen: 24
93.171.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:8f:72:f3:7d:b7:93:b6:0d:dc:e2:68:83:15:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24d96d939335f252df11a81655ab96e076bda305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:94:1e:81:0d:4b:9b:dc:1f:3c:44:16:1b:
17:5a:24:9c:eb:73:98:23:4e:52:d6:1d:be:f7:78:
80:88:54:49:ae:9f:de:ef:e3:63:06:a1:43:90:21:
ae:f2:f3:30:79:dd:ec:4c:28:75:d0:82:7c:fa:8d:
95:3b:ba:6e:5f:ac:8a:35:1a:18:6f:0b:fb:8e:f0:
20:65:08:3e:cc:ec:22:2c:34:18:66:97:27:dc:3e:
d6:a2:82:30:7f:37:31:2e:f5:3b:e9:d1:2a:9b:49:
89:55:bd:ea:66:1d:71:69:18:1f:a6:2c:eb:7e:fc:
03:0d:f8:de:b2:a6:0a:33:e0:ba:7c:be:17:d8:b4:
30:0f:ea:02:80:99:3e:11:e9:71:e7:40:22:60:2d:
78:76:28:d2:d0:d3:d7:32:5f:72:37:b6:da:0c:94:
af:9d:8b:8e:88:a3:7a:e9:19:0c:8a:14:b8:45:44:
f0:5c:88:8c:80:5f:7c:7b:56:52:95:9b:40:dc:0e:
b9:3a:b8:78:b9:b6:56:36:33:ad:60:fb:eb:9c:5f:
f5:82:30:95:70:0c:d1:88:7d:c5:63:4b:3b:db:88:
58:d5:4a:ce:4d:b9:35:e1:53:c2:e9:66:1b:b9:48:
66:c6:17:1e:70:15:28:95:db:a7:ce:75:61:bf:7c:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D9:6D:93:93:35:F2:52:DF:11:A8:16:55:AB:96:E0:76:BD:A3:05
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/JNltk5M18lLfEagWVauW4Ha9owU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.96.0/24
93.170.187.0/24
93.171.13.0/24
93.171.218.0/24
95.47.119.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:54:b6:4e:fc:92:d7:91:c8:81:c7:ce:10:bd:46:53:8d:5e:
77:88:df:15:94:91:c7:b8:11:8b:b4:65:75:92:7f:54:5d:db:
e2:73:9e:53:c9:2b:b1:d2:ae:a1:52:72:7c:b8:7f:08:a5:32:
9c:d7:40:92:66:c1:af:33:90:9c:92:32:26:e0:a3:5c:16:b5:
54:1c:39:12:56:71:9b:d2:ea:40:2c:47:f0:c6:cf:67:11:a0:
ae:68:30:b8:a4:07:fd:80:2c:bf:81:a7:9f:5f:4a:57:09:62:
c6:8c:e8:20:f6:ea:58:f2:dd:51:36:f8:3c:25:c3:1c:24:2f:
94:72:35:31:d7:68:a0:67:a0:1a:c4:32:b3:f5:03:0e:39:06:
9e:14:6b:d5:6c:03:1f:3b:c4:1d:58:40:00:d1:e6:6f:b6:a8:
55:a3:f4:3b:bb:47:35:51:06:d6:0c:96:fb:bd:d6:a6:ee:fd:
3f:0e:04:91:51:2d:e9:c6:d9:48:c8:8e:c6:11:d7:ab:d9:0a:
6f:07:5e:e0:5b:93:b0:d6:58:08:8a:33:47:05:81:0e:43:c3:
97:a6:59:56:90:c0:08:12:3d:ee:12:46:24:11:13:e1:b8:fb:
81:58:2d:45:8c:16:81:8b:0d:b9:d9:e2:c5:14:ee:13:b6:e4:
55:a7:d6:48
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVwlY9y8323k7YN3OJogxVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGQ5NmQ5MzkzMzVmMjUyZGYxMWE4MTY1NWFiOTZlMDc2YmRhMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9OUHoENS5vcHzxEFhsXWiSc63OY
I05S1h2+93iAiFRJrp/e7+NjBqFDkCGu8vMwed3sTCh10IJ8+o2VO7puX6yKNRoY
bwv7jvAgZQg+zOwiLDQYZpcn3D7WooIwfzcxLvU76dEqm0mJVb3qZh1xaRgfpizr
fvwDDfjesqYKM+C6fL4X2LQwD+oCgJk+Eelx50AiYC14dijS0NPXMl9yN7baDJSv
nYuOiKN66RkMihS4RUTwXIiMgF98e1ZSlZtA3A65Orh4ubZWNjOtYPvrnF/1gjCV
cAzRiH3FY0s724hY1UrOTbk14VPC6WYbuUhmxhcecBUoldunznVhv3xH6QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCTZbZOTNfJS3xGoFlWrluB2vaMFMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvSk5sdGs1TTE4bExmRWFnV1ZhdVc0SGE5b3dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAXapgAwQA
Xaq7AwQAXasNAwQAXavaAwQAXy93MA0GCSqGSIb3DQEBCwUAA4IBAQBvVLZO/JLX
kciBx84QvUZTjV53iN8VlJHHuBGLtGV1kn9UXdvic55TySux0q6hUnJ8uH8IpTKc
10CSZsGvM5CckjIm4KNcFrVUHDkSVnGb0upALEfwxs9nEaCuaDC4pAf9gCy/gaef
X0pXCWLGjOgg9upY8t1RNvg8JcMcJC+UcjUx12igZ6AaxDKz9QMOOQaeFGvVbAMf
O8QdWEAA0eZvtqhVo/Q7u0c1UQbWDJb7vdam7v0/DgSRUS3pxtlIyI7GEder2Qpv
B17gW5Ow1lgIijNHBYEOQ8OXpllWkMAIEj3uEkYkERPhuPuBWC1FjBaBiw252eLF
FO4TtuRVp9ZI
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:25 2025 by rpki-client