Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KdMEiHULc4vxh-DfZU1NJ4K0kko.roa
File: KdMEiHULc4vxh-DfZU1NJ4K0kko.roa (raw, json)
Hash identifier: pRqefgTnfepCuuPFclyFecXdZLKHpJHsULJ+6DoXA78=
Subject key identifier: 29:D3:04:88:75:0B:73:8B:F1:87:E0:DF:65:4D:4D:27:82:B4:92:4A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27711118
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KdMEiHULc4vxh-DfZU1NJ4K0kko.roa
Signing time: Sat 01 Jan 2022 16:08:03 +0000
ROA not before: Sat 01 Jan 2022 16:08:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41119
IP address blocks: 93.170.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661721368 (0x27711118)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29d30488750b738bf187e0df654d4d2782b4924a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:03:16:c1:86:53:02:06:6c:96:e3:7e:54:
ca:5d:e8:58:ed:de:37:1e:f9:dc:80:59:45:19:b9:
25:f0:ca:38:dd:47:c7:1e:c9:1e:fd:b8:88:f0:71:
4d:ab:42:31:ef:f0:0d:71:e8:e5:34:69:dc:dc:31:
5e:40:ee:58:67:a8:af:ea:4f:05:4e:be:f4:06:78:
fd:60:9d:42:69:e4:c0:5c:5c:31:08:5f:a0:79:26:
e5:1e:f7:28:67:c1:ae:2b:5f:9f:ae:7e:68:65:dd:
7e:d4:d0:57:7a:a9:7d:db:fb:bb:56:9a:93:bb:dc:
f8:e4:a3:77:2d:af:85:25:10:23:9e:3d:31:e0:69:
82:3e:72:ab:78:3b:2b:c0:eb:d9:60:88:a8:82:bb:
02:27:2a:c4:79:72:c9:e5:e9:68:af:15:25:50:73:
84:9b:1d:2f:f9:45:e6:f2:92:5b:b0:dd:15:67:5e:
99:b9:cb:b0:50:70:04:52:59:d3:1b:1f:60:cc:54:
12:20:ee:64:28:f9:ce:53:a7:e3:23:00:70:82:01:
c7:e5:21:fd:7b:9f:5b:7e:b3:e5:62:ea:8f:a1:3a:
0d:7d:84:b6:1e:db:80:6f:b9:6c:9e:0b:bb:7d:70:
9b:70:11:cf:c4:04:d9:17:4e:2e:1b:0a:85:f1:1e:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D3:04:88:75:0B:73:8B:F1:87:E0:DF:65:4D:4D:27:82:B4:92:4A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/KdMEiHULc4vxh-DfZU1NJ4K0kko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.219.0/24
Signature Algorithm: sha256WithRSAEncryption
10:13:a7:73:45:83:3e:73:b9:7f:37:9a:85:97:82:4f:7c:21:
b0:4c:48:9d:2b:2a:de:6d:d1:52:bc:0a:3c:34:20:ad:d2:f7:
76:01:1b:5e:68:80:d5:0d:c9:de:2f:10:9a:e0:73:4d:00:90:
50:20:52:48:11:8d:c4:91:86:fd:82:06:3a:bf:b4:42:21:9f:
5a:cb:72:25:ca:7e:e6:18:b5:73:b2:43:9b:24:bc:28:fd:94:
70:fc:75:6e:f7:08:36:cb:d8:bd:4c:43:89:47:fa:d1:de:e6:
31:a7:24:ae:7d:32:e7:91:f0:16:d1:8f:d9:50:4a:11:8c:9c:
59:33:2d:c1:3e:27:31:c6:15:5c:a7:30:e0:d6:cc:1a:de:09:
6f:db:16:42:35:51:7d:a7:2e:76:33:6d:80:d5:b6:7b:08:4a:
e5:ac:3c:eb:da:2a:37:eb:92:d7:57:ef:0c:40:5d:44:6e:8a:
af:87:e8:df:b2:93:8a:3d:88:c7:37:56:7b:a0:e3:4a:4d:4c:
c0:65:79:70:b4:ee:63:5d:5b:24:05:e6:46:1a:11:74:0c:8b:
86:d3:e7:df:af:c4:73:22:9b:3c:77:ec:b1:6e:e9:4d:c5:02:
26:fe:96:73:ab:b9:96:97:d0:5b:e2:49:59:7a:40:87:1a:d4:
7c:87:b8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:12:53 2025 by rpki-client