Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MIFDUGZxkmhfqz6B8PM4ULiRXHo.roa
File: MIFDUGZxkmhfqz6B8PM4ULiRXHo.roa (raw, json)
Hash identifier: U8fYKbnCy77D1ZmhwgoAaCwz6/QmXRvAIkwazU12jEo=
Subject key identifier: 30:81:43:50:66:71:92:68:5F:AB:3E:81:F0:F3:38:50:B8:91:5C:7A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018C595B533C14C7BCB238F0378ADC05E382
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MIFDUGZxkmhfqz6B8PM4ULiRXHo.roa
Signing time: Mon 11 Dec 2023 14:50:06 +0000
ROA not before: Mon 11 Dec 2023 14:50:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20688
IP address blocks: 93.171.184.0/24 maxlen: 24
146.120.0.0/21 maxlen: 24
146.120.116.0/22 maxlen: 24
93.171.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:59:5b:53:3c:14:c7:bc:b2:38:f0:37:8a:dc:05:e3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Dec 11 14:50:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30814350667192685fab3e81f0f33850b8915c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:34:f9:8d:a6:06:1e:eb:16:59:cb:6c:2f:
b3:c5:e7:4e:76:8e:d5:70:9f:68:5c:51:43:68:11:
f0:e6:1f:b0:df:22:30:bf:27:fb:a8:d3:e9:38:b6:
53:c0:0f:ba:08:61:78:c4:e7:eb:c7:24:ea:36:ec:
2d:63:1c:e2:8d:00:3e:09:3b:a8:06:9b:4e:98:54:
e2:e0:4c:86:bc:2c:67:d8:76:41:f2:2a:2b:48:63:
54:59:7c:24:77:ff:c4:61:78:a1:2d:6d:57:da:13:
b8:e0:77:f1:c9:4d:e5:9b:a8:ad:d3:13:93:9f:98:
ba:87:62:4d:cf:77:39:7b:b3:db:db:06:89:f6:6e:
bd:63:81:0f:f9:5e:51:51:4d:60:a1:0c:97:37:74:
4b:ef:24:ce:b7:2d:35:50:0c:07:76:fd:ea:71:d9:
18:43:ea:61:55:9b:f7:e8:75:04:31:e4:1d:5f:05:
25:06:4a:1f:69:de:d3:c8:0d:e7:43:26:76:6b:88:
7a:e4:39:2c:f0:bd:69:43:fc:73:e2:e3:f1:f4:7a:
b6:18:57:e3:47:a4:bd:10:15:84:37:bc:01:30:6f:
9d:2f:7c:f3:34:0a:04:71:54:f7:52:c2:d8:b8:79:
57:07:b6:d9:4a:a8:8f:80:17:d8:ff:15:6f:0a:7c:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:81:43:50:66:71:92:68:5F:AB:3E:81:F0:F3:38:50:B8:91:5C:7A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MIFDUGZxkmhfqz6B8PM4ULiRXHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.143.0/24
93.171.184.0/24
146.120.0.0/21
146.120.116.0/22
Signature Algorithm: sha256WithRSAEncryption
47:d9:fa:37:f2:af:6e:b0:88:96:39:60:c6:00:c7:da:dc:d8:
a7:9b:ae:83:d6:38:38:80:3b:f8:cb:9d:29:9d:8a:be:92:d0:
b7:fe:df:76:3f:c1:b4:d6:ee:31:4f:ae:38:0b:25:91:a8:bd:
20:a1:df:30:75:3b:48:ee:8e:d1:80:cf:50:2f:1a:e4:7d:da:
05:08:f4:90:ab:c2:40:12:2e:d5:0e:83:90:b8:84:15:98:78:
ea:a1:08:24:71:a4:aa:03:6e:45:0d:d5:6d:ad:1f:0b:a2:6e:
7a:ff:4f:e3:af:09:90:8d:e4:ec:39:90:71:f1:47:31:ef:1a:
49:0f:50:a6:a4:36:68:5c:cd:44:96:04:62:59:61:bf:54:4c:
f7:6b:4d:0d:1d:50:53:d3:8a:0f:c0:6e:cd:88:ef:d2:cf:df:
96:81:fc:35:ef:19:02:aa:8a:27:bc:49:d4:9e:38:28:b7:e7:
eb:82:89:0e:3f:49:44:01:d2:8b:59:48:e1:a9:0a:44:c5:18:
b5:82:af:6f:71:35:a1:19:65:d0:cc:4f:09:3e:61:a7:68:7b:
6f:74:5f:27:1f:da:20:29:81:29:91:ec:ce:b9:e7:29:3c:32:
f0:81:ce:63:7e:3b:9e:e5:cd:c7:14:05:dc:2f:00:fd:a8:ba:
2c:e9:fc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:52 2025 by rpki-client