Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MKB2cGKCQ1VvwGbp4F__PtiIyBw.roa
File: MKB2cGKCQ1VvwGbp4F__PtiIyBw.roa (raw, json)
Hash identifier: fOqyI62NMGEN4pwW390ypjdasd048JLA3O7YabT0pNs=
Subject key identifier: 30:A0:76:70:62:82:43:55:6F:C0:66:E9:E0:5F:FF:3E:D8:88:C8:1C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0186075AB9791E3D5462CA7C315B54D2111D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MKB2cGKCQ1VvwGbp4F__PtiIyBw.roa
Signing time: Tue 31 Jan 2023 10:23:51 +0000
ROA not before: Tue 31 Jan 2023 10:23:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209595
IP address blocks: 93.170.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:5a:b9:79:1e:3d:54:62:ca:7c:31:5b:54:d2:11:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 31 10:23:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30a07670628243556fc066e9e05fff3ed888c81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:70:a4:c6:e5:b2:48:98:f1:29:19:13:4f:
a1:7c:b6:7f:7a:71:e1:55:18:64:45:d9:c5:60:f0:
aa:2a:7d:be:18:bd:d0:c0:e9:1f:e0:db:1c:61:30:
4c:c9:e2:53:5d:93:d3:b1:f1:dc:15:39:28:72:21:
f0:c8:c2:f1:dc:f9:1d:f0:83:cc:ef:35:5d:6e:bf:
3c:a5:aa:30:90:c5:2e:49:8d:ab:c3:b2:ff:15:33:
02:bc:8b:9d:da:bc:64:89:85:4f:ff:f9:19:e4:c0:
99:f4:57:32:6a:d3:b2:d8:1e:b3:ba:92:58:71:f0:
75:c2:af:ab:1b:cd:4e:56:be:3d:68:9a:17:6e:8c:
27:9d:c0:23:f1:f3:d3:0f:60:d8:92:33:2d:74:1f:
18:31:2d:09:2d:45:35:8c:a5:f6:9a:b6:0d:7b:fb:
ef:4e:08:c9:cb:2b:51:35:84:f0:fa:2f:11:64:19:
16:0b:80:fd:09:35:55:57:45:f8:93:62:b2:7c:2e:
32:ca:06:95:e0:26:d1:c2:0a:95:7d:85:86:82:50:
e2:0f:08:88:00:62:67:ec:fc:12:59:a7:f6:f1:7d:
e5:3c:e5:47:bf:6b:65:3c:3d:55:45:c5:0a:69:17:
ae:46:a3:e1:bd:62:a7:d7:96:c7:46:39:aa:2a:7e:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A0:76:70:62:82:43:55:6F:C0:66:E9:E0:5F:FF:3E:D8:88:C8:1C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MKB2cGKCQ1VvwGbp4F__PtiIyBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.26.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ec:34:d9:be:72:f4:72:3d:33:c8:8f:44:e1:b8:34:ca:03:
3b:46:06:f9:7a:85:7b:ad:e1:40:f1:71:68:cb:a2:94:1e:33:
8b:5d:e4:bc:c0:e7:75:78:32:85:f1:cc:28:0e:ea:51:8f:f9:
b4:25:4f:09:60:bc:a6:86:07:42:fb:3a:e0:7c:cb:03:8e:81:
c7:bb:9f:dc:a7:0b:f2:52:d5:fc:8b:b1:cc:8a:df:1d:e8:e4:
c1:15:ff:8e:a6:27:30:a4:46:24:82:fb:d8:a9:8f:5f:8d:a7:
6c:39:bd:72:51:4e:eb:a4:c5:99:59:8e:42:82:be:d6:0f:6b:
80:a5:72:eb:c5:08:14:de:25:a1:b8:03:83:9d:41:9a:7d:f9:
d3:37:4f:2c:c9:1d:bb:22:93:70:01:a6:19:27:3d:f4:20:44:
7e:5b:13:61:cb:b7:64:0b:e7:da:9b:c9:5f:9d:68:af:c9:90:
4f:3e:19:3e:bd:9b:b8:be:fe:ec:02:b0:6f:04:76:0d:29:45:
03:6b:3a:9f:4d:03:c8:6e:74:08:78:80:af:07:b9:dd:a0:43:
61:d9:3d:bf:ba:5a:bc:3f:85:10:e3:9c:98:07:f5:8c:68:3e:
71:26:4e:ca:f3:c3:08:ca:ee:be:11:97:80:ca:f7:a6:a9:55:
5a:10:11:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:00 2025 by rpki-client