Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MY7crNLp44vOCr5gs5ENU7v34n0.roa
File: MY7crNLp44vOCr5gs5ENU7v34n0.roa (raw, json)
Hash identifier: JWEgl50SWweecsYeIRIRJZk2ep7jf1D8R1UEBoHlMc8=
Subject key identifier: 31:8E:DC:AC:D2:E9:E3:8B:CE:0A:BE:60:B3:91:0D:53:BB:F7:E2:7D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570950B4AAD56AE3026471FC7A2036663
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MY7crNLp44vOCr5gs5ENU7v34n0.roa
Signing time: Mon 02 Jan 2023 03:44:53 +0000
ROA not before: Mon 02 Jan 2023 03:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20688
IP address blocks: 93.171.184.0/24 maxlen: 24
146.120.116.0/22 maxlen: 24
93.171.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0b:4a:ad:56:ae:30:26:47:1f:c7:a2:03:66:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=318edcacd2e9e38bce0abe60b3910d53bbf7e27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dc:e8:70:1e:5a:54:65:17:bc:b9:9c:e4:89:
d7:5a:dd:3f:15:68:6a:8a:fa:c8:04:1a:01:60:69:
e3:78:d3:45:41:c1:d3:21:73:a4:99:a6:58:a8:ca:
61:e7:9c:d8:4e:69:e7:e4:2d:f2:52:8a:be:da:5e:
33:5f:3f:f5:55:66:77:70:cb:52:2a:59:1a:93:a1:
a6:7c:ca:ca:9b:49:05:22:a5:1d:84:5f:aa:ba:d1:
4b:41:d0:ed:a3:25:50:5d:49:32:14:a0:c4:3b:e3:
bb:59:7e:1b:42:42:eb:b5:04:91:a8:13:1f:96:01:
85:14:b2:a0:3f:2d:af:da:66:96:66:63:2e:ae:6b:
66:7c:22:c9:a5:cd:3a:d7:8c:a2:1a:3d:2f:6c:64:
74:4b:5a:97:96:c2:46:f9:29:93:21:2c:22:09:e1:
6c:71:b2:e5:2c:bb:cc:ea:31:5b:99:97:fc:3c:a4:
36:d4:ce:6d:76:5f:36:43:0f:d5:d7:c4:c3:4b:27:
99:1f:e3:87:8f:36:5b:f9:c8:b4:df:ef:5b:16:e3:
6b:99:a5:43:82:b4:67:82:63:89:6e:b0:48:5b:12:
53:04:cc:4d:b6:66:46:f6:b9:36:65:1a:9d:84:cc:
12:95:e6:82:05:23:00:3c:d0:16:38:81:9c:d9:c5:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:DC:AC:D2:E9:E3:8B:CE:0A:BE:60:B3:91:0D:53:BB:F7:E2:7D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/MY7crNLp44vOCr5gs5ENU7v34n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.143.0/24
93.171.184.0/24
146.120.116.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:24:05:1a:dd:30:4f:37:3e:d6:83:3e:f2:93:f7:33:53:48:
d9:7d:39:76:b7:d4:7d:c5:f4:0f:81:ae:5b:f9:e0:9f:73:04:
c2:81:32:98:af:91:e1:ad:b1:4b:af:08:bb:ca:c6:2f:9b:63:
e8:8d:69:ca:f9:a2:41:b6:e1:68:97:59:93:12:5d:f5:dc:1b:
43:ea:e7:9a:ba:f4:6a:93:48:03:ab:dd:c2:e9:a6:bf:b9:9c:
4c:34:08:76:ef:12:4e:9e:9d:d0:e5:f5:08:3e:0e:72:0b:0f:
94:ec:bc:dd:f0:cc:c6:6f:94:e7:cd:48:4b:aa:a3:bf:a5:ab:
fc:2b:4e:bf:05:5d:8b:6d:e8:b1:a5:a8:7f:b9:3e:e1:39:fb:
39:8a:bb:39:f3:8d:de:1f:9b:62:46:b2:f2:28:5e:a8:71:48:
24:99:46:c4:2d:63:45:54:3e:03:58:54:90:93:f5:ed:60:40:
cf:6d:3b:83:fc:9f:ce:e1:ed:af:1c:b8:51:23:68:9b:21:ad:
7a:f4:33:d0:61:f7:77:2e:c2:63:c1:db:31:48:82:e6:b3:5f:
16:a0:74:4d:0f:63:30:2e:4a:a6:94:c0:ec:70:f2:ca:e9:c9:
6e:76:99:60:91:d6:24:8b:cb:8b:6a:37:e8:19:b0:e7:ba:f9:
99:04:8a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:28 2025 by rpki-client