Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NJqDmUFdbLnVFofahf6DNMQDIrg.roa
File: NJqDmUFdbLnVFofahf6DNMQDIrg.roa (raw, json)
Hash identifier: PjYXQZ3zDChsqQ/WPh7SX7nzwh+bYoCcJLraj4upxxg=
Subject key identifier: 34:9A:83:99:41:5D:6C:B9:D5:16:87:DA:85:FE:83:34:C4:03:22:B8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28EC9480
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NJqDmUFdbLnVFofahf6DNMQDIrg.roa
Signing time: Fri 18 Feb 2022 12:06:29 +0000
ROA not before: Fri 18 Feb 2022 12:06:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61390
IP address blocks: 93.171.40.0/22 maxlen: 24
92.38.33.0/24 maxlen: 24
146.158.60.0/22 maxlen: 24
93.171.182.0/23 maxlen: 24
146.120.120.0/22 maxlen: 24
146.120.236.0/22 maxlen: 24
95.46.116.0/22 maxlen: 24
93.170.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 686593152 (0x28ec9480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 18 12:06:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=349a8399415d6cb9d51687da85fe8334c40322b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:69:e8:b6:5d:e2:cc:e7:9f:e7:2c:52:49:
9d:76:81:8a:d4:dd:c5:b6:7f:f5:14:f7:b2:0f:a5:
98:cd:2f:3d:73:ca:43:dc:e8:62:7f:f9:07:5c:dc:
ab:be:97:53:6a:d4:b9:91:d3:b9:10:c3:18:ff:f9:
40:e5:59:44:00:52:22:2c:70:22:46:86:99:4b:b3:
9f:ce:b1:4e:a4:e7:44:d8:58:1b:66:46:34:4f:e4:
60:79:01:64:8d:a5:48:af:46:74:13:f7:d9:7a:6f:
3d:f5:da:29:9d:34:f3:bf:a1:05:e9:09:e1:71:8c:
b7:55:58:96:97:50:6d:59:07:2d:eb:b4:33:96:07:
c7:c1:52:34:6c:5e:67:3b:f3:89:a6:a3:c0:d6:63:
19:cd:9f:02:39:c4:86:f9:e7:72:53:71:9a:3a:13:
8c:b3:38:81:b4:0c:73:66:9f:45:cb:3f:ce:51:6a:
ae:ae:ac:56:09:b0:56:b0:8f:bd:27:d6:4b:96:3b:
63:88:3c:e1:4a:c8:94:6d:2d:72:74:f8:8e:63:aa:
20:dc:9d:46:8a:9f:e6:b2:05:86:2f:17:1c:78:4d:
06:d6:46:cb:65:42:3e:98:94:74:a2:9f:2d:89:62:
4a:3f:27:2b:3f:c2:22:ea:98:28:d2:47:e1:af:bd:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9A:83:99:41:5D:6C:B9:D5:16:87:DA:85:FE:83:34:C4:03:22:B8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NJqDmUFdbLnVFofahf6DNMQDIrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.33.0/24
93.170.180.0/22
93.171.40.0/22
93.171.182.0/23
95.46.116.0/22
146.120.120.0/22
146.120.236.0/22
146.158.60.0/22
Signature Algorithm: sha256WithRSAEncryption
76:04:d9:ae:f4:5c:7b:67:56:9e:82:d5:98:a5:a0:88:28:76:
b6:43:2c:07:34:2d:a9:f0:7b:b0:7c:54:1c:af:19:54:df:b1:
91:15:63:89:14:d6:af:a4:1e:9c:1c:e6:95:b2:5f:92:74:a4:
6e:a9:18:84:67:b1:26:db:ad:a3:c7:ec:f1:9d:28:93:e2:4b:
4c:b7:8e:75:b1:5d:28:3e:a3:dd:a5:f4:7f:1a:47:0d:07:03:
74:67:8d:3c:8c:c4:5d:39:29:f0:5d:5f:0b:36:f2:fe:02:91:
0e:fd:30:e9:bb:b2:ba:ff:db:fa:3e:c6:ac:1a:f4:c1:a2:e7:
fd:21:6e:67:08:b4:7f:a8:35:ad:64:52:cf:c0:7f:97:cf:32:
21:b5:a3:84:30:1a:9f:ac:6c:94:c4:52:d8:86:a6:e9:26:f3:
1e:7c:34:7f:4b:37:3f:10:13:05:f2:6d:d7:b1:89:84:97:e7:
97:9f:fa:93:70:4e:60:38:84:23:74:20:29:78:87:20:47:91:
9c:1b:7a:26:95:b9:c4:92:c6:e7:12:d8:e7:f7:da:64:30:98:
34:84:7b:55:98:29:0e:db:f8:31:d9:ed:8d:cf:8a:9e:1f:04:
34:05:55:9c:30:19:fa:83:1c:6a:64:55:d4:79:2a:e8:c5:d3:
f9:a6:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:20 2025 by rpki-client