Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NNaHZpCRMa1Dv9wVGXyY9SH1kl0.roa
File: NNaHZpCRMa1Dv9wVGXyY9SH1kl0.roa (raw, json)
Hash identifier: PKFg6TVmVs8s5JFMPpb7levkMPeRBtY+F0X0Lzac2/g=
Subject key identifier: 34:D6:87:66:90:91:31:AD:43:BF:DC:15:19:7C:98:F5:21:F5:92:5D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD3802152E8909DA427DFAB1EA9F5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NNaHZpCRMa1Dv9wVGXyY9SH1kl0.roa
Signing time: Thu 02 Jan 2025 05:49:30 +0000
ROA not before: Thu 02 Jan 2025 05:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60603
IP address blocks: 93.171.10.0/23 maxlen: 24
95.47.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d3:80:21:52:e8:90:9d:a4:27:df:ab:1e:a9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34d68766909131ad43bfdc15197c98f521f5925d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:d0:8a:06:45:54:39:b4:85:7b:00:46:81:
67:ab:d4:15:d1:d2:ba:9e:bb:4e:89:d4:1c:3a:3d:
a8:32:d3:83:9e:d8:2f:01:80:3d:9a:b6:e0:f8:17:
b3:7c:32:35:43:23:c9:bc:05:15:68:1a:2c:28:1e:
58:8b:d6:ce:4d:8c:1e:8b:5c:6b:6a:6e:a9:1d:d6:
99:aa:d1:a5:89:07:d5:b9:6e:02:3a:e2:25:60:42:
df:8e:38:8e:85:8b:46:48:5b:24:a4:e4:ac:8a:85:
c6:cf:4d:20:fb:bf:78:ad:73:8a:74:9d:08:f6:fb:
a4:4d:6a:74:5e:b2:61:68:e6:01:9a:a0:d2:cb:da:
e7:7d:ce:19:71:68:88:2f:77:0e:50:ab:c5:86:bc:
7c:f6:c8:cc:a5:e2:70:11:49:ad:ea:db:19:52:a2:
4d:df:55:33:7a:ed:bd:1b:b7:d9:1a:7f:c2:6a:2d:
9c:b1:39:9a:c8:c9:b6:bb:61:8e:58:86:9a:4e:39:
70:cd:6a:0a:17:e8:07:2c:42:d4:18:24:9e:1e:74:
e2:96:f3:70:ac:7f:59:43:78:97:76:16:a0:b8:2d:
09:1c:4f:3a:c8:b9:fc:2e:66:a9:da:52:59:76:16:
56:52:03:4c:a7:95:5b:25:e4:92:b1:32:a1:c2:1a:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D6:87:66:90:91:31:AD:43:BF:DC:15:19:7C:98:F5:21:F5:92:5D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NNaHZpCRMa1Dv9wVGXyY9SH1kl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.10.0/23
95.47.147.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:74:c0:9a:89:b8:c7:d2:64:bd:b1:b1:47:7d:16:88:43:79:
32:ec:ad:cc:cf:c6:99:4c:2c:93:57:76:4d:ab:e8:27:1a:d5:
90:65:68:d7:41:96:be:df:2c:67:af:0a:40:32:81:56:ca:35:
e2:58:91:62:8b:10:6f:bb:b9:c5:22:5f:d3:ad:cd:ed:b9:e9:
c9:c1:d0:0a:a8:04:e7:30:db:a0:b4:a5:6f:61:d1:66:5c:67:
10:63:5a:d0:9e:12:a6:b5:4f:e6:b0:96:ed:ac:84:2c:1f:1a:
73:94:e3:b1:1f:16:5b:83:60:48:3a:cc:59:82:d7:54:8a:0e:
42:18:bb:e6:fd:33:39:5d:56:57:50:d5:a6:04:b1:ae:b6:62:
ed:28:2a:7e:16:67:8d:16:0d:a8:c6:57:47:19:ba:5e:28:90:
e4:d8:08:27:d6:32:61:a3:56:3a:7a:75:c5:c9:19:b4:cd:ad:
68:0b:9d:9c:3e:eb:f8:80:83:3b:6f:21:7a:1e:3f:77:15:f1:
ad:cf:ba:89:d3:0e:41:7a:61:06:13:29:d3:7c:c6:2e:23:7e:
d0:98:e3:8f:c7:c8:a4:4d:d6:3a:4f:d8:8e:c2:f1:57:c2:b0:
a5:cc:f0:34:43:60:01:58:a3:f1:95:52:69:ca:db:9d:02:8b:
82:df:3c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:44 2025 by rpki-client