Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Oabk4LcTfWm5-H4jnq3Lp5Ec4u4.roa
File: Oabk4LcTfWm5-H4jnq3Lp5Ec4u4.roa (raw, json)
Hash identifier: KNnJhXvwaTnmz2JLU268Q2cjYZ3gLGGwlUAVEm+UJYk=
Subject key identifier: 39:A6:E4:E0:B7:13:7D:69:B9:F8:7E:23:9E:AD:CB:A7:91:1C:E2:EE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F8B2EFED3EE9E97BB1F0F0E9B4E3D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Oabk4LcTfWm5-H4jnq3Lp5Ec4u4.roa
Signing time: Thu 02 Jan 2025 05:49:11 +0000
ROA not before: Thu 02 Jan 2025 05:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12722
IP address blocks: 93.170.76.0/24 maxlen: 24
95.47.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8b:2e:fe:d3:ee:9e:97:bb:1f:0f:0e:9b:4e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39a6e4e0b7137d69b9f87e239eadcba7911ce2ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:17:08:dc:f8:85:7e:91:e8:e4:b3:38:df:ed:
f1:63:0f:20:ff:be:9e:cb:66:63:99:2d:a9:26:07:
b1:83:52:d3:1a:42:be:4d:5f:bf:e6:a8:59:42:88:
89:63:98:41:82:54:e5:b8:10:b8:2e:3e:ec:74:ea:
d6:b3:90:90:56:eb:bb:78:b7:fa:d0:6b:3c:99:4d:
3c:5b:a9:ae:de:48:5c:7b:25:ae:d8:f9:fe:00:d7:
b9:81:14:cd:e5:d9:65:17:ce:52:b5:52:d4:f2:a8:
26:a6:5f:7b:8a:00:04:56:1c:5a:a7:e3:66:8f:b8:
6e:3d:56:96:c6:9f:da:32:c2:a6:35:88:93:ce:34:
1b:1d:04:12:b7:78:63:d3:71:e9:6f:a4:03:81:24:
e7:a6:5c:a6:33:61:81:1d:ea:23:45:18:7f:bc:76:
72:29:71:2c:16:30:6b:55:05:04:1a:19:dd:5a:50:
96:ef:09:13:ab:a7:4f:76:06:12:b1:4b:c1:d5:96:
86:ec:f9:e9:a7:92:41:0e:19:52:aa:d8:a8:a0:c2:
53:cb:6c:57:11:1d:90:d1:8c:4d:d8:1a:61:0c:2b:
73:7d:2d:9b:1e:8b:78:32:7f:48:9e:c6:70:c3:e9:
99:e6:b6:08:41:a7:80:8f:52:c6:82:46:2f:11:0f:
06:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A6:E4:E0:B7:13:7D:69:B9:F8:7E:23:9E:AD:CB:A7:91:1C:E2:EE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Oabk4LcTfWm5-H4jnq3Lp5Ec4u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.76.0/24
95.47.161.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:2f:ee:5d:3a:36:2c:a2:1d:26:bb:62:e5:7c:4e:99:68:d9:
ae:d2:80:0f:12:4f:90:d9:e2:37:bb:42:13:59:1e:76:a3:c7:
10:64:da:a8:7e:4b:55:fb:e2:d0:f2:95:5c:ba:6b:d9:29:5a:
ff:2e:d7:b3:e4:bc:87:3e:0c:19:61:7d:ec:1b:5d:2b:db:55:
c4:6c:d6:02:1a:bc:0a:62:70:5b:bf:c1:74:0a:30:f7:67:cc:
9d:25:4f:46:04:a2:a5:e7:79:c8:5c:b0:a2:80:4e:bc:25:9b:
2c:52:94:21:6c:83:88:8d:0a:c1:b6:84:da:2c:d4:3e:13:36:
d6:e7:3f:37:ca:8c:9d:b2:ee:6f:85:36:51:13:ef:44:1d:18:
cb:09:83:dd:52:1c:5e:19:f5:4e:9d:24:48:16:3e:5e:bc:7d:
9e:af:9f:1a:de:c7:56:b5:2d:59:4d:62:17:8e:13:34:1d:30:
37:4a:de:24:b4:df:76:cb:b5:43:6b:82:76:44:c2:21:d3:a3:
75:d2:5b:56:92:fe:ef:34:35:1c:99:f2:1a:61:a8:02:05:c1:
4f:40:9c:ac:35:56:d4:de:48:5d:92:60:19:7b:8e:b6:29:76:
38:f0:c1:cb:73:fc:5d:06:c7:57:ce:75:a9:0d:a7:02:7d:1a:
33:3f:d4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:13 2025 by rpki-client