Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P6sftVEQ8-2fbZ5ZLuaziAUJkwA.roa
File: P6sftVEQ8-2fbZ5ZLuaziAUJkwA.roa (raw, json)
Hash identifier: URTBScqh59KJfTSJj3IpGouuSCzG3mlPCuoLViiw2yQ=
Subject key identifier: 3F:AB:1F:B5:51:10:F3:ED:9F:6D:9E:59:2E:E6:B3:88:05:09:93:00
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F9596232B1764094C6F1137A893A1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P6sftVEQ8-2fbZ5ZLuaziAUJkwA.roa
Signing time: Thu 02 Jan 2025 05:49:14 +0000
ROA not before: Thu 02 Jan 2025 05:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41245
IP address blocks: 93.170.143.0/24 maxlen: 24
93.171.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:95:96:23:2b:17:64:09:4c:6f:11:37:a8:93:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fab1fb55110f3ed9f6d9e592ee6b38805099300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:f2:30:ec:b3:fa:4d:20:be:8f:29:41:be:
08:01:e0:00:35:1d:70:f0:79:6f:ea:65:64:6c:ef:
1a:21:d8:0a:a7:62:7e:e4:3d:4f:fb:70:bb:b5:56:
2b:f6:6f:55:26:ed:78:1d:0b:a1:14:75:1a:cf:87:
d5:9f:a5:22:ab:38:f3:63:81:17:bf:23:15:d7:c7:
d4:49:6d:8e:bc:c7:fd:96:37:54:89:3f:3c:46:a6:
ba:08:8c:56:09:ad:7f:26:a7:67:3d:e1:7c:74:fa:
b6:86:1b:b9:7c:d1:ac:90:53:9b:52:f5:ae:61:98:
61:63:c2:39:d6:7d:21:9c:d6:4d:1a:73:db:8d:5f:
98:7c:ce:e7:e3:94:89:b7:59:1e:b1:05:c3:2d:99:
2f:26:08:0a:36:95:2f:ee:e3:40:7b:e9:30:76:05:
5e:b7:64:23:97:b8:27:8a:01:23:08:77:0a:0f:2d:
8e:aa:d4:fc:25:7b:9c:a1:55:7c:66:7a:91:b9:f0:
63:26:91:3e:7d:b1:69:f1:13:77:0a:da:f8:03:a7:
2a:c9:1a:47:2c:e5:4d:47:d1:b6:e7:fc:cf:00:de:
ec:0b:21:20:0f:09:87:32:63:16:55:c3:a9:15:f0:
1c:7e:10:56:73:26:24:87:35:a6:6d:4b:65:61:d7:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AB:1F:B5:51:10:F3:ED:9F:6D:9E:59:2E:E6:B3:88:05:09:93:00
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P6sftVEQ8-2fbZ5ZLuaziAUJkwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.143.0/24
93.171.6.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e6:b7:97:fa:0b:28:9f:f2:d1:bf:ca:0f:6d:de:e9:66:b4:
30:41:4b:66:35:a1:38:f1:68:3e:3f:39:93:11:47:94:06:ce:
83:8e:51:08:8e:ce:a1:9b:e6:74:60:48:4e:39:9a:73:da:9c:
e0:f1:a0:99:cc:04:c3:e4:97:64:41:04:63:be:86:f6:69:c6:
c6:37:a6:23:5c:ec:39:cb:c8:b1:f8:6e:4e:d2:60:1c:7e:ed:
af:a7:14:21:ee:d5:5f:0e:5f:9e:47:0b:3f:05:bc:ef:09:14:
a4:a2:5d:24:76:7c:6e:a2:92:22:4f:f4:27:48:52:20:46:08:
1b:94:88:e1:6a:b2:11:b9:05:0e:b4:d5:68:da:fc:1d:2e:5f:
92:5e:70:6e:b8:3f:56:09:d9:09:3a:98:c6:36:ce:03:ea:d4:
c4:14:64:96:7c:d1:66:6e:8c:52:99:93:df:97:e7:50:9d:ab:
62:f7:6d:73:c4:9f:f9:3c:b1:01:47:e5:da:9a:52:42:7c:46:
86:5f:b0:f5:bb:6f:54:da:10:96:f9:1d:c9:59:af:98:c7:e8:
66:e2:47:de:06:64:3d:76:b0:bf:4f:08:a8:b1:f4:28:41:8f:
79:48:55:d0:96:0e:06:fa:60:7d:f8:71:85:89:ab:3c:cd:c0:
5d:57:09:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:32 2025 by rpki-client