Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PPbcro_D7bBnHptZ_YEGmlcks9M.roa
File: PPbcro_D7bBnHptZ_YEGmlcks9M.roa (raw, json)
Hash identifier: okK6bCaMCyZLoWX8f4UcVg3/xzOlgwfFXPRflmj6lZQ=
Subject key identifier: 3C:F6:DC:AE:8F:C3:ED:B0:67:1E:9B:59:FD:81:06:9A:57:24:B3:D3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28885DFA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PPbcro_D7bBnHptZ_YEGmlcks9M.roa
Signing time: Fri 14 Jan 2022 09:33:41 +0000
ROA not before: Fri 14 Jan 2022 09:33:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61384
IP address blocks: 93.171.170.0/23 maxlen: 24
93.170.132.0/23 maxlen: 24
93.171.250.0/23 maxlen: 24
95.47.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 680025594 (0x28885dfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 14 09:33:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3cf6dcae8fc3edb0671e9b59fd81069a5724b3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:47:5b:51:2e:7e:4e:32:3e:9b:51:62:c7:1b:
ff:b0:7a:b8:88:37:2d:3a:ca:c3:fc:d8:38:26:b2:
81:ad:00:01:b2:76:a0:fb:ec:e7:a3:6f:87:70:fa:
f4:3c:84:1f:0c:d0:24:af:b9:f6:f3:50:50:a0:b0:
d2:c2:1b:0a:ed:e3:47:24:94:e4:3b:53:79:0e:72:
df:1a:61:5c:83:e5:d1:69:6b:6d:57:cc:ef:39:29:
b2:2f:01:4b:26:74:c7:50:20:6c:8f:54:1d:bc:ff:
2a:76:7e:57:e7:72:0b:2f:74:ee:b4:98:df:c6:86:
e7:74:89:a9:13:1d:92:86:00:6f:6f:c9:f2:61:78:
83:9d:99:de:d8:71:be:71:1a:35:84:25:ef:47:d3:
98:55:30:45:e0:8e:b6:eb:77:bf:92:f7:42:62:63:
20:d7:05:c4:44:80:58:7b:65:f5:1e:13:55:d3:a3:
85:cf:fe:3e:5c:ea:d4:77:11:fb:79:a8:e5:01:45:
85:cd:3c:2a:27:8c:1b:3a:6f:07:77:c8:86:00:fa:
39:dd:13:03:dc:75:8d:a8:a2:3c:74:77:d3:55:61:
05:f7:ec:04:e0:af:66:05:72:56:9e:fb:1e:dd:57:
44:5b:1d:75:c2:6f:27:b6:b1:af:f5:3e:82:d1:5f:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F6:DC:AE:8F:C3:ED:B0:67:1E:9B:59:FD:81:06:9A:57:24:B3:D3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PPbcro_D7bBnHptZ_YEGmlcks9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.132.0/23
93.171.170.0/23
93.171.250.0/23
95.47.196.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:a8:24:40:1c:80:41:68:a5:9c:6d:b3:96:96:81:62:bd:6d:
b0:b3:9d:be:ed:b0:88:bd:69:60:ba:22:be:f9:6a:c6:38:09:
9c:bf:c5:a2:35:c6:e8:f2:01:19:83:3c:01:5e:e6:88:1f:66:
f2:a3:0b:a9:00:a2:e3:4d:ab:f6:b3:80:d0:d6:db:3c:04:9d:
0b:2a:61:6c:07:ac:54:e1:6f:69:a2:3c:aa:4f:6a:54:28:e2:
28:1d:2c:01:f4:42:d7:5a:4e:19:ed:2f:d7:b0:ab:79:10:a7:
9f:a2:53:b2:77:d5:9b:ec:f0:bd:21:3f:82:6f:d7:ad:21:98:
67:0d:b7:9b:33:51:12:14:81:bf:aa:0b:b3:1e:03:28:02:a5:
1e:3f:3e:8c:10:57:11:18:88:ee:6e:46:2e:9d:89:16:96:5f:
aa:eb:0f:a2:63:41:79:d6:14:56:9e:11:55:73:2e:ff:02:20:
70:0e:dd:a6:45:1f:ca:72:0c:44:32:f4:3b:81:fb:96:1a:9c:
9c:90:33:15:32:c1:01:c4:ad:29:8d:ab:d5:56:e2:f0:a0:ed:
18:c1:63:e2:d2:0f:e4:36:78:7f:84:cb:53:72:75:33:b6:c1:
45:b9:6c:85:3f:ad:ce:c9:c2:11:b8:3c:2c:9b:46:51:7e:8d:
4a:e7:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:47 2025 by rpki-client