Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P_E7GbDM6jPkxYplhsyGJWN5gN4.roa
File: P_E7GbDM6jPkxYplhsyGJWN5gN4.roa (raw, json)
Hash identifier: SfHIpfXMK5cwj8FXfNBac9AOaZx79xjbPZ54hWe79Cw=
Subject key identifier: 3F:F1:3B:19:B0:CC:EA:33:E4:C5:8A:65:86:CC:86:25:63:79:80:DE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FDAEA07EB0671A8AE7152B44FAFB2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P_E7GbDM6jPkxYplhsyGJWN5gN4.roa
Signing time: Thu 02 Jan 2025 05:49:32 +0000
ROA not before: Thu 02 Jan 2025 05:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61406
IP address blocks: 93.171.100.0/22 maxlen: 24
95.47.170.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:da:ea:07:eb:06:71:a8:ae:71:52:b4:4f:af:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ff13b19b0ccea33e4c58a6586cc8625637980de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b7:29:c0:09:e2:1c:12:74:18:f2:35:af:93:
29:0e:76:7a:54:a3:ab:27:48:ea:da:42:3b:9f:59:
35:96:8c:e5:93:b9:b9:91:d9:c2:f7:df:9f:a1:b5:
e1:fd:1f:43:d2:a9:2b:0f:86:03:4c:f1:0a:14:87:
0c:e5:55:f6:28:a0:ee:5a:f9:00:06:63:e1:11:1b:
d3:bb:f9:f3:5d:6d:af:da:49:b0:13:23:77:1e:e6:
05:ee:fe:a1:a1:b6:d8:d9:c6:b2:a1:81:11:74:52:
73:e8:35:74:41:c3:f9:08:6d:f2:1b:8a:54:b9:0c:
3f:1c:c6:81:95:2d:d7:b4:24:f8:26:f5:9d:06:4c:
bc:6f:80:f1:2e:3d:1b:54:20:b8:3c:50:19:6f:9f:
65:17:80:2c:cb:33:9f:06:67:ae:24:ca:2b:58:77:
ce:cd:1c:47:49:67:ad:77:27:a4:9c:1c:ad:74:77:
5d:48:59:4d:b7:2b:b1:17:d0:f6:cf:36:6b:e0:ad:
03:e9:a8:27:cf:3d:5f:65:7a:23:12:6b:8b:a2:c1:
7a:20:69:2c:ae:93:56:a6:39:a6:69:9a:31:94:10:
e8:34:49:d4:01:9c:0f:31:67:dd:82:09:ce:58:da:
e8:33:e8:67:57:0d:8d:77:68:f9:37:d0:9b:b2:2d:
10:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F1:3B:19:B0:CC:EA:33:E4:C5:8A:65:86:CC:86:25:63:79:80:DE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/P_E7GbDM6jPkxYplhsyGJWN5gN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.100.0/22
95.47.170.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:da:a7:bf:aa:31:d9:88:b2:53:c6:ab:5a:e1:17:d5:8f:fc:
f8:64:67:73:25:bd:a5:4e:fd:e0:20:2a:af:45:92:bf:94:7f:
b7:67:06:95:fb:68:7b:29:8e:c9:fc:3e:6a:d5:8a:7e:c6:b6:
58:91:e0:78:80:af:a2:3e:73:39:62:17:6b:7e:17:0b:94:e6:
12:df:e1:9a:6e:30:ba:eb:df:17:92:89:6f:ba:f9:98:63:0b:
59:83:04:2d:c3:96:98:33:f7:31:f9:05:83:6c:36:dc:0c:d1:
21:54:57:86:ff:5f:f2:d5:8e:98:ef:8a:96:d7:e9:07:5d:4d:
46:ba:d7:07:c4:75:d3:0a:e5:ba:6d:83:65:3b:44:87:eb:99:
fc:7f:3f:6f:cf:94:bc:2c:28:5a:e6:f8:01:2b:40:15:a4:64:
3d:33:61:ed:eb:d5:69:c2:df:33:c7:ba:27:5c:b6:36:1a:71:
70:86:07:1b:17:e2:a9:03:33:75:21:8c:d1:41:39:e3:fa:52:
8e:d7:98:0f:75:f8:48:28:35:29:2a:5c:4f:a9:e4:0e:85:99:
d4:fc:d9:87:84:b6:12:8b:5b:23:48:bd:e1:03:d6:24:38:1c:
24:e7:f0:d1:f2:af:81:ae:45:51:e5:d1:ae:1f:31:41:9a:67:
0e:1a:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:13 2025 by rpki-client