Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Priq7Lq9zIna3xZoQE3AQXGYExU.roa
File: Priq7Lq9zIna3xZoQE3AQXGYExU.roa (raw, json)
Hash identifier: ZBCNlR9iRISChAT8HilpzUeXkC7iE78zF+/RkZ9Cj5s=
Subject key identifier: 3E:B8:AA:EC:BA:BD:CC:89:DA:DF:16:68:40:4D:C0:41:71:98:13:15
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194F64B13D7A8D8EC5430E0A42CC1331CD0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Priq7Lq9zIna3xZoQE3AQXGYExU.roa
Signing time: Tue 11 Feb 2025 18:35:02 +0000
ROA not before: Tue 11 Feb 2025 18:35:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39523
IP address blocks: 93.170.248.0/23 maxlen: 24
146.120.215.0/24 maxlen: 24
146.120.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f6:4b:13:d7:a8:d8:ec:54:30:e0:a4:2c:c1:33:1c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 11 18:35:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eb8aaecbabdcc89dadf1668404dc04171981315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:95:41:c0:8e:20:fa:95:45:51:f3:36:5f:
8f:b2:0a:62:3a:6c:83:68:ca:a1:c3:26:52:58:46:
19:7d:6a:f5:29:14:06:ce:6f:48:97:f3:d3:d7:aa:
a3:de:66:e2:a5:af:a1:43:c8:71:f4:a2:46:af:08:
fa:6c:5c:d9:51:0b:74:4c:64:5a:fa:39:d5:7f:b0:
2b:11:44:0c:0d:00:a6:da:d3:b3:b8:cf:10:1a:73:
4b:f2:41:36:a5:9f:66:59:c7:ea:04:c1:c8:fc:2a:
69:dd:0c:10:a4:6f:29:c5:82:ef:1c:32:0a:60:50:
3f:f3:24:0a:98:53:e5:ef:26:49:1d:e6:10:05:df:
19:7e:4e:dd:22:5c:06:47:c2:ff:55:b2:a7:06:77:
51:2b:a1:8e:e0:fa:f6:5c:e1:fd:9a:59:33:26:54:
52:9e:0f:77:4d:fa:61:1a:20:3c:01:70:26:50:c7:
4b:f1:7c:26:d7:4d:48:77:09:f1:9a:20:fd:11:5c:
4d:e9:bd:a3:54:91:93:55:01:32:98:5d:05:51:5e:
62:6a:56:88:99:18:49:40:18:d4:67:01:d6:7c:33:
a4:86:bf:ce:8b:11:96:f4:64:e5:d7:1d:f0:4b:45:
19:bb:3d:7c:38:78:81:d2:61:65:3b:c5:33:a7:43:
77:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B8:AA:EC:BA:BD:CC:89:DA:DF:16:68:40:4D:C0:41:71:98:13:15
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Priq7Lq9zIna3xZoQE3AQXGYExU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.248.0/23
146.120.215.0-146.120.219.255
Signature Algorithm: sha256WithRSAEncryption
a2:ce:6c:cc:9b:ed:07:df:20:96:d9:d3:ae:5f:7e:76:22:0d:
74:74:50:fe:f1:64:dc:04:9c:89:32:6e:73:96:ea:0a:73:b2:
51:55:0e:46:b8:7b:56:66:01:30:64:ad:2d:e4:fe:62:16:d7:
58:2c:46:0c:6a:95:10:fd:f0:dd:63:6a:d3:fa:06:71:8a:cc:
02:b2:1c:ab:c9:dd:6f:1b:78:29:86:d8:34:58:4e:e7:1c:dc:
45:31:fc:05:53:ff:39:23:c9:4f:c4:3c:55:11:23:34:06:02:
d9:9f:b6:ad:5d:2c:11:66:3a:8b:54:8e:f4:d1:76:ac:b3:f8:
a6:0c:88:df:dd:93:0a:28:4a:4b:44:01:9c:a1:9b:57:02:5e:
44:bd:36:51:f2:9d:a8:07:8b:72:3f:7e:39:f8:f2:5a:a5:9c:
e0:86:1b:ff:b2:04:6b:8d:8b:8b:69:c9:8f:c5:f4:b7:de:a1:
33:61:24:dd:3a:64:54:99:87:8f:fe:54:b3:2c:c3:ab:6c:41:
45:ae:e4:05:d3:17:a5:0e:7c:2e:4f:43:7b:f4:20:d4:5e:c5:
ca:02:d1:78:64:15:44:9a:da:d6:3e:03:15:a9:c0:7d:d4:6d:
4a:df:f9:90:3e:e5:96:dd:8a:ba:a5:a1:9d:bf:fc:f7:ad:28:
d0:e5:5d:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:54 2025 by rpki-client