Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QZ0XT0A0Bn9Dr21HVpUr2_riGqc.roa
File: QZ0XT0A0Bn9Dr21HVpUr2_riGqc.roa (raw, json)
Hash identifier: H/+nxb9Bp/jNOeoMWHdWnw5HFTVbI/qlkFN98rjvV+U=
Subject key identifier: 41:9D:17:4F:40:34:06:7F:43:AF:6D:47:56:95:2B:DB:FA:E2:1A:A7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 276EE689
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QZ0XT0A0Bn9Dr21HVpUr2_riGqc.roa
Signing time: Sat 01 Jan 2022 16:08:02 +0000
ROA not before: Sat 01 Jan 2022 16:08:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40983
IP address blocks: 93.170.216.0/24 maxlen: 24
93.171.231.0/24 maxlen: 24
93.171.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 661579401 (0x276ee689)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=419d174f4034067f43af6d4756952bdbfae21aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ae:89:79:63:47:9c:de:f5:dc:eb:ef:88:57:
60:a4:57:ec:b8:19:63:e6:77:e4:ec:58:6a:f4:e2:
59:ca:26:ac:e2:2f:ff:e0:15:78:b3:25:1a:eb:3d:
ea:27:64:c9:2d:96:fb:99:e8:3b:a9:94:30:fe:a3:
33:cf:c1:e8:78:b2:66:38:fb:81:f9:ec:8d:e7:7f:
f7:54:cc:4e:b3:a9:7d:7a:81:9a:e6:51:65:95:ef:
bf:d5:4e:d6:f3:47:21:36:db:6d:c6:1d:65:3c:64:
ae:58:b8:85:87:74:04:47:39:6d:7c:2c:a4:18:b1:
8f:c1:b3:5f:1f:5b:17:48:bd:08:2f:71:df:9b:d7:
04:cb:92:ee:ce:72:8a:97:6d:d8:1f:fe:46:af:5c:
07:b9:7a:6f:4d:a3:d3:b7:04:25:16:73:e5:4d:72:
90:48:37:d2:fa:8e:fe:06:ab:42:55:f9:5e:93:40:
dd:2b:3b:68:e2:e0:e0:e3:fb:ea:08:89:22:36:df:
36:fe:10:b7:99:2e:a7:84:12:83:85:e0:99:b8:9f:
ca:f7:da:4c:c4:1c:98:75:f6:5e:2a:2e:8d:77:90:
87:be:24:6d:07:fd:83:1f:6f:8c:61:d3:6e:cd:49:
42:97:a7:45:9c:a8:f3:94:a6:e1:cc:ae:5e:be:66:
a8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9D:17:4F:40:34:06:7F:43:AF:6D:47:56:95:2B:DB:FA:E2:1A:A7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QZ0XT0A0Bn9Dr21HVpUr2_riGqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.216.0/24
93.171.231.0/24
93.171.245.0/24
Signature Algorithm: sha256WithRSAEncryption
53:44:e2:ec:78:41:95:c7:50:c9:f9:c1:78:17:cc:a2:ab:4b:
c8:fb:9d:58:e1:52:bb:e0:0f:70:c8:d9:aa:94:db:f2:3f:d4:
21:97:a3:11:1a:eb:5e:48:e0:6a:32:9a:de:32:d9:3f:0f:c4:
4e:e0:2d:47:0c:8f:14:14:f1:63:6a:02:d2:36:46:d3:50:6d:
71:8b:12:b5:6b:60:28:fb:cd:03:a5:fa:70:fb:c3:9e:18:e3:
4a:ee:0f:2f:f8:f8:23:ee:aa:61:ef:14:b4:96:a8:76:4c:6b:
05:2e:03:69:d0:3a:29:16:d3:dd:e9:67:b7:1a:7d:c0:dd:f6:
3e:aa:3a:81:56:a2:c0:23:3a:5a:28:05:53:b1:8e:df:42:43:
bf:cd:ed:f8:0c:42:3e:1c:5c:9a:67:0b:a6:fd:a3:fb:62:07:
18:59:ae:ea:02:66:20:ee:86:d0:a1:8a:e7:94:52:2f:b0:e5:
b7:93:7e:e0:5c:2c:04:85:f7:2f:e2:91:0e:35:d5:0d:f7:1f:
4e:61:68:ce:55:86:50:37:f6:49:32:50:39:2b:c9:88:ce:af:
ad:79:17:9f:55:58:1e:f8:da:47:71:46:82:d1:92:ec:8e:08:
81:7a:be:17:a1:a4:88:2c:70:70:e3:d8:0d:28:34:1b:d2:67:
23:c8:f2:3c
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEJ27miTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDgwMloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDE5ZDE3NGY0MDM0
MDY3ZjQzYWY2ZDQ3NTY5NTJiZGJmYWUyMWFhNzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALauiXljR5ze9dzr74hXYKRX7LgZY+Z35OxYavTiWcomrOIv
/+AVeLMlGus96idkyS2W+5noO6mUMP6jM8/B6HiyZjj7gfnsjed/91TMTrOpfXqB
muZRZZXvv9VO1vNHITbbbcYdZTxkrli4hYd0BEc5bXwspBixj8GzXx9bF0i9CC9x
35vXBMuS7s5yipdt2B/+Rq9cB7l6b02j07cEJRZz5U1ykEg30vqO/garQlX5XpNA
3Ss7aOLg4OP76giJIjbfNv4Qt5kup4QSg4XgmbifyvfaTMQcmHX2XioujXeQh74k
bQf9gx9vjGHTbs1JQpenRZyo85Sm4cyuXr5mqKcCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBRBnRdPQDQGf0OvbUdWlSvb+uIapzAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L1FaMFhUMEEwQm45RHIyMUhWcFVyMl9yaUdxYy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAF2q2AMEAF2r5wMEAF2r9TANBgkq
hkiG9w0BAQsFAAOCAQEAU0Ti7HhBlcdQyfnBeBfMoqtLyPudWOFSu+APcMjZqpTb
8j/UIZejERrrXkjgajKa3jLZPw/ETuAtRwyPFBTxY2oC0jZG01BtcYsStWtgKPvN
A6X6cPvDnhjjSu4PL/j4I+6qYe8UtJaodkxrBS4DadA6KRbT3elntxp9wN32Pqo6
gVaiwCM6WigFU7GO30JDv83t+AxCPhxcmmcLpv2j+2IHGFmu6gJmIO6G0KGK55RS
L7Dlt5N+4FwsBIX3L+KRDjXVDfcfTmFozlWGUDf2STJQOSvJiM6vrXkXn1VYHvja
R3FGgtGS7I4IgXq+F6GkiCxwcOPYDSg0G9JnI8jyPA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:52 2025 by rpki-client