Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QdmW3y4KAnF_Tmecw4lhDEJ0HZA.roa
File: QdmW3y4KAnF_Tmecw4lhDEJ0HZA.roa (raw, json)
Hash identifier: bsyranIwXQ2P3/CnsRlBPOQWzTRXeV5r46nuc6dbDr4=
Subject key identifier: 41:D9:96:DF:2E:0A:02:71:7F:4E:67:9C:C3:89:61:0C:42:74:1D:90
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095702488A7153BC6A20B9E3E3580EB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QdmW3y4KAnF_Tmecw4lhDEJ0HZA.roa
Signing time: Mon 02 Jan 2023 03:45:19 +0000
ROA not before: Mon 02 Jan 2023 03:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61116
IP address blocks: 95.46.155.0/24 maxlen: 24
93.171.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:70:24:88:a7:15:3b:c6:a2:0b:9e:3e:35:80:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41d996df2e0a02717f4e679cc389610c42741d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:d5:d4:c2:a4:5e:83:80:34:39:dd:00:c6:
ec:a6:16:b4:97:30:1d:2d:56:f7:6b:aa:cc:0e:34:
4b:45:34:e5:98:fe:42:9b:a5:16:f5:16:a1:df:b6:
26:71:f8:66:16:7b:e9:34:24:40:04:ae:fd:04:66:
ef:83:b6:aa:6b:8f:2a:2f:02:a5:f6:bb:fc:e7:c0:
d1:1c:f6:ed:fb:a2:00:fc:7e:93:55:a0:13:19:c8:
53:30:cf:2f:d2:89:1d:76:f1:61:df:65:75:c0:27:
44:5c:49:3b:ca:e1:70:4f:55:89:18:67:c3:fb:81:
e4:7d:5b:ce:e2:f6:3d:37:24:7a:eb:19:4a:c7:8d:
af:8d:b7:1c:9f:fa:d3:86:b2:44:6f:3b:e9:03:c3:
72:43:19:c7:c0:92:36:a0:0e:c4:fb:fd:56:5c:44:
d8:c4:45:54:1b:3d:82:da:ec:04:fe:37:75:bf:36:
4d:d7:6d:da:fc:bd:f6:3b:96:af:4e:ff:7b:6d:da:
86:52:61:33:35:f2:2f:64:0e:25:fc:2f:20:bf:00:
53:3d:fb:ee:b2:76:17:20:b3:9e:db:1d:c6:fe:c3:
5e:1e:f2:c7:e8:cd:9f:5e:fd:73:26:81:b0:8e:a0:
45:a9:c4:85:b0:6a:8f:c7:08:a6:6d:f8:fd:d9:2f:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D9:96:DF:2E:0A:02:71:7F:4E:67:9C:C3:89:61:0C:42:74:1D:90
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QdmW3y4KAnF_Tmecw4lhDEJ0HZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.225.0/24
95.46.155.0/24
Signature Algorithm: sha256WithRSAEncryption
96:97:fa:ca:98:2b:1d:3e:77:34:3c:df:23:7d:23:78:8a:e4:
20:a7:08:93:bc:eb:9c:2d:3a:60:54:39:1a:1d:f6:25:9a:a2:
df:53:4e:81:47:66:30:20:f6:28:fe:b9:35:d1:41:19:b6:be:
47:4a:0c:cc:77:94:e4:3b:e3:6e:f3:fd:59:0c:09:b1:43:a4:
91:00:48:40:31:b1:46:fb:76:7e:47:8f:d0:f3:dd:38:e8:62:
15:8a:3c:65:3e:61:a2:57:c0:c8:fd:45:57:3d:a4:01:d7:98:
c8:fc:3a:83:f5:d8:54:74:af:3a:05:da:ff:20:63:86:27:68:
23:d1:05:b3:cf:c0:1b:4c:8e:0a:d8:ce:e8:d4:d2:79:4c:65:
b5:66:ad:e8:e9:f4:67:a3:24:d9:a2:90:6e:ec:72:93:6c:2c:
56:a4:a8:c2:00:8a:8c:40:35:c6:ba:b5:71:e2:c4:ff:64:21:
0e:dd:d4:b4:41:2b:1a:7c:ca:4e:da:55:73:bc:ba:d8:40:52:
3c:b6:e9:6d:f8:3c:26:6a:63:3c:21:29:6e:fe:63:f0:72:81:
4d:d8:6f:ee:ec:b9:dc:dc:e8:be:43:fc:af:c9:ca:ab:a9:80:
e7:b6:b2:27:00:bf:87:87:a0:89:3d:f2:c6:57:b0:e4:cc:23:
13:e5:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:56 2025 by rpki-client