Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RIPb3B7UcA3e-R61JmDkfPO25wM.roa
File: RIPb3B7UcA3e-R61JmDkfPO25wM.roa (raw, json)
Hash identifier: 4gEM6qha/OoiAueCPp8IaYLq5l5OJqCSdHC2yZ83BXU=
Subject key identifier: 44:83:DB:DC:1E:D4:70:0D:DE:F9:1E:B5:26:60:E4:7C:F3:B6:E7:03
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27A68A65
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RIPb3B7UcA3e-R61JmDkfPO25wM.roa
Signing time: Sat 01 Jan 2022 16:08:30 +0000
ROA not before: Sat 01 Jan 2022 16:08:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48949
IP address blocks: 93.171.181.0/24 maxlen: 24
95.47.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665225829 (0x27a68a65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4483dbdc1ed4700ddef91eb52660e47cf3b6e703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:9b:9d:cc:22:25:12:e4:95:c9:1d:55:fb:
4c:ec:e9:a8:4c:aa:14:9c:3a:9b:b3:7c:d5:ec:87:
89:67:4b:59:d3:05:c0:00:16:8e:43:4f:ba:16:d6:
45:18:b7:d1:30:2f:f3:60:2b:fd:1c:d9:8d:5e:94:
6e:0a:d0:06:c3:5a:e1:ba:d5:de:c3:e5:30:ee:fe:
6c:09:af:8b:f3:95:96:be:c5:d1:5a:30:a4:f8:05:
70:b3:c2:cc:9b:a9:27:38:db:7b:89:42:a9:51:fe:
45:bc:9b:b7:89:38:53:fd:05:aa:be:f1:07:c3:df:
e6:e4:8b:c2:ba:e1:ba:84:b4:0c:24:a1:39:33:ce:
73:99:99:17:ec:12:94:a4:40:04:64:2b:73:80:e4:
c3:6b:1d:29:44:a0:b1:59:28:f4:61:7b:8c:aa:07:
48:f5:22:45:14:db:30:2c:75:12:ef:50:22:cd:a0:
02:41:23:78:ed:ed:b7:10:64:2e:8a:90:6d:a5:01:
28:32:cc:7c:dd:89:f6:ca:2e:a5:c8:c8:9e:a5:c0:
bb:dc:af:38:de:a6:57:b5:69:3b:72:57:15:e5:79:
89:70:3d:62:ba:d0:f0:51:02:c3:90:f2:9d:4a:2c:
f7:79:48:60:a6:d2:70:5d:e0:ed:ad:e7:6c:40:5c:
56:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:83:DB:DC:1E:D4:70:0D:DE:F9:1E:B5:26:60:E4:7C:F3:B6:E7:03
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/RIPb3B7UcA3e-R61JmDkfPO25wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.181.0/24
95.47.176.0/24
Signature Algorithm: sha256WithRSAEncryption
42:88:28:4f:7a:10:2c:72:a9:ae:b8:a5:18:f5:5e:85:79:d9:
d1:ab:ac:41:82:19:80:9e:a5:79:83:97:9e:49:5e:ef:de:76:
61:9a:d2:1a:8e:5b:70:45:ff:31:aa:94:a8:a6:7f:a2:f9:ce:
94:bb:8f:dd:ed:8b:17:7a:c2:17:7d:bf:5b:de:fa:3a:f6:de:
82:c7:d0:6f:d4:20:e8:32:5d:38:b4:cb:12:e7:08:cc:ea:ee:
3f:fd:79:14:4d:c1:52:bc:c0:e4:ce:a6:00:e4:a9:0b:9d:67:
de:a0:90:5d:74:ae:8a:6f:41:70:e8:9b:69:54:18:cf:71:ee:
cc:df:28:2a:7a:a3:53:96:27:86:66:16:75:0b:c7:6e:eb:fb:
9f:8e:70:db:a9:4a:78:7d:2f:09:ee:8d:d5:05:8c:99:fe:17:
02:a4:b2:25:ac:3d:e8:e2:da:ef:c3:26:66:18:5e:c1:75:70:
1e:a7:d2:48:ed:1a:8e:78:e4:5f:7b:b8:15:f3:38:d0:03:f5:
a6:6b:d3:e3:1c:48:6e:88:ee:63:f1:bb:e0:68:1f:5a:f8:36:
47:d5:af:ea:d8:0a:23:46:86:df:10:9b:8a:51:88:c2:56:19:
bc:a8:51:b2:f6:47:2a:05:ca:88:27:6c:fc:67:b1:35:eb:a9:
37:18:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:54 2025 by rpki-client