Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ROLrrA9aAn1-oMWVKdQ96HYJbAA.roa
File: ROLrrA9aAn1-oMWVKdQ96HYJbAA.roa (raw, json)
Hash identifier: dsG2bYo2XexsP9D4TKIM7nFilCYROquv8jA28LAP5dM=
Subject key identifier: 44:E2:EB:AC:0F:5A:02:7D:7E:A0:C5:95:29:D4:3D:E8:76:09:6C:00
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018A3BBBD60E874CBF3F09513C05528A1FDD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ROLrrA9aAn1-oMWVKdQ96HYJbAA.roa
Signing time: Mon 28 Aug 2023 10:41:20 +0000
ROA not before: Mon 28 Aug 2023 10:41:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61390
IP address blocks: 93.171.40.0/22 maxlen: 24
92.38.33.0/24 maxlen: 24
93.170.108.0/22 maxlen: 24
146.158.60.0/22 maxlen: 24
93.171.182.0/23 maxlen: 24
146.120.120.0/22 maxlen: 24
146.120.236.0/22 maxlen: 24
95.46.116.0/22 maxlen: 24
93.170.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:bb:d6:0e:87:4c:bf:3f:09:51:3c:05:52:8a:1f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 28 10:41:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44e2ebac0f5a027d7ea0c59529d43de876096c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:78:73:ef:c0:ca:6d:37:7e:2f:23:2d:1e:60:
28:7d:aa:42:c6:d4:8b:86:f2:18:4c:2a:56:92:c1:
b4:0a:33:59:76:6d:27:ef:4e:ff:7a:1b:bd:f6:4b:
6d:b5:f8:ab:51:93:4b:df:46:84:dc:1b:7d:8f:86:
ca:91:79:05:de:93:83:ce:bb:b2:71:37:fc:a3:e2:
53:24:79:de:29:de:1d:1e:76:fd:90:83:79:a9:00:
1a:64:28:c3:17:f0:0b:45:4b:d3:62:ec:38:bf:79:
8c:c1:14:c1:dd:b3:4c:6a:50:f8:26:2d:f3:3f:57:
85:37:71:a9:40:75:53:01:1a:b1:74:35:d6:2c:de:
b4:4e:ef:2c:c9:f7:f3:90:25:3d:89:ed:62:5a:1d:
19:f0:4e:9f:18:50:96:2c:a6:b7:fe:69:48:c5:e1:
4f:15:d6:96:c4:70:92:64:42:32:e8:51:b2:5c:00:
8c:f3:a4:58:d6:d7:cd:fa:b8:2b:12:df:dc:b3:31:
b1:7c:44:97:21:21:7a:f5:0c:eb:0b:cc:15:47:f1:
9e:8c:e8:cb:e3:a9:4b:ce:d5:3e:41:90:28:33:69:
47:fa:9a:5a:50:3e:3f:fa:48:f4:ad:cf:b9:ba:02:
43:ec:92:55:d6:57:91:7c:17:49:28:15:58:7b:90:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E2:EB:AC:0F:5A:02:7D:7E:A0:C5:95:29:D4:3D:E8:76:09:6C:00
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ROLrrA9aAn1-oMWVKdQ96HYJbAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.33.0/24
93.170.108.0/22
93.170.180.0/22
93.171.40.0/22
93.171.182.0/23
95.46.116.0/22
146.120.120.0/22
146.120.236.0/22
146.158.60.0/22
Signature Algorithm: sha256WithRSAEncryption
21:d3:61:53:06:2a:bf:da:65:f9:9e:82:d3:92:34:bb:25:f1:
3e:a1:48:95:95:90:37:c6:7a:6b:ea:25:30:b9:03:80:85:85:
a1:80:fc:59:6f:ad:40:bd:2f:c2:a5:ee:11:40:7f:99:33:fc:
68:ec:2c:b7:70:df:bc:22:55:f5:6b:fe:a2:5f:67:ca:90:83:
c7:19:d7:02:65:15:7c:c6:e3:16:90:16:30:e8:2e:ec:63:da:
8f:b0:32:ea:96:6a:db:4f:50:87:19:cc:51:b0:c4:14:de:32:
df:94:5a:52:60:fd:70:1b:34:e6:1e:20:63:c7:03:39:56:b8:
c4:44:50:db:2b:a9:80:38:8a:15:44:85:d3:6b:4c:96:7d:d8:
bf:3b:ec:2c:74:48:e2:f9:e9:a3:d3:99:f6:3a:63:9b:d5:3c:
31:8f:30:db:66:0f:20:83:a8:12:c1:25:74:71:ec:dd:9f:0e:
a3:f5:6f:94:87:ed:c1:47:9b:aa:e8:08:06:39:0d:98:d6:06:
d6:28:60:4c:30:29:e5:47:81:67:df:75:92:20:25:a7:da:8c:
13:f5:7a:76:38:45:86:68:86:2d:62:78:41:3a:24:fc:dd:df:
11:3b:f2:ac:91:42:eb:62:89:27:0a:5a:16:20:94:3c:6c:94:
8e:84:a7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:42 2025 by rpki-client