Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R_aw0lKg82Ef4sH-MEFNWylDD8Q.roa
File: R_aw0lKg82Ef4sH-MEFNWylDD8Q.roa (raw, json)
Hash identifier: OVtA09mJVDrnjCFEcaX25RvhC7J96dzc7TDJUWjoQbg=
Subject key identifier: 47:F6:B0:D2:52:A0:F3:61:1F:E2:C1:FE:30:41:4D:5B:29:43:0F:C4
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A58226A74DB0EB537324C9D3A5C69
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R_aw0lKg82Ef4sH-MEFNWylDD8Q.roa
Signing time: Tue 02 Jan 2024 12:33:41 +0000
ROA not before: Tue 02 Jan 2024 12:33:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212913
IP address blocks: 93.170.123.0/24 maxlen: 24
95.46.114.0/24 maxlen: 24
31.148.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:58:22:6a:74:db:0e:b5:37:32:4c:9d:3a:5c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47f6b0d252a0f3611fe2c1fe30414d5b29430fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:9f:01:ea:b4:79:16:a7:d4:2b:13:77:8c:
66:89:ed:d6:0d:ef:84:af:6e:5b:07:7b:6c:14:35:
25:0a:f2:ad:0f:5f:31:7f:b4:16:30:7d:6a:18:94:
b8:3b:84:8a:0b:72:a0:2c:6b:21:1e:a5:5e:a4:53:
e6:7b:32:ae:2e:d0:d0:f6:fb:a2:0c:5d:fb:d3:4d:
fa:dc:48:4d:70:d3:1e:f5:f8:bb:06:47:9f:3d:f6:
2c:13:29:c6:23:59:6a:19:43:22:82:29:ec:cf:d2:
b7:a6:03:d7:e4:1b:62:36:a6:c1:03:8c:e6:a1:d2:
60:64:fa:4d:78:c5:d6:80:e0:97:38:15:68:2e:60:
23:f2:72:a2:65:cb:e5:e0:d5:78:02:0e:43:7c:b3:
56:06:49:ea:cc:76:cb:b4:0a:58:67:d6:cf:d4:1c:
b1:e5:aa:e6:91:9b:2d:90:08:98:1c:65:dd:b9:34:
16:ee:c8:2f:53:c8:3a:7e:32:8e:77:8a:62:eb:83:
f0:59:79:a1:b1:7a:c9:9d:f4:43:06:73:f9:3a:03:
9c:98:b9:df:ae:00:37:46:a4:af:40:c1:8b:17:0f:
88:eb:b2:65:b2:79:48:d7:40:46:9e:4c:5d:06:8b:
14:8e:72:e5:5c:7e:6b:51:fa:21:22:51:6c:0d:30:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:B0:D2:52:A0:F3:61:1F:E2:C1:FE:30:41:4D:5B:29:43:0F:C4
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/R_aw0lKg82Ef4sH-MEFNWylDD8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.99.0/24
93.170.123.0/24
95.46.114.0/24
Signature Algorithm: sha256WithRSAEncryption
94:16:ca:73:8f:79:44:c4:21:c9:63:67:91:14:af:56:e8:ad:
c3:df:bf:98:36:41:a2:b5:52:2d:2e:fe:a8:cb:a3:23:9e:2d:
5c:c7:90:6a:0e:72:44:34:5e:5e:5e:5b:13:89:77:80:2b:c0:
0e:e8:51:ae:48:78:ec:95:0b:f3:8a:85:ef:7a:cd:db:59:41:
e6:13:53:4f:a4:fd:41:d3:00:5c:bd:87:bb:be:2c:e1:56:b4:
69:87:4d:b8:f8:8b:50:30:50:ad:be:60:d3:84:c3:1a:f1:45:
ad:5e:48:1e:42:d0:3d:2f:8d:87:47:a4:21:62:e5:09:06:d1:
cc:a0:a6:d4:62:4e:f9:27:75:7b:f6:6f:be:c6:ce:51:01:f3:
84:2e:9a:13:ec:82:d4:f6:3c:6c:c9:18:f3:ec:b8:ac:cb:61:
97:96:a1:b1:db:86:0d:2c:30:2e:0f:33:96:13:fe:79:06:3f:
8c:0f:79:5c:7a:e3:68:cc:fd:47:aa:f8:aa:86:29:7e:96:f6:
a9:2f:c9:ca:9d:2f:25:a6:dd:2e:be:b0:22:d4:b7:bf:31:27:
97:bb:01:b5:b3:1f:5c:b9:a1:43:33:10:27:9e:65:ec:63:4b:
25:de:8c:75:87:20:d1:93:51:e7:57:c0:71:a2:5d:1e:fb:f8:
2b:ff:f5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:36 2025 by rpki-client