Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Rk_83LLGN-whc-Kbz21ePkBllCE.roa
File: Rk_83LLGN-whc-Kbz21ePkBllCE.roa (raw, json)
Hash identifier: yoXNBMIubrq5QgublDkkjR5vMlq7kZ0il0NX+pvsmDw=
Subject key identifier: 46:4F:FC:DC:B2:C6:37:EC:21:73:E2:9B:CF:6D:5E:3E:40:65:94:21
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FC1F7106495A6A8B0271BF77F2691
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Rk_83LLGN-whc-Kbz21ePkBllCE.roa
Signing time: Thu 02 Jan 2025 05:49:25 +0000
ROA not before: Thu 02 Jan 2025 05:49:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56527
IP address blocks: 93.170.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c1:f7:10:64:95:a6:a8:b0:27:1b:f7:7f:26:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=464ffcdcb2c637ec2173e29bcf6d5e3e40659421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:55:12:57:20:bb:cd:31:eb:c0:e3:7a:90:
fe:c8:12:e1:91:6e:85:03:7b:49:55:66:a1:4a:80:
be:7f:7c:4f:ed:47:91:ec:5c:af:54:c1:53:8e:18:
f2:32:6b:26:cd:e3:52:66:ad:4e:20:3f:72:d7:db:
4a:5d:88:9f:d8:c9:17:63:16:7a:4f:fd:18:ef:65:
51:63:d4:cc:9a:c7:37:6b:f7:99:51:1b:61:dd:06:
32:ce:ba:5a:80:62:b2:3c:bc:c5:86:3b:da:3a:f0:
b8:c3:59:97:fb:49:2d:85:a8:50:d2:fa:c2:da:5b:
48:a0:42:e7:00:a2:dc:5d:7d:f6:6c:5d:5c:8a:cc:
c8:f9:3f:c4:72:c9:05:0c:8c:57:03:23:49:70:28:
0d:0d:f2:1a:7f:dd:d6:91:3a:d5:30:3d:2a:d0:7e:
e0:8c:aa:d7:cd:3c:27:ee:54:6d:57:3d:37:1b:d7:
c2:9e:54:96:8e:0f:7f:74:bc:5b:9e:bb:95:bf:2c:
77:67:cb:e6:51:31:d8:1a:b7:76:c8:87:9e:99:90:
fa:03:30:94:b0:45:71:c3:ac:fb:90:e2:3a:97:72:
b6:c8:46:30:94:2f:cc:5d:62:e4:ae:25:da:13:57:
00:fa:f7:3d:e3:a5:6a:d5:16:de:7f:30:b8:47:1f:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4F:FC:DC:B2:C6:37:EC:21:73:E2:9B:CF:6D:5E:3E:40:65:94:21
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Rk_83LLGN-whc-Kbz21ePkBllCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.80.0/24
Signature Algorithm: sha256WithRSAEncryption
50:70:54:90:56:81:63:ef:a8:3c:45:ad:42:3e:32:01:4b:39:
58:71:8f:75:d9:e5:af:c0:2d:12:2c:ca:ab:77:c3:1e:28:18:
85:4c:95:3f:17:53:47:94:bc:b1:ae:aa:47:cd:0d:16:98:b3:
9e:c3:96:2c:f4:6b:a5:e3:7b:ad:25:c2:94:b8:57:26:08:88:
c3:48:e3:d0:f8:86:f0:b5:18:4f:55:bf:9a:78:4b:fa:2e:3b:
68:3e:0e:8c:9b:75:d1:90:d1:98:18:7d:d7:0b:94:b3:15:90:
65:80:3b:9a:e7:8f:6d:97:86:95:4c:3b:13:96:a7:12:06:2a:
c1:42:d7:4d:9d:6b:7d:d2:d7:ab:af:1b:14:ba:37:f3:10:b0:
fe:14:98:c8:96:a6:ba:10:2d:11:bd:59:51:59:d8:e9:60:01:
07:dd:d8:be:a2:a9:6a:d9:29:ab:ad:e1:89:fd:6f:b9:75:38:
ca:23:f3:bc:6e:30:b0:46:11:db:35:a3:57:0b:00:45:2a:2c:
86:59:4b:30:72:84:8c:6c:1a:8d:fc:5d:c7:88:61:43:57:d9:
89:c9:13:1a:bb:83:d9:56:91:67:4a:f1:05:80:3b:69:d1:ea:
f2:56:54:59:b6:ac:27:52:da:6d:4e:13:0d:21:7b:b0:17:7a:
3f:4f:f1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:29 2025 by rpki-client