Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SdUetDkBguomW3UxuXaJtv77PTQ.roa
File: SdUetDkBguomW3UxuXaJtv77PTQ.roa (raw, json)
Hash identifier: mtVxrdeNhY1ybTE4gBW1BsyOlDfWBb6xqrWEX1ioSks=
Subject key identifier: 49:D5:1E:B4:39:01:82:EA:26:5B:75:31:B9:76:89:B6:FE:FB:3D:34
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F92D40A5CD9AEE5194EB5945BE224
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SdUetDkBguomW3UxuXaJtv77PTQ.roa
Signing time: Thu 02 Jan 2025 05:49:13 +0000
ROA not before: Thu 02 Jan 2025 05:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39667
IP address blocks: 93.170.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:92:d4:0a:5c:d9:ae:e5:19:4e:b5:94:5b:e2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49d51eb4390182ea265b7531b97689b6fefb3d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:54:f0:81:5a:1c:bc:91:43:6b:0b:fd:78:
4e:1e:d9:f3:f4:37:a6:3d:78:d8:c5:54:6a:c6:c0:
2f:6f:86:0a:8d:d3:9b:aa:93:be:36:ba:5a:af:22:
42:b5:0a:9a:cd:35:12:97:04:5c:9f:67:27:37:69:
4f:a5:59:30:db:bf:2b:6b:e3:c7:d3:b2:9a:40:70:
8a:86:b8:86:35:b8:bf:66:79:b8:3e:66:ae:e3:24:
17:e6:e5:b2:89:ec:0a:c6:09:3d:88:3a:c4:54:b4:
ec:19:98:08:00:db:4c:08:d1:28:3e:42:20:03:ee:
5e:53:1e:35:3a:f1:3f:7e:9a:8a:77:70:98:50:9a:
32:53:ca:0a:13:ed:d2:9c:02:f0:de:ae:df:6a:4d:
9f:ee:fe:66:5e:62:d7:75:25:f5:21:e2:37:5f:82:
1b:3f:27:a0:04:d0:8c:1b:d1:99:43:68:95:7d:52:
ef:95:2a:7e:86:11:9f:e7:45:a1:31:af:90:e2:be:
6f:67:35:9d:b3:65:e3:6a:38:8e:76:23:a4:26:c6:
fe:01:f3:d2:c1:94:9e:8d:b4:c9:70:53:01:5f:67:
e9:85:18:67:16:50:39:a1:3a:77:40:2f:82:30:b4:
f8:65:ab:36:2d:49:dd:5e:6f:b6:12:d1:ba:8e:94:
b1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D5:1E:B4:39:01:82:EA:26:5B:75:31:B9:76:89:B6:FE:FB:3D:34
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/SdUetDkBguomW3UxuXaJtv77PTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.217.0/24
Signature Algorithm: sha256WithRSAEncryption
79:91:de:91:b3:3d:17:49:b1:2f:6a:67:44:2f:1e:bf:9b:15:
14:8f:7e:bc:a5:3b:b0:91:43:c2:be:db:dd:41:88:79:81:fa:
6c:c4:17:fc:0e:2e:9e:58:bb:f7:28:d6:79:17:0e:84:fe:db:
94:73:cf:5e:ea:db:1a:16:70:a7:47:05:78:85:51:cc:48:5e:
c2:55:d5:80:82:5c:d7:1c:24:e5:65:86:a0:05:dd:03:93:0d:
66:07:85:fa:e8:58:51:3f:64:38:a8:4f:84:ef:4d:04:ae:7a:
c1:a5:39:ab:b2:e9:52:25:6c:ae:01:f9:b2:c6:bf:2b:fe:7f:
83:88:cd:be:0d:c7:4c:e6:22:f8:c5:56:04:0e:0c:71:e6:e7:
65:52:61:42:2d:ca:1d:66:34:65:db:cd:04:6f:20:7f:e9:29:
0c:49:58:e5:b6:8a:c1:02:4f:94:a3:7b:de:7b:49:56:39:63:
ea:be:c9:07:73:5d:fe:ad:46:7c:4a:7b:c8:db:f5:2e:ab:66:
aa:69:da:d3:e5:39:4b:db:0f:cd:fb:5c:a5:4e:d0:89:88:92:
42:e4:a3:c8:6b:9d:fd:fb:37:36:5f:ea:c7:dd:10:65:39:6e:
97:84:6b:f9:cc:da:0d:de:dd:34:0b:6b:93:00:de:c6:19:bf:
70:d6:31:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:45 2025 by rpki-client