Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uv-j4ArpsOoB7uWGCu_eKv5VNXY.roa
File: Uv-j4ArpsOoB7uWGCu_eKv5VNXY.roa (raw, json)
Hash identifier: ut3VkpbNYu9y99JsWA7+YFJekrvzK5XfhNxHC7ytmbo=
Subject key identifier: 52:FF:A3:E0:0A:E9:B0:EA:01:EE:E5:86:0A:EF:DE:2A:FE:55:35:76
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018B7078564D099BF2209FB59D4A9D9785DD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uv-j4ArpsOoB7uWGCu_eKv5VNXY.roa
Signing time: Fri 27 Oct 2023 09:30:16 +0000
ROA not before: Fri 27 Oct 2023 09:30:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208038
IP address blocks: 93.170.122.0/24 maxlen: 24
2a02:128:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:78:56:4d:09:9b:f2:20:9f:b5:9d:4a:9d:97:85:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 27 09:30:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52ffa3e00ae9b0ea01eee5860aefde2afe553576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:71:dd:ee:4c:4d:79:ab:80:02:eb:f1:f9:
24:0e:ab:38:3e:b7:ee:a7:46:12:0e:5b:8b:75:2e:
8d:13:8f:24:cb:53:60:ff:63:7e:a3:37:ca:5a:c5:
f7:d4:c7:fc:a2:cd:b8:55:a4:67:43:06:8a:8a:cb:
fb:07:6e:6f:d5:2c:52:2e:26:18:a0:ab:06:c2:52:
f7:ff:4c:fb:58:0a:e3:d2:73:3f:5d:f0:0c:43:cc:
6d:30:de:c7:63:e6:97:69:eb:1c:48:99:bd:45:86:
1c:d7:ef:04:56:f0:ba:74:69:d9:8b:36:f9:20:2b:
44:d2:e5:bb:58:87:87:61:6b:d3:52:18:23:e9:10:
1e:ed:85:97:9c:1d:89:3b:af:55:5a:ee:73:e4:b6:
60:92:92:0c:37:66:4a:a4:ab:23:b7:c2:a8:a9:30:
03:1a:6f:9a:56:1f:18:ee:7d:6f:7f:68:b7:18:51:
36:cb:4f:db:75:e5:1f:39:09:62:d3:93:04:3a:08:
b1:78:db:61:5b:48:81:00:0f:f4:21:95:79:7c:50:
32:d6:b2:6b:cb:3b:60:c7:50:d7:14:10:36:22:58:
23:ee:a3:ea:6f:45:cc:73:9a:71:6f:b3:9b:1a:b4:
ee:b1:af:a1:ec:e2:a6:10:f2:0a:d8:51:04:5f:68:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FF:A3:E0:0A:E9:B0:EA:01:EE:E5:86:0A:EF:DE:2A:FE:55:35:76
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Uv-j4ArpsOoB7uWGCu_eKv5VNXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.122.0/24
IPv6:
2a02:128:20::/48
Signature Algorithm: sha256WithRSAEncryption
5f:c6:55:6a:48:3c:5e:76:bb:be:86:47:0a:14:a2:af:c1:df:
c3:ba:3e:54:ec:08:33:ec:04:ec:d0:52:c7:5d:aa:e9:c8:90:
94:41:3c:84:65:bf:ee:ab:2e:7a:35:48:1e:d2:15:f6:20:a8:
31:48:97:98:69:1f:f7:81:64:04:d4:a1:f2:5d:04:34:de:5a:
51:c9:e9:99:96:8c:12:80:4d:59:5a:35:aa:72:30:a3:c9:db:
1b:be:b3:cf:ca:24:61:fc:71:0e:99:27:9c:63:ae:95:2f:dc:
d0:1b:ac:da:f1:16:0e:00:92:63:fa:fd:ce:40:d7:16:55:61:
34:ec:91:5f:90:c2:25:c8:31:2b:38:16:64:99:64:dd:90:8c:
a6:0c:b7:9c:6c:5b:47:1e:ae:6c:3a:0a:03:26:55:ed:05:15:
27:12:18:a9:42:ef:06:7b:16:64:55:e5:21:52:89:f0:e5:b5:
81:be:95:39:3f:32:9d:99:a5:c0:ab:3c:20:46:36:80:07:47:
5b:3f:10:f5:92:0a:42:31:4c:fe:d5:6d:38:7d:94:c4:ec:02:
57:24:cc:77:4e:2d:95:8f:2d:c3:fb:53:38:14:03:b2:39:80:
5b:4f:8e:35:05:04:89:5b:d6:87:23:5a:b3:a9:90:63:b0:c4:
95:e0:35:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:29 2025 by rpki-client