Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VOMB-_7QjMIKp_-MazzmBvYRbss.roa
File: VOMB-_7QjMIKp_-MazzmBvYRbss.roa (raw, json)
Hash identifier: 4O4Rm29itJiN/RVtuhw/cMj63Sp8AN9q3XWe6SOyevg=
Subject key identifier: 54:E3:01:FB:FE:D0:8C:C2:0A:A7:FF:8C:6B:3C:E6:06:F6:11:6E:CB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570950B8CCE2D96A1698A4D95302BE1DF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VOMB-_7QjMIKp_-MazzmBvYRbss.roa
Signing time: Mon 02 Jan 2023 03:44:54 +0000
ROA not before: Mon 02 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25015
IP address blocks: 93.170.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0b:8c:ce:2d:96:a1:69:8a:4d:95:30:2b:e1:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54e301fbfed08cc20aa7ff8c6b3ce606f6116ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:da:7f:17:3b:c5:05:11:95:01:ba:c0:19:
79:17:59:46:50:12:ef:ed:a4:9c:ea:1c:5d:86:dd:
4f:b4:eb:d1:bf:62:cb:4b:49:be:40:0b:0c:6a:02:
bd:e1:6c:77:c6:da:a7:71:ce:69:9e:5b:fc:5d:c8:
f2:2c:6e:2a:11:b1:28:ab:0c:32:10:5e:86:91:a0:
1d:a1:54:0a:50:37:99:cb:1c:fe:1a:17:da:ee:86:
c7:dd:e0:79:16:9d:95:92:dd:e5:52:e0:99:90:a8:
25:b6:5f:67:5c:a5:2d:e2:f4:61:66:e5:c8:f4:0b:
1a:60:22:32:16:0f:c1:aa:af:5b:45:db:70:76:4e:
d0:45:43:77:c2:2a:08:1b:2c:94:01:ee:00:c8:5d:
3e:86:48:f2:d4:92:1e:f5:57:27:b4:06:d5:62:9f:
24:f9:14:a8:79:df:84:0e:c9:cd:82:54:c7:85:87:
95:25:28:e7:1b:9f:cb:3b:80:47:ba:39:bd:5c:c4:
72:f0:66:2e:be:80:94:f4:a8:4b:16:a5:e7:48:4d:
36:d5:24:58:ca:a1:b2:56:d5:82:8f:a5:3b:bf:cc:
c4:7e:d3:24:95:3f:b0:0a:48:77:9d:f2:6a:a3:81:
65:f7:b4:f0:4d:b1:92:33:a8:84:6e:f1:aa:bd:d5:
9e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:01:FB:FE:D0:8C:C2:0A:A7:FF:8C:6B:3C:E6:06:F6:11:6E:CB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/VOMB-_7QjMIKp_-MazzmBvYRbss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.35.0/24
Signature Algorithm: sha256WithRSAEncryption
96:12:db:50:45:27:57:ab:cc:18:32:50:e5:08:fc:ed:45:fb:
8e:6b:9d:07:d6:81:0f:b3:b6:73:06:0d:32:a7:9c:e7:0c:3d:
60:46:d5:5b:30:7c:9f:ca:20:0a:cd:01:29:b7:82:29:2b:89:
7e:3c:7e:5e:ff:8e:34:d0:54:9c:0c:17:a7:d3:b2:f8:cf:15:
4a:29:5a:5c:b3:d5:0d:67:f4:5c:26:4d:d9:e4:2e:3f:7e:6d:
68:68:58:21:b7:25:e6:a9:bc:88:65:32:85:ab:39:9f:6f:8e:
91:b0:7b:82:8b:6e:25:9a:8c:d8:63:40:a1:d3:fd:fe:af:96:
62:b9:66:86:02:3a:9c:de:34:ab:39:e9:d0:a2:08:4c:4b:fd:
d5:55:71:43:9e:fa:5a:73:6c:e3:65:5b:25:1b:e8:e1:9c:d6:
27:e9:63:89:60:23:95:0d:22:b4:aa:80:02:1b:5f:b7:3b:45:
17:b9:9b:c0:f6:57:63:b9:18:b3:7d:e8:cd:ba:d2:9f:4c:e6:
71:26:de:1b:41:d9:41:35:f8:bf:7f:4a:8d:10:fa:9f:0f:c7:
8e:a0:c9:e4:8b:f3:e4:9b:1d:7a:0b:79:d2:f9:b8:2e:41:79:
67:07:6f:c2:52:e9:aa:8a:18:04:76:69:b6:e2:e2:5c:7e:39:
24:be:dd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:24 2025 by rpki-client