Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X241zDBwWAkoKiVS2FmVuHIftoY.roa
File: X241zDBwWAkoKiVS2FmVuHIftoY.roa (raw, json)
Hash identifier: kSjhy8A6IL8CyQbphxrlH2Wto9XhC0Bel32dErIO8EY=
Subject key identifier: 5F:6E:35:CC:30:70:58:09:28:2A:25:52:D8:59:95:B8:72:1F:B6:86
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01828DD29563ACBE13FD6D44187734771BBB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X241zDBwWAkoKiVS2FmVuHIftoY.roa
Signing time: Thu 11 Aug 2022 16:52:44 +0000
ROA not before: Thu 11 Aug 2022 16:52:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61988
IP address blocks: 93.170.135.0/24 maxlen: 24
95.46.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8d:d2:95:63:ac:be:13:fd:6d:44:18:77:34:77:1b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 11 16:52:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f6e35cc30705809282a2552d85995b8721fb686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:42:8b:ea:34:68:c7:8c:8b:09:dc:a2:ea:
88:95:3b:26:2f:64:94:fc:c7:bd:a1:c1:f0:3f:74:
42:68:2c:60:d6:90:39:07:99:fe:96:16:e0:1f:5a:
5c:7a:3c:6c:b1:a9:7a:49:05:99:c8:51:e8:69:ba:
52:ed:6b:4e:05:38:70:9e:7e:c8:e2:64:fb:4f:cf:
57:81:b9:49:30:dc:2e:e6:d7:90:ad:61:c1:01:22:
2e:b2:34:9c:9c:2e:8b:e0:a6:81:b8:c2:be:8a:ae:
8d:0b:ac:e3:2c:aa:27:aa:4f:e6:f8:2d:a2:4e:c7:
c3:31:22:91:8c:cb:3e:e1:43:21:42:37:b5:55:1b:
93:47:9f:ec:c1:22:d0:b6:c3:85:15:1e:35:4f:cc:
53:cf:4f:d0:a2:2e:81:c0:b5:35:f0:e4:26:e3:37:
2f:bd:4c:59:e6:22:87:03:89:18:68:d2:74:af:c0:
60:f5:27:f6:42:e9:31:29:34:70:d0:13:92:5b:77:
b1:71:70:52:26:8c:dc:2d:3a:0e:d4:e5:88:be:29:
e1:88:7d:9c:f6:4b:62:88:6d:e8:02:c8:f1:e9:c4:
b4:97:31:10:8c:50:00:db:db:ab:ba:e2:1d:c8:be:
7d:68:27:2d:68:5b:b8:7c:56:83:a8:14:b2:10:34:
36:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6E:35:CC:30:70:58:09:28:2A:25:52:D8:59:95:B8:72:1F:B6:86
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X241zDBwWAkoKiVS2FmVuHIftoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.135.0/24
95.46.126.0/24
Signature Algorithm: sha256WithRSAEncryption
24:13:6b:fd:d0:90:00:e5:84:ae:af:41:9a:85:30:00:e1:e8:
95:63:34:b8:20:d6:63:6a:ee:22:0f:6a:2f:ce:fc:e7:64:d3:
2e:99:4e:ae:9f:30:56:a9:39:55:3c:69:26:dc:ff:5e:ba:aa:
bf:c9:a2:5c:7f:a5:3e:37:f2:56:b4:84:8f:cb:d0:83:a7:51:
e6:48:7f:7e:1a:bc:10:5a:09:b6:80:22:b0:31:ff:d0:32:88:
79:4c:a5:09:92:38:67:be:14:e2:22:39:00:54:b5:67:1a:c7:
b8:01:29:a6:c7:7c:86:ff:b6:61:40:b8:ba:ae:77:90:dd:a7:
30:3a:d5:d1:2c:1d:3a:09:4f:87:ad:bb:e4:44:46:70:54:e7:
9e:e9:a4:74:2c:da:88:17:1f:1a:2e:e3:5d:da:8a:b5:93:47:
0b:d6:4b:90:d9:eb:a4:ac:ef:af:2d:3c:27:76:5f:9c:44:bb:
38:4c:e7:3b:2b:85:a1:15:2d:75:92:07:26:ed:05:bf:a4:82:
ee:7b:ef:8c:c5:1d:bd:5a:a5:b9:83:95:03:de:4e:ac:30:8e:
cc:bc:de:ff:ee:cb:65:2d:0c:da:eb:c4:82:8c:85:61:86:ab:
a7:09:33:91:f9:f6:25:5a:ee:47:82:69:15:43:9b:a7:0c:4c:
4c:ca:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:37 2025 by rpki-client