Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XxjxACXuYAbdMfTQx7HQcuhVIMM.roa
File: XxjxACXuYAbdMfTQx7HQcuhVIMM.roa (raw, json)
Hash identifier: rySbxwI5qKpZ8dTjz46SpyXJXLa564fNPaF6TgiF1eY=
Subject key identifier: 5F:18:F1:00:25:EE:60:06:DD:31:F4:D0:C7:B1:D0:72:E8:55:20:C3
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A30B01800AB21D6DDF6959E401D83
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XxjxACXuYAbdMfTQx7HQcuhVIMM.roa
Signing time: Tue 02 Jan 2024 12:33:31 +0000
ROA not before: Tue 02 Jan 2024 12:33:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62314
IP address blocks: 93.170.190.0/24 maxlen: 24
92.38.32.0/24 maxlen: 24
146.120.91.0/24 maxlen: 24
92.38.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:30:b0:18:00:ab:21:d6:dd:f6:95:9e:40:1d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f18f10025ee6006dd31f4d0c7b1d072e85520c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:a9:6c:c9:1d:1f:a7:02:0b:2a:5f:7f:7b:
b8:b0:ea:dd:43:22:86:fa:1b:16:2b:87:b8:f1:93:
bc:87:d6:ca:9d:d4:21:0a:10:06:69:66:74:e4:23:
08:b1:cb:3e:30:e6:2c:63:93:1a:84:c3:1a:52:a2:
5b:22:24:79:f1:ec:f8:74:d9:bd:79:7d:82:d5:e0:
c3:e3:69:c6:04:08:d1:b7:b3:f4:9a:b3:e6:0b:a3:
1e:df:c5:d3:e0:93:e4:de:c1:54:c3:05:fc:43:ac:
73:b1:76:53:74:8d:3f:9a:c1:ad:c7:b2:aa:fe:8d:
fe:34:10:91:9c:1d:11:6b:70:3b:ed:8e:40:20:ca:
dd:46:ec:19:36:01:90:53:de:e6:9e:3b:b5:c1:37:
be:dd:f5:51:13:8f:c5:6e:d7:09:93:68:7d:28:10:
d4:21:b0:b6:ee:40:b3:93:9b:18:9f:9c:e1:a2:e7:
4a:ec:13:70:fa:94:84:7e:14:53:66:09:5a:9c:1d:
8a:c7:b8:da:e5:3c:fe:83:44:36:fa:b9:23:5b:3e:
6d:c2:6e:b6:3b:17:7b:c1:ab:49:0e:68:8a:b6:51:
23:8d:5c:97:b4:44:d7:3b:ba:d3:b6:6c:37:c8:33:
8e:9c:dd:65:d6:29:c8:1c:b0:98:76:8b:1c:64:53:
00:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:18:F1:00:25:EE:60:06:DD:31:F4:D0:C7:B1:D0:72:E8:55:20:C3
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/XxjxACXuYAbdMfTQx7HQcuhVIMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.32.0/24
92.38.95.0/24
93.170.190.0/24
146.120.91.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6e:5f:5b:cd:a0:df:f0:96:95:7a:95:84:11:30:a9:89:ea:
22:dd:c4:f1:be:82:5e:7e:8d:7e:76:f4:30:0c:89:d0:32:f1:
3e:6d:9c:0f:59:51:1d:a4:fa:fc:71:70:90:35:74:ef:fe:38:
f1:c8:ad:bb:10:44:e4:ea:16:72:20:3e:e0:36:6a:e1:1a:16:
53:93:01:3c:a4:7d:41:42:50:f5:ea:8a:02:e2:df:72:d7:2e:
ce:33:8c:91:04:d7:42:9f:b2:bf:90:97:56:ec:1c:31:8c:88:
14:ad:c5:91:98:39:b1:4a:6f:e2:e0:33:85:3c:02:20:cf:5c:
e4:1e:89:c1:a7:05:73:98:ba:d0:9d:67:ec:bf:ce:af:36:46:
4c:c7:03:ae:55:4e:76:0b:1b:c1:a2:05:89:b5:1c:b7:c0:fc:
ab:36:4e:73:6b:49:dd:56:bd:19:b4:3c:13:5f:42:b0:37:97:
3d:97:a7:b0:9a:bf:43:73:7c:9d:33:8b:7a:6c:7c:55:c3:cd:
5f:7e:1f:7b:bd:11:9d:2c:b2:a6:e6:1a:16:3a:ba:bd:d5:44:
86:65:d4:21:bd:7d:78:e6:2a:98:1c:92:91:65:dc:6a:e7:e2:
0e:95:07:4f:a1:e7:82:c9:72:d0:ad:18:76:a5:37:a5:35:99:
37:43:23:9c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzKKjCwGACrIdbd9pWeQB2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjE4ZjEwMDI1ZWU2MDA2ZGQzMWY0ZDBjN2IxZDA3MmU4NTUyMGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix2pbMkdH6cCCypff3u4sOrdQyKG
+hsWK4e48ZO8h9bKndQhChAGaWZ05CMIscs+MOYsY5MahMMaUqJbIiR58ez4dNm9
eX2C1eDD42nGBAjRt7P0mrPmC6Me38XT4JPk3sFUwwX8Q6xzsXZTdI0/msGtx7Kq
/o3+NBCRnB0Ra3A77Y5AIMrdRuwZNgGQU97mnju1wTe+3fVRE4/FbtcJk2h9KBDU
IbC27kCzk5sYn5zhoudK7BNw+pSEfhRTZglanB2Kx7ja5Tz+g0Q2+rkjWz5twm62
Oxd7watJDmiKtlEjjVyXtETXO7rTtmw3yDOOnN1l1inIHLCYdoscZFMA5QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFF8Y8QAl7mAG3TH00Mex0HLoVSDDMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvWHhqeEFDWHVZQWJkTWZUUXg3SFFjdWhWSU1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXCYgAwQA
XCZfAwQAXaq+AwQAknhbMA0GCSqGSIb3DQEBCwUAA4IBAQBFbl9bzaDf8JaVepWE
ETCpieoi3cTxvoJefo1+dvQwDInQMvE+bZwPWVEdpPr8cXCQNXTv/jjxyK27EETk
6hZyID7gNmrhGhZTkwE8pH1BQlD16ooC4t9y1y7OM4yRBNdCn7K/kJdW7BwxjIgU
rcWRmDmxSm/i4DOFPAIgz1zkHonBpwVzmLrQnWfsv86vNkZMxwOuVU52CxvBogWJ
tRy3wPyrNk5za0ndVr0ZtDwTX0KwN5c9l6ewmr9Dc3ydM4t6bHxVw81ffh97vRGd
LLKm5hoWOrq91USGZdQhvX145iqYHJKRZdxq5+IOlQdPoeeCyXLQrRh2pTelNZk3
QyOc
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:54 2025 by rpki-client