Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Y5B_JiJ9Dg9paly60F-ZQnx9YpE.roa
File: Y5B_JiJ9Dg9paly60F-ZQnx9YpE.roa (raw, json)
Hash identifier: i6AgenPPOJXxTFZfegpf/cahPo/w7rDGk2hfQX/dbO4=
Subject key identifier: 63:90:7F:26:22:7D:0E:0F:69:6A:5C:BA:D0:5F:99:42:7C:7D:62:91
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27A9EFAF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Y5B_JiJ9Dg9paly60F-ZQnx9YpE.roa
Signing time: Sat 01 Jan 2022 16:08:33 +0000
ROA not before: Sat 01 Jan 2022 16:08:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49393
IP address blocks: 93.171.153.0/24 maxlen: 24
31.148.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665448367 (0x27a9efaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63907f26227d0e0f696a5cbad05f99427c7d6291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0f:68:f8:5d:25:d5:d8:9c:ed:4f:63:16:e8:
70:c1:2d:cc:0b:97:bc:b9:4c:5c:66:b7:cb:fe:b0:
e3:05:e3:5f:14:f0:94:31:93:33:f9:91:a0:ae:16:
78:2f:05:b4:f0:56:04:7b:e5:45:a0:8b:71:eb:46:
00:cd:7c:f9:6f:10:8e:a0:89:bd:ca:2f:37:84:48:
06:24:45:b2:34:e3:47:e3:c9:08:b5:60:27:fb:17:
1f:e2:60:91:66:21:25:fe:34:b4:6f:2c:72:77:91:
9f:8e:3d:88:cb:7c:f7:30:50:97:1a:f6:14:2b:01:
98:f1:a0:8f:69:89:19:a4:43:8a:34:48:d1:c0:b1:
2b:43:a7:f7:97:16:f4:9a:c4:91:ea:f5:65:67:5e:
2f:89:c1:84:b2:f7:58:1a:62:96:bb:5d:0e:f8:e2:
bc:15:db:4d:dc:85:e3:87:52:61:f3:a2:12:08:9f:
5a:16:26:34:96:65:3d:1c:26:37:f6:87:a1:46:f7:
07:f8:22:99:54:90:18:95:ad:2f:0d:a5:de:68:4b:
9c:68:a0:0a:75:fe:63:27:37:58:e1:a3:e4:e9:7e:
9d:52:d7:4b:4c:8f:cf:f4:cc:6a:eb:3d:f6:86:b0:
70:09:ee:a9:8e:0b:60:c6:eb:b8:1d:3e:f6:4b:df:
15:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:7F:26:22:7D:0E:0F:69:6A:5C:BA:D0:5F:99:42:7C:7D:62:91
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Y5B_JiJ9Dg9paly60F-ZQnx9YpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.22.0/24
93.171.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:f7:d8:0d:e1:5b:ac:10:57:0d:29:d6:52:75:e7:9f:cb:92:
7e:0b:7e:07:fc:0e:ba:cd:1c:a7:68:ba:b7:be:91:e0:67:fc:
69:86:d2:85:2d:d4:63:2a:2e:53:a9:6b:cb:6f:d0:1c:90:90:
9a:fe:c4:36:0e:eb:dd:83:fa:d9:8b:be:3d:a3:33:8f:e8:e4:
8d:1a:5b:5d:1e:95:da:1f:e9:17:2b:ea:34:ae:72:23:ec:f1:
d7:a4:fe:51:f5:4d:0e:3e:d8:6e:9e:cb:4e:d4:bb:ac:f9:2a:
56:10:f1:40:a4:aa:79:2b:aa:73:8d:0e:eb:83:30:95:05:fc:
62:0e:76:36:cc:39:0d:57:10:65:f3:fb:4e:6b:e9:e6:cc:28:
50:f5:d7:73:97:ce:3b:6a:9c:b8:d6:3a:b6:4c:06:43:74:ac:
d6:44:17:50:b1:9a:f2:dc:f2:8d:e2:87:37:e9:6c:d0:32:04:
d4:24:f5:35:f5:12:8d:66:d9:2a:aa:c1:6f:4a:b3:8d:37:5f:
25:1e:53:a4:d3:59:69:1a:ad:2e:98:b7:94:09:df:1b:37:7b:
57:a8:c3:a2:04:f3:d9:6b:ed:68:0b:7a:66:95:cb:2c:c9:bc:
99:25:1e:bb:70:a7:d4:f5:0e:db:ba:dc:aa:b7:3f:98:11:8f:
68:5a:62:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:38 2025 by rpki-client