Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Zd4Bx04M20oh0hzuJC-cQRyFIyc.roa
File: Zd4Bx04M20oh0hzuJC-cQRyFIyc.roa (raw, json)
Hash identifier: k5mrIrzyFX9tGIjt9LjT0ALOaMae0jR83YPIsPaoAfU=
Subject key identifier: 65:DE:01:C7:4E:0C:DB:4A:21:D2:1C:EE:24:2F:9C:41:1C:85:23:27
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018321F58F9C5390233C2EC90CCB44D47AEF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Zd4Bx04M20oh0hzuJC-cQRyFIyc.roa
Signing time: Fri 09 Sep 2022 11:14:44 +0000
ROA not before: Fri 09 Sep 2022 11:14:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51500
IP address blocks: 93.171.154.0/24 maxlen: 24
146.158.73.0/24 maxlen: 24
95.47.56.0/24 maxlen: 24
95.47.196.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:21:f5:8f:9c:53:90:23:3c:2e:c9:0c:cb:44:d4:7a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 9 11:14:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=65de01c74e0cdb4a21d21cee242f9c411c852327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:38:f6:44:0c:c2:b1:d0:26:b5:ef:b1:8d:13:
28:30:75:5d:58:25:ef:29:63:59:50:c3:6f:cf:50:
d8:f2:46:41:ca:d6:70:84:3d:fd:e1:ed:5c:76:53:
5d:b8:d7:36:00:09:15:02:ab:a8:47:45:8b:c0:40:
cf:6e:21:10:32:c1:81:2f:ef:b4:d7:60:62:02:05:
ca:5e:67:9d:86:04:93:28:72:a5:3c:4c:24:75:43:
de:2d:e1:44:9c:36:78:07:8e:56:06:fc:5f:e2:1e:
3e:64:13:09:55:c4:72:69:be:0f:f2:8a:85:5e:13:
3f:f6:92:e9:f4:d5:ca:a8:b1:34:78:47:7b:07:de:
4e:46:96:d8:18:db:62:e5:03:d6:7c:76:90:7f:23:
e7:0f:07:dc:9e:98:88:1a:b7:f4:88:49:f0:a9:37:
17:d1:42:17:fd:75:95:70:1a:49:e3:44:b6:ae:74:
61:80:f3:4a:a8:aa:2d:92:ad:ef:a8:f1:e6:f9:f0:
a2:f3:45:ef:8b:31:3d:58:d6:63:e9:db:e9:41:c1:
b1:ba:2f:07:76:65:5e:7b:03:e8:8c:61:dc:c9:01:
5e:8a:a3:93:01:7f:12:08:0e:e5:c8:f9:9c:81:f2:
31:e2:fd:89:55:7b:42:9e:b2:d6:d7:67:15:68:98:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DE:01:C7:4E:0C:DB:4A:21:D2:1C:EE:24:2F:9C:41:1C:85:23:27
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Zd4Bx04M20oh0hzuJC-cQRyFIyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.154.0/24
95.47.56.0/24
95.47.196.0/23
146.158.73.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e8:47:06:01:9b:f0:4c:d5:52:3a:9b:81:66:e6:13:20:2a:
8c:56:44:a1:6a:b1:7b:1f:65:76:2e:0d:79:fd:a3:91:0d:87:
25:ac:49:32:a6:77:dc:7e:44:55:89:4c:4e:7c:38:8b:ef:00:
02:e3:a4:4b:ac:43:f0:7e:51:4f:de:f0:5c:c3:f6:81:e8:5c:
78:5b:ad:d4:ee:3f:fa:c7:6c:f4:6d:7a:ce:88:36:87:27:0a:
0e:f7:f8:80:0d:cf:be:a7:a1:8f:73:ee:19:b7:39:6f:ce:f5:
4e:44:fd:86:b7:d2:4f:a0:d9:d9:87:db:0c:43:dd:34:c3:d4:
87:b7:72:25:82:f5:34:03:9d:a8:14:ed:02:fd:09:44:b7:b0:
93:71:73:4d:c7:95:dc:94:89:a4:6b:16:92:da:b7:98:4c:bd:
92:b7:b7:b6:22:03:a7:ba:b1:39:3e:da:45:fb:52:61:18:08:
0e:ad:f1:ac:f7:4d:ba:af:84:93:b9:f6:71:70:02:af:33:f9:
7e:00:2c:82:2b:72:2d:4e:dc:48:25:b0:1a:b1:f0:33:37:5f:
0c:56:00:fb:87:09:bf:b4:70:10:b6:3b:cf:52:35:1e:30:cb:
40:29:88:55:39:92:aa:71:f6:36:bd:d4:5a:3e:b4:c4:4f:ae:
5e:50:38:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:50 2025 by rpki-client