Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_JxBFNLBeXDK7bCjmYXKgekpzYk.roa
File: _JxBFNLBeXDK7bCjmYXKgekpzYk.roa (raw, json)
Hash identifier: NJ1UwuBvBW4UMcl6p8DtSfnqkXLnDmmy4CZiznZsiBU=
Subject key identifier: FC:9C:41:14:D2:C1:79:70:CA:ED:B0:A3:99:85:CA:81:E9:29:CD:89
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB8F9736C129999D3E946E4B80002
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_JxBFNLBeXDK7bCjmYXKgekpzYk.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50685
IP address blocks: 93.170.236.0/22 maxlen: 24
93.171.160.0/23 maxlen: 24
95.47.60.0/23 maxlen: 24
146.120.13.0/24 maxlen: 24
146.120.14.0/23 maxlen: 24
146.120.192.0/22 maxlen: 24
2a02:128:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b8:f9:73:6c:12:99:99:d3:e9:46:e4:b8:00:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc9c4114d2c17970caedb0a39985ca81e929cd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7f:22:ef:93:df:89:db:df:4e:2d:f8:2c:eb:
34:58:7a:35:74:67:0c:b4:d1:3b:32:0d:03:2e:4e:
fa:60:06:fb:3f:7a:0d:8e:f2:b8:38:ca:8f:27:7d:
fa:1d:91:a0:5a:17:20:7d:79:09:49:50:84:bf:a5:
5b:08:9d:40:d5:d1:a4:e2:92:d0:ca:ce:26:48:16:
56:92:63:2a:11:5b:44:ac:2e:21:74:c2:cd:3f:ca:
38:74:a9:de:38:d2:3e:9e:98:c8:dd:9d:70:1b:6e:
98:f9:0b:b6:63:ab:9e:44:1e:b7:f3:a7:ba:42:a7:
f1:43:cb:bc:7d:61:29:74:d5:5e:2c:85:3a:03:a0:
9c:17:17:2e:13:f1:92:10:1f:c3:fd:e7:e8:3b:6b:
5a:49:2f:bb:e8:25:b8:b7:34:91:46:52:1c:fc:f4:
a6:58:4a:e2:11:06:30:7c:a7:b5:92:a2:95:99:19:
3b:e5:d4:80:14:23:0f:71:39:9f:b5:76:38:d8:9f:
0c:1e:22:10:28:44:29:b0:db:e3:2f:bc:bf:be:84:
7b:ea:ba:ae:13:ac:cf:8e:03:40:50:f8:03:83:bd:
3d:0b:31:09:8a:78:ef:e9:27:a0:07:2b:6a:39:da:
3c:d1:09:ed:37:64:fb:ca:f3:59:08:ee:a7:74:d6:
5b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9C:41:14:D2:C1:79:70:CA:ED:B0:A3:99:85:CA:81:E9:29:CD:89
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_JxBFNLBeXDK7bCjmYXKgekpzYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.236.0/22
93.171.160.0/23
95.47.60.0/23
146.120.13.0-146.120.15.255
146.120.192.0/22
IPv6:
2a02:128:9::/48
Signature Algorithm: sha256WithRSAEncryption
0b:69:84:a5:c2:34:fa:ea:17:ab:5b:01:ce:a1:40:c0:48:88:
35:64:4d:cf:a3:c7:df:bf:1f:f8:5a:20:e3:47:75:09:b5:60:
9d:1a:e4:05:62:98:1a:96:8f:0c:82:f6:32:a0:30:7c:fe:df:
d3:96:b5:d4:b7:9b:3e:3e:45:84:77:8e:24:b1:2f:c6:34:4b:
4c:70:19:b0:df:17:84:a2:39:0a:8c:c0:de:79:9f:2d:b4:84:
f1:f7:d3:3b:1f:62:18:e1:56:b9:02:9d:32:59:8b:53:31:11:
d8:2e:b0:c6:f3:b2:cc:87:c9:b3:5f:77:ca:b9:d5:e6:c4:5d:
7a:09:28:39:84:20:49:e8:d5:8e:ad:65:66:2b:bb:12:0d:df:
84:4d:ad:c2:5f:c7:cf:c1:c8:24:1a:21:37:27:a1:20:ff:fc:
8f:6d:e3:b6:08:93:df:fa:c4:94:cb:1b:91:48:80:3f:68:74:
b1:dc:ee:e2:b2:cf:4d:eb:56:74:29:57:34:50:c7:61:41:ec:
9b:33:61:11:0a:7c:03:8c:cd:b1:cf:0a:3d:3f:0c:69:9b:d5:
1f:bf:06:ca:e2:e6:98:45:e2:f6:5f:92:bf:45:b9:2e:82:e3:
f2:7f:29:34:c0:07:58:ba:53:2e:85:21:72:7c:a8:39:cb:f1:
ac:cc:05:f4
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgISAZQlj7j5c2wSmZnT6UbkuAACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzljNDExNGQyYzE3OTcwY2FlZGIwYTM5OTg1Y2E4MWU5MjljZDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn8i75PfidvfTi34LOs0WHo1dGcM
tNE7Mg0DLk76YAb7P3oNjvK4OMqPJ336HZGgWhcgfXkJSVCEv6VbCJ1A1dGk4pLQ
ys4mSBZWkmMqEVtErC4hdMLNP8o4dKneONI+npjI3Z1wG26Y+Qu2Y6ueRB6386e6
QqfxQ8u8fWEpdNVeLIU6A6CcFxcuE/GSEB/D/efoO2taSS+76CW4tzSRRlIc/PSm
WEriEQYwfKe1kqKVmRk75dSAFCMPcTmftXY42J8MHiIQKEQpsNvjL7y/voR76rqu
E6zPjgNAUPgDg709CzEJinjv6SegBytqOdo80QntN2T7yvNZCO6ndNZb/QIDAQAB
o4ICOjCCAjYwHQYDVR0OBBYEFPycQRTSwXlwyu2wo5mFyoHpKc2JMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvX0p4QkZOTEJlWERLN2JDam1ZWEtnZWtwellrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFAGCCsGAQUFBwEHAQH/BEEwPzAsBAIAATAmAwQCXarsAwQB
XaugAwQBXy88MAwDBACSeA0DBASSeAADBAKSeMAwDwQCAAIwCQMHACoCASgACTAN
BgkqhkiG9w0BAQsFAAOCAQEAC2mEpcI0+uoXq1sBzqFAwEiINWRNz6PH378f+Fog
40d1CbVgnRrkBWKYGpaPDIL2MqAwfP7f05a11LebPj5FhHeOJLEvxjRLTHAZsN8X
hKI5CozA3nmfLbSE8ffTOx9iGOFWuQKdMlmLUzER2C6wxvOyzIfJs193yrnV5sRd
egkoOYQgSejVjq1lZiu7Eg3fhE2twl/Hz8HIJBohNyehIP/8j23jtgiT3/rElMsb
kUiAP2h0sdzu4rLPTetWdClXNFDHYUHsmzNhEQp8A4zNsc8KPT8MaZvVH78GyuLm
mEXi9l+Sv0W5LoLj8n8pNMAHWLpTLoUhcnyoOcvxrMwF9A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:51:04 2025 by rpki-client