Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_cpExqhwLkX7te_7usOOwL2jr1Q.roa
File: _cpExqhwLkX7te_7usOOwL2jr1Q.roa (raw, json)
Hash identifier: ZIKX1sQh2q6JZGfl0WxfScnYlwdM70ieDDDgTpEVHOU=
Subject key identifier: FD:CA:44:C6:A8:70:2E:45:FB:B5:EF:FB:BA:C3:8E:C0:BD:A3:AF:54
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570954782F63AA5D630C08FF8E8BB8007
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_cpExqhwLkX7te_7usOOwL2jr1Q.roa
Signing time: Mon 02 Jan 2023 03:45:09 +0000
ROA not before: Mon 02 Jan 2023 03:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50043
IP address blocks: 93.170.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:47:82:f6:3a:a5:d6:30:c0:8f:f8:e8:bb:80:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdca44c6a8702e45fbb5effbbac38ec0bda3af54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cf:36:e6:9f:ce:6a:b0:ab:48:b3:49:6f:05:
c3:d2:fc:61:4e:a1:f9:42:95:96:90:91:c0:9b:80:
9c:e7:bc:ed:60:13:af:cf:dc:4f:78:75:3b:25:9e:
2f:91:9e:18:31:f3:ec:30:72:30:3c:66:21:94:ad:
0f:50:c3:4a:95:25:de:6f:f1:53:67:b3:8a:a5:9f:
ae:cb:3c:73:fe:e5:08:12:cb:95:ee:a0:ab:bb:d0:
41:18:ae:a8:f0:c3:4a:fa:18:22:ca:f3:94:25:91:
17:f3:f8:e9:68:de:4a:91:1b:28:d1:0c:17:32:73:
19:f2:80:c4:8c:e0:4a:31:be:3c:f8:fe:b0:10:7a:
21:88:1e:ab:f7:84:8f:d1:66:6d:57:91:58:a6:06:
75:f2:c1:5f:40:80:7d:dd:a2:4a:19:42:5d:05:a9:
04:31:aa:6a:9f:9a:c6:e7:0a:71:b7:94:53:50:a5:
54:92:25:e1:a3:6c:37:a0:13:ef:6a:d5:f1:de:54:
40:65:7e:41:d2:72:7d:e8:27:f4:f4:fa:5c:0b:b3:
1d:63:70:67:66:cf:df:f6:13:b2:0a:78:85:b2:b8:
87:83:ef:4c:69:e4:5e:29:2e:ea:b9:5c:73:c0:6e:
e8:0c:96:9d:29:f2:f5:e1:f5:db:17:f6:f6:ba:1b:
a3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:44:C6:A8:70:2E:45:FB:B5:EF:FB:BA:C3:8E:C0:BD:A3:AF:54
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/_cpExqhwLkX7te_7usOOwL2jr1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.136.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:19:c5:15:c9:63:77:bf:5e:4d:0a:f3:00:a7:ed:68:e6:27:
36:33:99:51:aa:84:84:3d:46:91:04:e1:e0:bf:86:b1:24:ec:
1b:5d:60:82:93:a0:1e:7c:a4:63:0a:dd:7d:e5:ed:a1:59:6b:
9a:60:81:ea:1c:dd:00:0f:07:f8:b9:1b:2d:e0:31:d7:51:da:
75:ae:77:a6:b6:fb:4f:e0:60:e1:60:e3:e4:f5:c6:39:84:87:
17:3c:93:51:96:c2:b9:d5:7e:f2:73:c7:b1:42:6b:20:7c:64:
2e:16:ac:ec:1d:25:50:f2:1b:b1:1d:04:fc:1b:30:95:2c:89:
71:8b:1c:78:b6:18:91:44:b7:7d:67:6a:53:96:98:0a:60:3a:
b8:2a:3b:3d:93:98:17:b2:03:05:38:b7:92:61:55:54:cd:00:
51:76:ba:55:4a:f7:68:df:a8:d3:f8:d1:6c:20:9b:e2:fd:27:
cd:86:0a:46:6b:d9:d7:17:b2:be:d0:98:b1:3a:cc:07:24:9b:
95:8f:b7:9d:bb:7c:cb:7f:6f:d6:fe:aa:cf:37:da:b8:f7:69:
21:22:a0:a5:de:55:5c:2d:f5:77:9e:50:08:c0:12:eb:9f:6d:
91:a3:05:d8:9f:75:d2:1c:de:be:ec:ee:85:d4:1b:08:7f:b3:
1e:ec:53:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:30 2025 by rpki-client