Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aJknshFu_q8HjSv4uhl6OJ4rGag.roa
File: aJknshFu_q8HjSv4uhl6OJ4rGag.roa (raw, json)
Hash identifier: OjvHLDrDzP64zI/OJWoO91fHI9eGYDNo3p3TE9nm9tU=
Subject key identifier: 68:99:27:B2:11:6E:FE:AF:07:8D:2B:F8:BA:19:7A:38:9E:2B:19:A8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD752A48D356CD25A7830CA8C133D
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aJknshFu_q8HjSv4uhl6OJ4rGag.roa
Signing time: Thu 02 Jan 2025 05:49:31 +0000
ROA not before: Thu 02 Jan 2025 05:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61196
IP address blocks: 93.171.215.0/24 maxlen: 24
95.46.44.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d7:52:a4:8d:35:6c:d2:5a:78:30:ca:8c:13:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=689927b2116efeaf078d2bf8ba197a389e2b19a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:fc:de:79:16:18:f8:2d:37:51:35:81:32:
c9:71:68:a9:41:05:bc:6f:14:fe:bb:9c:25:11:c8:
d9:3c:5f:9c:52:b0:73:d0:2b:77:23:7f:13:e6:0a:
18:ee:7b:be:fe:cd:a3:f6:bd:35:a8:aa:1b:11:92:
47:6c:69:d3:65:ed:e2:ae:c7:72:8c:8b:61:77:df:
0a:9a:df:a0:98:0b:7a:6e:33:30:b5:b1:ef:b4:09:
6e:6c:21:46:27:d4:07:4f:e3:4e:43:4c:c2:59:02:
27:19:9e:04:bf:ec:26:2c:a1:45:9a:b3:e3:23:31:
19:1e:ba:8e:13:4d:67:bf:f4:ce:0b:0f:38:d5:64:
80:9d:6c:ff:e1:13:ed:4a:4a:65:c1:75:e4:e4:f3:
22:1a:31:5d:df:d0:c9:72:4d:9e:4b:59:95:14:bc:
4a:3a:cc:15:8b:29:c7:cf:2c:df:15:87:42:29:5a:
0f:4a:0b:3f:0f:cd:2b:6e:b7:c7:a9:b5:62:c5:6b:
64:33:8b:82:22:84:34:10:e5:d8:76:77:32:6c:80:
e2:ba:5e:39:67:60:4b:98:88:af:c1:17:d7:78:1e:
25:e3:46:3e:35:3a:6a:4c:85:ca:58:ca:0b:67:fa:
d0:6d:be:86:f5:4b:ad:39:8c:8f:6a:b0:7b:01:24:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:99:27:B2:11:6E:FE:AF:07:8D:2B:F8:BA:19:7A:38:9E:2B:19:A8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aJknshFu_q8HjSv4uhl6OJ4rGag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.215.0/24
95.46.44.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:95:07:28:b2:8e:a7:8b:7c:13:52:ac:c6:6a:8d:0d:94:23:
22:fa:80:ab:56:ae:13:4d:f3:52:bb:f6:37:6b:20:4d:07:f0:
12:87:ad:c9:c1:78:df:51:fe:06:7a:70:e7:e3:8f:15:16:1a:
a0:4b:db:2e:c8:20:e4:58:de:00:fa:90:a6:e2:71:3e:ed:fe:
f5:71:c0:b7:55:03:cd:84:ef:c3:0f:c2:1d:95:01:9e:a6:69:
09:0f:55:78:f5:56:57:ee:5f:9e:9b:a7:b1:03:43:4d:f9:c1:
af:5b:0e:46:b1:cd:f8:91:e5:51:2c:0f:78:16:50:0c:7c:f7:
25:a4:34:d0:01:bd:7d:e9:ea:f3:e7:7c:d1:5d:64:9e:af:d2:
a0:61:f2:38:73:33:97:4c:60:20:53:79:67:44:51:75:45:b6:
03:7b:62:36:7c:e6:0c:54:2e:b3:f4:f4:1d:41:81:e2:63:0e:
fb:a9:f6:a0:a1:b9:75:93:73:42:9c:71:92:22:b2:65:9d:81:
65:05:0a:3f:46:0a:f1:74:ee:b1:17:c8:f1:ae:b0:f7:0d:10:
92:5d:51:20:cc:9e:bb:0e:fa:d3:b3:bf:61:a8:f7:51:00:f2:
4c:da:7f:9d:7a:9a:6d:59:91:8b:ab:58:2c:40:cb:95:5d:cb:
13:77:da:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:08:43 2025 by rpki-client