Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/abaBMb7VpJ3q2nNAaMGguMYnnqk.roa
File: abaBMb7VpJ3q2nNAaMGguMYnnqk.roa (raw, json)
Hash identifier: u/QVGx1PuvYwM2QS8xvRTtIYemhF7yQKGBYEa49dQ2M=
Subject key identifier: 69:B6:81:31:BE:D5:A4:9D:EA:DA:73:40:68:C1:A0:B8:C6:27:9E:A9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FC5531A2F935579861E84450129F7
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/abaBMb7VpJ3q2nNAaMGguMYnnqk.roa
Signing time: Thu 02 Jan 2025 05:49:26 +0000
ROA not before: Thu 02 Jan 2025 05:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57888
IP address blocks: 93.170.56.0/21 maxlen: 24
146.120.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c5:53:1a:2f:93:55:79:86:1e:84:45:01:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69b68131bed5a49deada734068c1a0b8c6279ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:27:7a:04:d6:35:ab:a1:66:43:b2:f2:8c:27:
8c:ab:53:d2:bf:f5:40:98:af:c9:b8:74:80:12:5a:
31:eb:1f:05:4d:02:a3:9b:76:32:66:29:d4:56:96:
83:03:5e:cb:6c:9d:c2:b2:52:94:1d:27:ff:a2:07:
2d:c6:58:8f:ef:f5:61:ab:28:48:ec:05:41:90:bf:
f7:9c:e5:88:35:e3:03:8a:44:7e:13:f7:e1:73:1b:
ed:1d:d5:7a:e3:4f:65:82:f2:4a:dc:64:25:2b:b0:
e5:f5:19:a1:f2:ea:b2:59:9d:97:68:1d:83:94:bb:
6e:2f:20:cb:a2:ea:94:34:29:b8:60:a4:fe:97:10:
f4:b3:6c:60:5c:b2:6a:f6:40:2d:23:ae:0e:2a:ae:
55:a1:9c:ab:9a:6e:13:c6:01:e6:99:27:b5:7f:46:
93:71:12:1c:42:f2:99:e7:05:c8:8f:3a:b6:d6:cc:
73:f8:73:e0:21:50:ff:7d:9f:30:0e:f5:6e:89:58:
88:92:78:da:37:0e:ea:d5:8e:01:4e:8c:52:cd:0a:
71:80:b4:b3:78:77:a9:94:dc:42:7c:14:95:d1:b1:
e5:23:54:73:44:d7:9a:77:23:44:4b:bf:6c:92:e6:
46:92:ed:c4:34:cf:d0:43:2e:6e:cb:7d:50:18:bd:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B6:81:31:BE:D5:A4:9D:EA:DA:73:40:68:C1:A0:B8:C6:27:9E:A9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/abaBMb7VpJ3q2nNAaMGguMYnnqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.56.0/21
146.120.8.0/22
Signature Algorithm: sha256WithRSAEncryption
06:7b:b4:55:43:a3:32:11:de:02:ef:63:47:38:a4:b6:17:d3:
bd:97:c4:5a:77:0b:8b:aa:15:d8:1f:99:30:d0:0d:d0:99:c2:
63:9a:3b:1e:d3:98:18:1c:3c:61:f7:a9:21:cc:cc:20:a4:f0:
73:cd:a9:29:eb:8a:76:7f:f9:63:61:44:a8:f1:58:b9:09:27:
23:f6:16:42:9d:71:b9:69:3c:4b:da:55:76:3e:25:95:23:95:
e3:17:2a:8c:bb:4c:a8:d4:60:fe:c0:0e:7d:c7:b4:1a:fb:7f:
53:4c:0b:8d:bf:76:21:54:e6:ee:13:fe:81:e2:80:cf:4e:23:
83:c7:7d:36:82:34:7c:62:a4:29:fc:fb:82:c9:f1:0f:b2:ef:
81:27:25:88:b3:9b:c8:70:8d:ec:c2:f3:0b:83:3c:f3:3d:2f:
05:88:e9:04:d7:73:a0:65:22:57:c9:67:b2:96:a2:44:16:a3:
70:7f:ba:0d:59:e5:13:d1:4f:4e:b4:b5:d0:85:b9:33:6f:fe:
d8:f8:a1:cc:be:b4:91:68:2d:94:6b:16:0d:7e:14:c9:23:07:
35:bb:df:5d:c0:c3:42:95:6b:5a:2f:5b:47:11:6a:36:09:9b:
e2:8f:20:0c:27:7e:a9:14:38:29:49:d7:c1:fc:cb:49:b6:a4:
39:f0:00:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:06 2025 by rpki-client