Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/anUZdarBVauEbSdhkRwC1jKQSVw.roa
File: anUZdarBVauEbSdhkRwC1jKQSVw.roa (raw, json)
Hash identifier: eCq87DcxOeTLCyvR1D1ukMs/ZoMyL4k4M2FHfltEm+4=
Subject key identifier: 6A:75:19:75:AA:C1:55:AB:84:6D:27:61:91:1C:02:D6:32:90:49:5C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB1CFEBDF923028F5A34D586DE430
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/anUZdarBVauEbSdhkRwC1jKQSVw.roa
Signing time: Thu 02 Jan 2025 05:49:21 +0000
ROA not before: Thu 02 Jan 2025 05:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49184
IP address blocks: 93.170.3.0/24 maxlen: 24
93.171.96.0/23 maxlen: 24
93.171.96.0/24 maxlen: 24
93.171.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b1:cf:eb:df:92:30:28:f5:a3:4d:58:6d:e4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a751975aac155ab846d2761911c02d63290495c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:1d:e2:06:b4:7d:b5:53:66:df:74:34:9c:
1b:60:cb:2e:7d:db:f4:2b:13:c1:63:9a:2f:fe:6a:
7e:ae:83:81:6e:e5:9a:bf:88:b9:32:a8:df:e8:e3:
86:9f:94:91:c8:a8:45:79:7c:cf:fa:69:64:96:bc:
b9:fb:a8:70:a4:7f:68:ce:a3:59:41:2d:cc:d6:0c:
ef:cb:a7:3f:5b:df:51:3c:52:fd:90:51:68:4d:42:
3a:f5:ae:74:8c:97:e2:cb:f4:5d:2e:cb:9a:ef:38:
3a:b1:12:46:33:0d:0f:23:0b:c6:a1:1b:05:b2:70:
76:5b:a6:49:32:d6:58:96:30:0d:b1:99:f8:c2:32:
5e:13:5c:8a:2b:45:2a:ca:8a:99:89:6d:67:25:f5:
8b:be:65:f0:37:a0:0d:96:7a:35:44:60:87:83:cd:
21:3f:ea:ed:65:f2:ef:a8:b2:e7:4c:b2:76:bc:94:
a4:b2:f6:1d:98:e9:ad:7f:c7:34:2e:22:2b:17:fe:
ea:a8:4a:42:4c:c7:c9:df:65:1f:c4:91:01:a5:21:
f0:f8:ba:a5:c4:de:79:78:30:26:43:72:e3:a5:c2:
20:08:cb:a7:88:e8:91:26:2b:28:81:b4:9b:b9:97:
09:c3:0c:ed:5f:a3:02:30:31:32:41:03:8d:b9:0b:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:75:19:75:AA:C1:55:AB:84:6D:27:61:91:1C:02:D6:32:90:49:5C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/anUZdarBVauEbSdhkRwC1jKQSVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.3.0/24
93.171.96.0/23
Signature Algorithm: sha256WithRSAEncryption
04:f4:02:69:49:14:13:b8:f2:11:33:e9:bf:3f:49:d5:54:33:
25:0d:34:53:9b:52:fd:da:e5:88:ce:7d:e1:06:8d:6d:7b:33:
f8:be:86:1a:db:45:30:da:cd:f9:62:de:ab:37:c3:6d:54:a5:
31:b3:f9:84:7a:4b:97:dd:fd:9f:50:3c:dd:b0:a9:c8:4a:d1:
d3:ba:2b:ba:85:e9:fb:65:99:48:42:32:45:13:44:37:36:0f:
0f:be:15:6c:6c:6f:b5:6e:cc:80:40:61:eb:ee:3d:cb:77:31:
03:27:b0:c5:e1:81:e7:09:a7:34:02:3e:93:53:db:0e:2f:ba:
b3:4e:86:8b:e3:01:3c:63:3f:d7:f4:72:b2:9b:57:9a:ab:f4:
c2:52:08:5e:cf:64:56:87:09:d5:42:31:a8:57:ee:61:de:f6:
8b:1a:ba:b3:13:b1:bf:d2:6a:de:af:fe:be:ff:9d:43:d8:1b:
4d:1d:01:0b:83:27:1d:06:6b:88:2d:f2:cd:70:42:df:4f:61:
cb:77:a6:c1:95:fc:77:96:f5:78:f9:aa:a3:19:55:26:1b:c3:
59:ea:d3:e6:d7:6d:a4:5c:f7:82:72:4d:5e:96:8b:a4:89:bc:
de:ef:5e:8e:45:e1:b3:a8:d5:69:92:3a:97:ee:b6:cc:ea:a7:
51:3f:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:12 2025 by rpki-client