Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/atBZHc_R17kBxVZRrFIbimSfY_Y.roa
File: atBZHc_R17kBxVZRrFIbimSfY_Y.roa (raw, json)
Hash identifier: 1y2aLWZWAiwks2w2c+091uImIduh8pbjFxwsM1txDTY=
Subject key identifier: 6A:D0:59:1D:CF:D1:D7:B9:01:C5:56:51:AC:52:1B:8A:64:9F:63:F6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E3D98649F5CC6F03D786FFE356A0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/atBZHc_R17kBxVZRrFIbimSfY_Y.roa
Signing time: Tue 02 Jan 2024 12:33:12 +0000
ROA not before: Tue 02 Jan 2024 12:33:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20688
IP address blocks: 93.171.184.0/24 maxlen: 24
146.120.0.0/21 maxlen: 24
146.120.116.0/22 maxlen: 24
93.171.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e3:d9:86:49:f5:cc:6f:03:d7:86:ff:e3:56:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ad0591dcfd1d7b901c55651ac521b8a649f63f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b2:b7:c4:94:8a:61:93:51:45:d0:22:ec:cb:
1c:2f:97:31:ee:6e:80:d7:3c:61:24:89:05:64:38:
98:7f:b3:e7:ed:10:82:c7:74:78:79:91:b5:39:c8:
d1:20:1e:08:d9:38:86:ca:05:94:e1:a8:fd:84:a6:
cf:7d:45:99:cb:4a:e9:b6:61:09:35:49:79:d2:59:
50:99:5e:35:85:ec:b1:da:c0:3e:e3:48:21:fa:2f:
a5:21:b3:47:f9:92:e2:df:61:0a:3c:f6:2a:61:f4:
af:d1:41:c2:da:0f:26:b5:f4:31:00:82:81:56:2d:
7c:d5:95:50:f5:11:9b:3f:51:0b:21:d0:a3:5c:f8:
53:98:d2:61:d7:59:b6:95:7b:fa:25:1b:70:57:8a:
e3:6f:a1:63:19:13:fa:31:d8:98:05:1a:8a:ac:ab:
1e:9e:7b:d8:19:5b:8b:bd:cf:7c:59:21:3e:7a:f7:
31:91:37:92:c6:de:5b:fb:6b:d2:ae:07:5d:c6:0d:
0f:de:04:20:f6:49:99:55:e6:6f:52:fa:31:b8:a0:
b2:c4:3a:30:af:37:9b:27:7e:5c:8d:d3:fe:de:80:
a6:89:38:e5:ed:88:80:02:b3:94:f4:62:cc:3f:a8:
55:59:0a:5f:b2:dc:29:58:0c:e3:08:8a:45:6d:d7:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D0:59:1D:CF:D1:D7:B9:01:C5:56:51:AC:52:1B:8A:64:9F:63:F6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/atBZHc_R17kBxVZRrFIbimSfY_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.143.0/24
93.171.184.0/24
146.120.0.0/21
146.120.116.0/22
Signature Algorithm: sha256WithRSAEncryption
36:63:0c:64:73:d5:37:a6:ba:fa:95:57:ec:ae:94:b7:97:58:
e6:fb:dd:dc:3a:7c:e6:38:33:ce:21:e4:79:48:fb:89:e8:77:
fc:de:6e:43:df:f5:44:9f:4b:26:84:74:df:92:dc:2c:92:02:
45:02:0b:15:46:03:a5:cf:e6:ce:47:a7:3b:21:e4:76:ca:a1:
49:6e:9e:3e:18:41:9e:0d:4b:d3:69:82:ee:b5:37:e0:96:3b:
1a:e6:df:14:74:99:09:95:ee:76:f1:23:4d:56:9c:b9:53:79:
43:e4:c0:3f:e5:a0:3f:78:0d:80:2c:bc:6b:0f:22:6a:ac:33:
4b:50:3c:ae:77:78:dd:7a:9c:98:b5:c0:9d:da:77:2b:49:89:
95:3b:fe:56:e3:92:eb:fd:38:c6:3e:39:bf:7c:95:ba:d8:fc:
d1:21:80:28:e3:32:e4:94:29:a0:3c:75:69:96:50:2d:f8:4b:
a8:df:5d:7e:f6:49:64:71:5a:4a:2b:3c:7f:80:d4:b0:17:37:
f4:de:fd:71:d4:16:1c:d4:ec:69:de:e0:a0:bc:eb:3e:0f:54:
1f:3b:04:17:cb:56:b6:6d:7a:39:ef:a7:79:c5:ea:07:8d:5e:
ba:d2:6c:49:95:d1:c3:02:cc:91:6f:a9:8b:3a:f8:f0:91:7f:
9c:c2:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:25 2025 by rpki-client