Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bQrK8dY_4U5J0IhORGAIQ263VVY.roa
File: bQrK8dY_4U5J0IhORGAIQ263VVY.roa (raw, json)
Hash identifier: a0VQ22NpBvsDVKfPozgYzVIdx55AweXOOpYIVt1zcSA=
Subject key identifier: 6D:0A:CA:F1:D6:3F:E1:4E:49:D0:88:4E:44:60:08:43:6E:B7:55:56
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01955DE715670AF861B4EB31363922D0D5FF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bQrK8dY_4U5J0IhORGAIQ263VVY.roa
Signing time: Mon 03 Mar 2025 21:26:20 +0000
ROA not before: Mon 03 Mar 2025 21:26:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39523
IP address blocks: 93.170.248.0/23 maxlen: 24
146.120.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:e7:15:67:0a:f8:61:b4:eb:31:36:39:22:d0:d5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Mar 3 21:26:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d0acaf1d63fe14e49d0884e446008436eb75556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:99:ad:b4:dd:8c:4b:95:4f:14:8e:75:8a:
13:e6:e7:50:82:73:cc:10:a1:8a:18:b6:14:33:7f:
cd:25:56:25:7b:7c:b2:7d:5d:13:cf:bd:68:ad:fc:
c3:38:ae:19:fe:cd:da:0b:6f:fc:36:73:13:bc:77:
75:c7:7f:3a:7f:3a:1b:71:fc:f7:b3:20:e4:79:85:
10:a7:be:d5:2b:13:fc:11:7a:73:6c:0b:6d:6b:f5:
84:38:46:82:88:0e:e5:4a:e5:54:07:27:fe:57:82:
21:3f:41:2c:b1:c8:db:23:46:1f:4b:30:b1:f6:b0:
63:3d:ea:dc:b1:9b:bd:85:40:b9:de:b2:33:62:09:
25:fb:d3:68:65:32:9e:58:b0:b0:b7:b9:3a:c9:b9:
18:84:3b:fc:4c:ec:a7:18:2f:2d:da:2e:69:ed:3f:
1c:ee:19:e5:cc:ff:74:7d:10:05:aa:ad:3f:89:9b:
dd:14:e4:76:21:be:7c:2a:d8:14:83:7a:bc:35:82:
83:e3:0f:0e:5f:a6:69:40:ad:60:a2:de:8b:c5:45:
3d:9f:fc:a6:8e:73:1a:33:cc:0b:48:a2:eb:7a:df:
7e:25:48:0a:18:30:9a:3d:b6:b0:e0:08:57:5c:45:
54:e8:2e:79:91:57:7e:74:09:06:b4:40:d3:aa:61:
98:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:0A:CA:F1:D6:3F:E1:4E:49:D0:88:4E:44:60:08:43:6E:B7:55:56
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bQrK8dY_4U5J0IhORGAIQ263VVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.248.0/23
146.120.216.0/22
Signature Algorithm: sha256WithRSAEncryption
14:6a:39:d1:ac:3b:8b:54:5b:1f:eb:6e:cd:1d:89:af:d3:5e:
61:81:99:79:86:36:84:00:05:d7:65:ad:13:1e:04:c4:bb:2f:
b5:6a:b0:a2:5d:ac:57:cd:9c:b3:ab:ad:9e:f3:bc:d0:a8:ed:
39:74:5f:a4:67:8b:c4:65:10:a5:bf:ed:45:36:7e:c7:bd:42:
d1:d1:d3:8a:89:d8:95:66:ea:3d:55:6f:8c:4b:76:b4:9a:cf:
51:34:89:f0:98:b0:08:9f:5d:9d:33:6c:36:3d:f8:0a:02:a0:
af:27:16:76:78:1d:a0:18:34:e3:8a:0f:34:48:8e:f7:54:b3:
cc:93:0f:e4:30:12:79:21:f9:54:82:96:07:67:3c:96:e9:77:
bc:6c:9c:94:e7:a0:86:e5:31:e0:54:88:f9:80:ae:b4:ff:36:
b5:6e:94:3f:f2:61:43:6a:36:35:03:c3:f9:79:23:12:22:83:
a3:50:71:99:30:f7:8b:56:b6:9d:8c:0b:13:06:dc:76:f1:2e:
f5:cb:0e:fe:82:81:61:11:6f:87:db:eb:5d:e3:0b:eb:9a:e6:
af:ed:fa:d5:f7:f6:b9:c4:c4:25:1a:81:7b:6d:2b:a2:28:93:
84:68:28:d7:40:e4:51:a8:33:5c:4e:39:7f:ae:1a:c6:12:cb:
95:5e:64:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:32 2025 by rpki-client