Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bku1iLseEeqbS4eNtowjeuDEIpc.roa
File: bku1iLseEeqbS4eNtowjeuDEIpc.roa (raw, json)
Hash identifier: /VPmQcJEjEuIPwRQuoJEigrsENDKXMgXtdl3edD8LRA=
Subject key identifier: 6E:4B:B5:88:BB:1E:11:EA:9B:4B:87:8D:B6:8C:23:7A:E0:C4:22:97
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0182CBF3A42C8BD0DA8A7B96E3F8333DCFF3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bku1iLseEeqbS4eNtowjeuDEIpc.roa
Signing time: Tue 23 Aug 2022 18:25:18 +0000
ROA not before: Tue 23 Aug 2022 18:25:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60777
IP address blocks: 93.170.0.0/24 maxlen: 24
95.47.136.0/24 maxlen: 24
93.170.25.0/24 maxlen: 24
95.46.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:f3:a4:2c:8b:d0:da:8a:7b:96:e3:f8:33:3d:cf:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 23 18:25:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e4bb588bb1e11ea9b4b878db68c237ae0c42297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:7c:26:d4:5f:6d:be:d1:2b:7e:2e:f2:fa:
40:99:c5:2e:80:29:b2:86:b6:a6:63:d7:21:50:97:
ea:5a:25:51:71:fb:07:b7:94:53:79:17:6f:4e:de:
d5:67:b0:37:6b:1b:49:98:08:47:47:76:24:a0:53:
ca:84:bf:e8:3c:a2:15:b7:31:fb:a6:cd:fd:49:59:
00:14:d2:80:8c:b3:49:04:80:21:d9:10:e0:1e:43:
90:8d:c1:84:71:d3:44:4a:53:13:ec:d7:b9:b5:8b:
a2:ff:3a:a5:7e:ba:7b:68:5e:7f:32:3e:c7:ba:26:
b7:89:c1:dd:de:93:d5:33:06:3e:50:73:6b:89:49:
57:4a:87:de:b9:27:2f:a4:93:f0:1d:e3:47:2f:f2:
06:35:cd:a5:d1:a0:9f:e6:1b:03:6c:00:e5:50:96:
3c:e1:6d:96:58:99:79:b5:2f:34:9f:d0:fc:78:2e:
13:96:46:4c:11:35:7c:8c:82:d1:42:95:51:66:9d:
ef:a6:62:27:d3:d6:16:07:c5:23:c1:a6:2a:1c:57:
91:a4:fb:fd:e6:79:e5:10:f9:23:a5:a9:da:c6:0f:
7b:f8:0f:9e:12:4f:56:76:59:6b:8f:12:3c:ae:12:
38:2d:bc:43:68:62:ef:ec:37:b2:c8:c4:dd:e5:3a:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:4B:B5:88:BB:1E:11:EA:9B:4B:87:8D:B6:8C:23:7A:E0:C4:22:97
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bku1iLseEeqbS4eNtowjeuDEIpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.0.0/24
93.170.25.0/24
95.46.108.0/24
95.47.136.0/24
Signature Algorithm: sha256WithRSAEncryption
33:18:60:b0:15:23:41:c5:a9:52:70:88:44:98:21:af:29:45:
ae:78:03:98:81:27:0d:a0:ec:1d:9a:30:0b:70:85:29:9c:95:
e5:dc:2b:cb:5a:41:7f:83:24:44:1b:a6:73:3a:57:b9:8f:95:
8d:44:bb:bd:2a:a2:ce:da:f0:53:b4:57:33:eb:1d:fb:17:dd:
e0:4b:ea:b3:73:86:fb:bd:9e:05:3c:69:21:4b:6f:78:76:ba:
24:cc:e5:1e:ee:30:b9:77:08:af:97:ae:60:57:0a:d7:c5:d8:
97:98:ca:72:4a:2a:95:35:9a:99:79:89:4d:d5:b3:63:0c:5a:
1d:6f:31:e0:df:6b:a7:97:f2:90:06:83:9f:fe:00:e5:5d:47:
ae:54:2e:9f:9d:5c:fb:73:3b:6a:59:34:80:9c:31:df:03:d2:
f3:8f:9e:1f:89:33:32:e2:2a:6a:be:31:e8:14:f3:95:72:1a:
ce:b4:6b:9a:20:5a:66:00:17:1e:bc:b2:37:4f:3b:20:df:11:
88:03:4e:48:ff:df:be:6e:53:3e:98:df:e9:5a:c7:56:76:3c:
21:f3:35:4f:9a:1e:c7:95:b3:d9:1b:af:61:4e:5b:50:8a:e8:
c0:a9:2c:2f:d7:af:4b:63:fd:d2:99:5a:ef:4f:b4:ff:97:1c:
12:b0:06:dc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYLL86Qsi9DainuW4/gzPc/zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjIwODIzMTgyNTE4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTRiYjU4OGJiMWUxMWVhOWI0Yjg3OGRiNjhjMjM3YWUwYzQyMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc18JtRfbb7RK34u8vpAmcUugCmy
hramY9chUJfqWiVRcfsHt5RTeRdvTt7VZ7A3axtJmAhHR3YkoFPKhL/oPKIVtzH7
ps39SVkAFNKAjLNJBIAh2RDgHkOQjcGEcdNESlMT7Ne5tYui/zqlfrp7aF5/Mj7H
uia3icHd3pPVMwY+UHNriUlXSofeuScvpJPwHeNHL/IGNc2l0aCf5hsDbADlUJY8
4W2WWJl5tS80n9D8eC4TlkZMETV8jILRQpVRZp3vpmIn09YWB8UjwaYqHFeRpPv9
5nnlEPkjpanaxg97+A+eEk9WdllrjxI8rhI4LbxDaGLv7DeyyMTd5TqdcQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFG5LtYi7HhHqm0uHjbaMI3rgxCKXMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvYmt1MWlMc2VFZXFiUzRlTnRvd2pldURFSXBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXaoAAwQA
XaoZAwQAXy5sAwQAXy+IMA0GCSqGSIb3DQEBCwUAA4IBAQAzGGCwFSNBxalScIhE
mCGvKUWueAOYgScNoOwdmjALcIUpnJXl3CvLWkF/gyREG6ZzOle5j5WNRLu9KqLO
2vBTtFcz6x37F93gS+qzc4b7vZ4FPGkhS294drokzOUe7jC5dwivl65gVwrXxdiX
mMpySiqVNZqZeYlN1bNjDFodbzHg32unl/KQBoOf/gDlXUeuVC6fnVz7cztqWTSA
nDHfA9Lzj54fiTMy4ipqvjHoFPOVchrOtGuaIFpmABcevLI3Tzsg3xGIA05I/9++
blM+mN/pWsdWdjwh8zVPmh7HlbPZG69hTltQiujAqSwv169LY/3SmVrvT7T/lxwS
sAbc
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:27:23 2025 by rpki-client