Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bnM6qvoaM_gHUduwgoFo9flBufk.roa
File: bnM6qvoaM_gHUduwgoFo9flBufk.roa (raw, json)
Hash identifier: ojluuWBMdO39yn9KJ5tVEE4yEW4VvkcY/KpSr+yy9J0=
Subject key identifier: 6E:73:3A:AA:FA:1A:33:F8:07:51:DB:B0:82:81:68:F5:F9:41:B9:F9
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194259003B0EEA82E30CE80CB380C8C9D14
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bnM6qvoaM_gHUduwgoFo9flBufk.roa
Signing time: Thu 02 Jan 2025 05:49:42 +0000
ROA not before: Thu 02 Jan 2025 05:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209863
IP address blocks: 93.170.78.0/24 maxlen: 24
95.47.162.0/24 maxlen: 24
2a02:128:4::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:03:b0:ee:a8:2e:30:ce:80:cb:38:0c:8c:9d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e733aaafa1a33f80751dbb0828168f5f941b9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:aa:7e:c2:a0:9a:7d:10:2d:07:ba:84:e6:0b:
29:c4:d2:f0:77:9f:82:28:be:0c:9f:31:63:fe:ba:
2e:d5:e0:e0:fe:dd:88:ee:d0:cc:4d:c8:fb:d9:d4:
72:2b:70:52:52:58:76:45:6a:c0:43:83:e0:aa:95:
99:4b:01:28:15:bf:d4:9a:d1:5b:22:0a:9b:ab:bc:
e4:7b:cf:a5:f0:f6:5c:90:6e:fe:89:3b:d2:39:f8:
0c:bb:dc:e1:cb:e2:dd:45:63:53:70:56:d8:f3:96:
58:b3:3c:a0:de:b2:4b:a5:35:b2:94:e8:b0:ce:67:
c7:e9:f6:d4:52:a2:52:fc:96:a4:a7:54:a5:e6:a6:
49:d9:33:0d:29:ac:85:26:bc:a3:54:e8:cf:47:89:
c8:fa:b7:7d:bb:e7:38:e0:6b:a1:b6:d1:5e:a6:37:
07:d2:d9:95:69:e6:15:9f:b4:4e:36:74:ec:ad:b0:
a1:c0:2e:a5:d8:4b:3d:5f:a5:3e:27:df:3b:d1:06:
ba:92:24:87:4a:a9:55:67:0f:e2:ce:ad:a5:c2:64:
a4:a9:65:5b:6d:87:bd:1c:eb:bf:7f:e9:ad:2c:5a:
b8:67:60:02:a3:c8:76:de:a6:24:15:c6:9a:d8:29:
a3:c8:87:a4:89:77:fb:2b:6b:09:b3:34:94:22:b3:
ee:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:73:3A:AA:FA:1A:33:F8:07:51:DB:B0:82:81:68:F5:F9:41:B9:F9
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/bnM6qvoaM_gHUduwgoFo9flBufk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.78.0/24
95.47.162.0/24
IPv6:
2a02:128:4::/48
Signature Algorithm: sha256WithRSAEncryption
7f:0a:81:48:2a:c0:eb:e4:07:4a:36:eb:0d:bc:cc:ef:d5:53:
74:ca:cc:fa:cb:8c:db:5f:6e:8c:30:9b:80:a9:fe:d9:37:43:
50:fa:0e:f5:ba:87:c2:e4:29:a1:28:90:cd:2f:80:7c:0a:3a:
f9:fa:17:d1:10:82:a0:4e:73:72:f1:77:13:33:bc:03:03:2f:
65:5b:e9:67:63:0b:9c:96:56:0b:0d:62:de:59:6d:83:3a:1a:
16:8b:c3:ce:71:b5:f0:15:3b:67:65:63:cf:92:61:57:e9:30:
04:86:75:f4:48:7a:62:5d:12:73:31:f5:c6:1d:95:ce:22:61:
a9:a0:34:58:66:19:00:a1:65:e1:11:21:28:96:af:65:3f:71:
48:25:0d:c6:c5:7b:16:a3:b6:c4:cb:00:85:19:79:f2:cc:b9:
e3:35:89:99:0d:c6:9f:ed:03:66:a7:c2:2e:0b:9e:43:ff:db:
1e:cc:be:43:83:41:a2:b2:53:f7:07:61:3e:3a:d3:37:6d:f1:
4b:6a:14:ea:1c:ee:d7:46:13:38:f9:b7:80:8a:fb:6c:5f:ba:
40:ce:6d:aa:39:64:e0:1a:02:f3:2b:25:d6:5c:43:e8:93:62:
f2:67:08:6f:24:5d:11:dc:c3:19:3c:49:f4:27:ab:2a:64:02:
19:63:19:b6
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZQlkAOw7qguMM6AyzgMjJ0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTczM2FhYWZhMWEzM2Y4MDc1MWRiYjA4MjgxNjhmNWY5NDFiOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqp+wqCafRAtB7qE5gspxNLwd5+C
KL4MnzFj/rou1eDg/t2I7tDMTcj72dRyK3BSUlh2RWrAQ4PgqpWZSwEoFb/UmtFb
Igqbq7zke8+l8PZckG7+iTvSOfgMu9zhy+LdRWNTcFbY85ZYszyg3rJLpTWylOiw
zmfH6fbUUqJS/Jakp1Sl5qZJ2TMNKayFJryjVOjPR4nI+rd9u+c44GuhttFepjcH
0tmVaeYVn7RONnTsrbChwC6l2Es9X6U+J9870Qa6kiSHSqlVZw/izq2lwmSkqWVb
bYe9HOu/f+mtLFq4Z2ACo8h23qYkFcaa2CmjyIekiXf7K2sJszSUIrPuqQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFG5zOqr6GjP4B1HbsIKBaPX5Qbn5MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvYm5NNnF2b2FNX2dIVWR1d2dvRm85ZmxCdWZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAXapOAwQA
Xy+iMA8EAgACMAkDBwAqAgEoAAQwDQYJKoZIhvcNAQELBQADggEBAH8KgUgqwOvk
B0o26w28zO/VU3TKzPrLjNtfbowwm4Cp/tk3Q1D6DvW6h8LkKaEokM0vgHwKOvn6
F9EQgqBOc3LxdxMzvAMDL2Vb6WdjC5yWVgsNYt5ZbYM6GhaLw85xtfAVO2dlY8+S
YVfpMASGdfRIemJdEnMx9cYdlc4iYamgNFhmGQChZeERISiWr2U/cUglDcbFexaj
tsTLAIUZefLMueM1iZkNxp/tA2anwi4LnkP/2x7MvkODQaKyU/cHYT460zdt8Utq
FOoc7tdGEzj5t4CK+2xfukDObao5ZOAaAvMrJdZcQ+iTYvJnCG8kXRHcwxk8SfQn
qypkAhljGbY=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:50 2025 by rpki-client