Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c9-I05VJKAKQlg4-sTrfvx-rwEM.roa
File: c9-I05VJKAKQlg4-sTrfvx-rwEM.roa (raw, json)
Hash identifier: pTlrJcYLhttAzGBzk9CrdKDbZtTX8nlFv6v+otnXUD8=
Subject key identifier: 73:DF:88:D3:95:49:28:02:90:96:0E:3E:B1:3A:DF:BF:1F:AB:C0:43
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FBC7D779C295308B63ED753028297
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c9-I05VJKAKQlg4-sTrfvx-rwEM.roa
Signing time: Thu 02 Jan 2025 05:49:24 +0000
ROA not before: Thu 02 Jan 2025 05:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51500
IP address blocks: 93.171.154.0/24 maxlen: 24
95.47.56.0/24 maxlen: 24
95.47.196.0/23 maxlen: 24
146.158.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:bc:7d:77:9c:29:53:08:b6:3e:d7:53:02:82:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73df88d39549280290960e3eb13adfbf1fabc043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:b7:39:9a:5d:73:a0:5b:22:49:18:ac:13:
e6:36:37:8c:3c:ea:b8:73:30:bb:bb:2f:12:92:28:
0e:8f:09:e9:ac:35:14:89:e0:6e:c4:7a:11:c6:53:
5b:43:f4:aa:3d:5e:b0:71:55:bf:84:f9:bf:1d:c3:
14:8a:c9:a2:34:dd:a6:c9:83:a7:74:57:0c:03:85:
90:95:11:9c:d1:b6:2a:a3:47:79:08:9d:8a:3e:24:
86:f8:6a:1e:f0:66:5e:d8:99:9b:6a:25:3b:f7:99:
9f:2b:11:3f:0e:7e:96:e4:07:3f:ad:86:eb:d3:83:
0b:49:77:1c:03:d7:79:ca:24:18:c5:1f:e3:19:38:
86:70:c7:4a:e5:16:6c:0e:80:87:8d:9c:6b:ea:26:
5b:52:c1:05:47:e5:81:91:01:2a:24:51:76:90:cc:
6b:da:e8:11:f6:44:ce:28:32:89:85:c5:49:56:d0:
ea:4a:db:38:4f:da:a8:7d:c0:9a:b0:94:24:50:48:
82:72:93:d8:23:31:4a:f9:68:81:36:bd:14:bf:30:
3a:11:11:b1:76:b6:6d:a0:af:fe:51:8b:57:9f:98:
23:3d:9f:a3:93:7f:05:d0:a9:c3:4e:39:3c:53:e1:
d4:be:56:2d:08:64:a5:2b:dc:58:6b:9f:f6:6a:7a:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DF:88:D3:95:49:28:02:90:96:0E:3E:B1:3A:DF:BF:1F:AB:C0:43
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/c9-I05VJKAKQlg4-sTrfvx-rwEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.154.0/24
95.47.56.0/24
95.47.196.0/23
146.158.73.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e0:33:ac:95:a9:f6:bc:3b:63:e1:05:aa:9e:22:f2:24:a1:
c3:9a:dc:f0:6c:98:79:6c:5d:74:a5:25:f7:50:a3:8e:4c:d9:
44:e3:4f:b9:bc:5b:ac:97:ff:73:82:4c:75:ab:5a:02:ca:95:
58:1d:9b:81:45:b9:f3:f6:20:b0:d1:6d:21:0e:9d:f5:6c:76:
33:c3:89:d0:4b:16:65:07:fb:9b:b6:47:4c:cb:e8:ff:3f:d1:
75:48:05:9b:55:3c:f0:da:97:80:bf:3a:59:46:ea:9b:31:02:
5c:77:75:c1:7f:94:19:53:8d:a6:06:89:49:97:cf:dc:03:b7:
e0:98:1b:d2:ba:26:c9:53:11:2d:99:8b:de:9d:57:b8:c9:e6:
c2:9a:3e:c8:48:ad:ba:f4:aa:8b:a9:d5:24:f9:4c:a0:fe:de:
11:d8:ca:61:0f:c7:0f:7e:15:23:e6:0a:bb:7e:2e:b6:24:ad:
ca:82:6e:79:cd:cc:d3:5d:8a:0c:93:03:74:4a:2b:e6:6f:9d:
15:7b:4b:f6:97:d4:70:6e:79:91:f6:51:c8:e6:16:cf:aa:43:
36:1b:69:e9:5a:a9:b0:e1:a5:00:5a:c5:aa:fb:1c:86:bd:81:
a7:ce:02:d4:89:e4:de:de:20:f4:72:ce:8d:f0:af:77:5d:8a:
69:dd:d1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:06 2025 by rpki-client