Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ccerAZF8Zf8wAudijvPnKfCtqfA.roa
File: ccerAZF8Zf8wAudijvPnKfCtqfA.roa (raw, json)
Hash identifier: GNLhlna4sY8EimhxOduDYVVsLmN2x4Ejyn6peIK/ty0=
Subject key identifier: 71:C7:AB:01:91:7C:65:FF:30:02:E7:62:8E:F3:E7:29:F0:AD:A9:F0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570951094711E16717A0E1C6FBED89207
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ccerAZF8Zf8wAudijvPnKfCtqfA.roa
Signing time: Mon 02 Jan 2023 03:44:55 +0000
ROA not before: Mon 02 Jan 2023 03:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35297
IP address blocks: 93.170.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:10:94:71:1e:16:71:7a:0e:1c:6f:be:d8:92:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71c7ab01917c65ff3002e7628ef3e729f0ada9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:3a:50:68:a5:ab:ca:a5:b7:16:91:0e:02:
55:76:22:be:23:c5:76:24:e8:e1:89:17:a9:29:1d:
11:09:a2:bf:93:4a:87:d1:ff:c2:e3:6c:84:81:51:
79:98:8b:3f:7b:3a:33:00:68:f1:23:0f:79:4a:d0:
c6:80:fd:3c:4f:0c:97:ad:ef:d8:64:3c:04:11:ab:
5a:0d:bf:6b:6f:12:76:b3:6b:95:f2:a7:bc:1c:75:
de:c8:8d:63:d8:dd:bc:ec:c6:dc:72:6f:65:6b:50:
10:81:6a:8a:c3:1f:74:26:f9:4c:f8:da:4f:6e:73:
6f:21:00:90:a9:33:62:f5:d9:05:42:c5:17:ac:4a:
60:9f:53:f8:79:f1:b8:b4:86:0f:a6:b4:50:a0:f4:
b2:0c:eb:e1:52:27:3b:00:0e:ab:72:fd:26:c7:c3:
ca:32:6f:cd:81:bd:7c:30:ce:a0:57:35:0c:97:8d:
8b:f8:9b:1e:0d:2f:cc:7d:ec:e5:ea:fa:6f:57:c5:
77:07:e2:f3:89:2f:df:2d:57:31:a1:88:28:9d:ae:
fe:1f:55:a8:fa:cf:de:87:fe:5c:d8:bd:aa:c5:8b:
10:b1:eb:fc:b7:54:dd:b5:41:52:1c:07:64:25:0b:
3a:71:73:5d:af:74:eb:64:db:2e:2f:f1:4c:f5:50:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C7:AB:01:91:7C:65:FF:30:02:E7:62:8E:F3:E7:29:F0:AD:A9:F0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ccerAZF8Zf8wAudijvPnKfCtqfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:98:40:4b:b9:14:6f:f1:95:c1:51:90:f5:91:13:ed:64:b7:
fa:e5:90:02:0d:f1:a1:a6:e1:02:82:be:2e:fa:db:f2:12:c6:
20:83:bb:09:bc:8f:c0:b9:5b:15:89:59:be:74:20:7c:ec:d5:
7e:5e:42:b0:c9:21:52:4c:80:fe:be:f1:4b:bc:1c:bc:7e:09:
47:c7:ff:8a:78:5d:77:c4:bb:a4:70:48:cc:97:06:f1:0f:0a:
15:3b:66:bd:98:b6:b3:e2:6c:92:0d:68:e1:c3:ba:4f:9e:5d:
4c:53:c9:90:7c:c2:07:cf:aa:a7:70:f4:47:5f:63:2e:13:0b:
45:f2:67:17:e1:d8:6b:e1:4c:68:49:dc:1e:6b:73:41:bf:c1:
c1:8f:1c:5a:e4:cb:32:9f:82:12:20:46:65:ec:96:02:a4:c8:
be:ba:21:46:f9:c4:cf:f8:f6:0f:21:9d:15:be:77:2c:f4:56:
60:a1:03:cc:4d:f7:c4:42:af:db:5f:d1:ef:7c:b9:bf:70:0e:
11:3a:15:71:93:36:eb:e9:18:92:43:7a:68:02:db:e1:03:8c:
67:46:fb:0a:61:31:a4:5f:91:69:f3:de:de:2f:9d:9a:70:e7:
5e:1e:22:c3:01:1b:df:be:32:93:9f:a0:a6:15:3e:4d:2d:10:
09:c7:50:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlRCUcR4WcXoOHG++2JIHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWM3YWIwMTkxN2M2NWZmMzAwMmU3NjI4ZWYzZTcyOWYwYWRhOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRk6UGilq8qltxaRDgJVdiK+I8V2
JOjhiRepKR0RCaK/k0qH0f/C42yEgVF5mIs/ezozAGjxIw95StDGgP08TwyXre/Y
ZDwEEataDb9rbxJ2s2uV8qe8HHXeyI1j2N287Mbccm9la1AQgWqKwx90JvlM+NpP
bnNvIQCQqTNi9dkFQsUXrEpgn1P4efG4tIYPprRQoPSyDOvhUic7AA6rcv0mx8PK
Mm/Ngb18MM6gVzUMl42L+JseDS/Mfezl6vpvV8V3B+LziS/fLVcxoYgona7+H1Wo
+s/eh/5c2L2qxYsQsev8t1TdtUFSHAdkJQs6cXNdr3TrZNsuL/FM9VB1DwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHHHqwGRfGX/MALnYo7z5ynwranwMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvY2NlckFaRjhaZjh3QXVkaWp2UG5LZkN0cWZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXao1MA0G
CSqGSIb3DQEBCwUAA4IBAQCzmEBLuRRv8ZXBUZD1kRPtZLf65ZACDfGhpuECgr4u
+tvyEsYgg7sJvI/AuVsViVm+dCB87NV+XkKwySFSTID+vvFLvBy8fglHx/+KeF13
xLukcEjMlwbxDwoVO2a9mLaz4mySDWjhw7pPnl1MU8mQfMIHz6qncPRHX2MuEwtF
8mcX4dhr4UxoSdwea3NBv8HBjxxa5Msyn4ISIEZl7JYCpMi+uiFG+cTP+PYPIZ0V
vncs9FZgoQPMTffEQq/bX9HvfLm/cA4ROhVxkzbr6RiSQ3poAtvhA4xnRvsKYTGk
X5Fp897eL52acOdeHiLDARvfvjKTn6CmFT5NLRAJx1Ar
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:48 2025 by rpki-client