Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cwN6b6f23fn0mi7JqeVhcvXL19I.roa
File: cwN6b6f23fn0mi7JqeVhcvXL19I.roa (raw, json)
Hash identifier: y9BOTobNnARaUxCo3aSrytwlrh9aOG61XbCPLz23cC8=
Subject key identifier: 73:03:7A:6F:A7:F6:DD:F9:F4:9A:2E:C9:A9:E5:61:72:F5:CB:D7:D2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 2782E7F2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cwN6b6f23fn0mi7JqeVhcvXL19I.roa
Signing time: Sat 01 Jan 2022 16:08:12 +0000
ROA not before: Sat 01 Jan 2022 16:08:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42704
IP address blocks: 93.171.177.0/24 maxlen: 24
93.171.205.0/24 maxlen: 24
93.170.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662890482 (0x2782e7f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73037a6fa7f6ddf9f49a2ec9a9e56172f5cbd7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:38:0a:5a:d2:36:3f:e0:35:03:33:41:df:55:
3b:e0:1f:97:53:d3:8e:42:a3:31:ce:f7:81:09:2d:
36:4c:a0:1a:9c:0c:b0:31:83:ce:b9:29:39:27:46:
cc:10:06:20:77:21:0b:4d:90:d8:3c:72:fe:57:cb:
d4:0d:d5:b0:b3:ce:e3:4a:04:41:fa:9e:16:5b:a1:
43:98:26:1b:d6:de:f1:f7:48:6e:d2:6e:71:7e:5d:
10:2d:8c:be:90:0a:70:7e:30:ed:87:65:82:eb:32:
cb:c5:85:f2:46:a7:1b:4c:88:1a:d2:01:98:34:aa:
b8:80:34:8b:5d:3c:a7:0d:d6:c0:84:47:5d:2b:50:
3e:13:af:8a:e1:79:27:d0:44:6a:aa:11:a4:ca:6f:
66:ed:0b:02:18:88:5a:68:bd:55:78:ba:07:89:1f:
fa:4f:02:d0:5e:f1:51:0e:56:b2:6c:d1:54:7b:a3:
b1:29:ba:01:fd:05:b2:4d:85:28:50:ab:4b:83:f9:
c8:7d:0b:dd:39:6c:d7:ca:92:3f:9f:ac:8f:dd:b0:
de:84:b5:a1:b0:72:2d:89:92:2a:bb:d4:5e:ea:cf:
4b:48:d1:a7:90:8a:f9:47:97:31:35:71:9f:9c:09:
98:d3:27:68:ac:b6:e5:82:0a:22:f6:9d:be:30:f5:
cc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:03:7A:6F:A7:F6:DD:F9:F4:9A:2E:C9:A9:E5:61:72:F5:CB:D7:D2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/cwN6b6f23fn0mi7JqeVhcvXL19I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.174.0/24
93.171.177.0/24
93.171.205.0/24
Signature Algorithm: sha256WithRSAEncryption
18:50:de:14:68:ca:66:a3:07:b3:48:87:24:a3:92:0b:96:98:
e6:01:88:8b:ab:dd:45:74:f4:5e:5f:32:6b:18:c3:06:db:36:
d8:cd:29:c0:77:0e:a0:3d:7a:a9:7c:2d:78:8c:63:ad:3f:f1:
7f:60:97:d4:03:19:04:da:88:4a:52:3e:8c:58:e5:21:7d:e0:
bc:91:d4:8e:35:aa:c2:48:9a:96:c0:7a:2c:bd:6f:23:8e:c6:
fa:27:c4:98:34:7d:e9:f6:e9:08:57:bd:9d:0f:c6:08:2b:63:
84:60:cd:a6:2c:8c:d3:23:5e:5d:c1:be:30:90:fc:24:10:b6:
b5:e3:71:43:46:ef:c3:1c:38:34:46:f1:c3:1d:90:e8:f2:f9:
c7:32:e7:ed:09:1e:e4:19:49:a9:e2:cb:dc:e4:56:71:dd:80:
90:56:4e:3b:c4:a4:44:38:b4:36:b7:40:44:1d:0d:0e:b9:01:
e2:b8:e1:8f:46:4a:5a:09:05:71:02:87:7f:60:bd:51:38:43:
c4:d6:f5:61:2a:64:ef:3d:c9:3e:c7:52:45:05:6b:61:27:f9:
fd:ea:fe:8d:8f:30:36:1c:ee:99:5e:64:21:c5:b3:59:62:0f:
20:3e:d6:36:71:5d:27:15:c2:df:c5:ac:0d:03:8d:cc:54:4c:
c9:5f:1d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:38 2025 by rpki-client