Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/d24nuAyyVeZn3MQmCfOZkdAyPvA.roa
File: d24nuAyyVeZn3MQmCfOZkdAyPvA.roa (raw, json)
Hash identifier: gQ6dXe4kZEkKvmf6nkSYtuH0Xh5SJKidRHao88Z6yLQ=
Subject key identifier: 77:6E:27:B8:0C:B2:55:E6:67:DC:C4:26:09:F3:99:91:D0:32:3E:F0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095460BE5B3B2DF04F182D702F7081C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/d24nuAyyVeZn3MQmCfOZkdAyPvA.roa
Signing time: Mon 02 Jan 2023 03:45:09 +0000
ROA not before: Mon 02 Jan 2023 03:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49963
IP address blocks: 146.120.176.0/22 maxlen: 22
93.170.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:46:0b:e5:b3:b2:df:04:f1:82:d7:02:f7:08:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=776e27b80cb255e667dcc42609f39991d0323ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:49:f9:c9:cf:96:92:a7:11:fd:85:53:7d:9b:
89:33:b6:17:ac:a5:cf:b4:6b:56:e2:ac:31:0f:97:
fd:87:13:f8:66:16:e3:f0:e4:dd:5f:f2:75:97:ac:
7e:0a:79:0c:33:12:62:7a:f5:06:b5:f1:b6:99:d0:
fc:f7:7d:c9:67:6f:75:ea:7f:37:bf:96:14:ac:d6:
26:f6:d3:e4:44:61:c5:9f:c4:7c:0a:c0:82:52:04:
6b:2b:fc:17:c2:b0:3c:5e:b2:5a:5a:69:78:60:27:
be:83:3e:e6:57:c7:b0:70:19:d0:02:64:2d:c6:7e:
0c:10:46:29:56:de:9a:24:31:b9:ce:dd:66:05:fe:
65:6f:dd:09:c4:05:80:9a:72:74:ed:95:f2:6f:8b:
70:b5:6e:23:7e:38:72:39:d9:b4:b9:e2:48:8d:0c:
f5:42:01:41:9e:72:e5:90:88:84:37:cd:78:ce:c0:
d1:32:17:7b:3d:dc:3b:a2:fb:d4:8e:75:35:ac:a7:
3c:97:62:71:83:ca:7b:e7:f3:51:d0:34:45:2e:a1:
dc:dc:81:50:04:ab:04:63:61:dc:56:6f:60:54:56:
96:fb:68:60:68:17:43:f3:d4:57:2c:36:e4:b2:a5:
98:a1:7c:ed:80:94:0b:2f:b5:b3:d1:74:80:21:93:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6E:27:B8:0C:B2:55:E6:67:DC:C4:26:09:F3:99:91:D0:32:3E:F0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/d24nuAyyVeZn3MQmCfOZkdAyPvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.108.0/22
146.120.176.0/22
Signature Algorithm: sha256WithRSAEncryption
08:80:5e:9d:e3:aa:52:90:05:f8:47:47:aa:8b:e4:f7:d7:85:
b6:78:77:50:8d:e0:49:d2:9e:de:65:66:56:9a:b3:a3:88:e9:
0e:55:c3:c5:51:12:f7:8f:a5:30:11:38:11:3d:45:54:82:c3:
60:d8:4c:d7:79:93:c0:f7:f4:77:a6:d0:39:dd:6e:26:ce:98:
ef:0c:2c:22:52:ef:d0:7b:95:7c:2e:ca:6a:11:3b:4b:39:ef:
21:1a:35:c8:67:de:46:7a:f9:5b:2d:a3:83:e2:d9:71:36:e0:
e6:1b:8a:ed:b2:fc:7c:d3:ae:d9:3e:da:bd:2f:0f:22:7e:9c:
cb:ef:98:08:b6:5f:fa:0d:ba:73:c3:cd:b7:27:1b:f4:f3:78:
10:f7:10:8c:b2:90:dc:7c:e7:37:83:c5:84:b1:23:fc:35:94:
c3:16:34:db:81:b6:36:1d:af:d8:ac:ec:8a:d3:a5:51:4b:90:
9c:a5:60:75:da:03:d8:be:aa:fd:a1:42:4c:01:20:a9:11:36:
dc:92:32:b5:d4:5a:b3:17:41:4a:84:f5:5b:f2:fe:47:35:81:
bc:7c:13:74:40:e1:a2:78:fd:d8:2a:11:79:96:7e:47:61:53:
cf:98:49:4e:4f:32:24:0a:bc:7b:93:b6:0f:aa:d5:4e:d3:9b:
76:53:41:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:55:52 2025 by rpki-client