Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/f4YnGkij0OsXOBfsrGzKIHsx8_w.roa
File: f4YnGkij0OsXOBfsrGzKIHsx8_w.roa (raw, json)
Hash identifier: +mqIRN1OnfxMoxN0Bs73Tv9d7gazAcplLd5aPeeuyAI=
Subject key identifier: 7F:86:27:1A:48:A3:D0:EB:17:38:17:EC:AC:6C:CA:20:7B:31:F3:FC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 28F9C303
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/f4YnGkij0OsXOBfsrGzKIHsx8_w.roa
Signing time: Thu 24 Feb 2022 09:14:18 +0000
ROA not before: Thu 24 Feb 2022 09:14:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212205
IP address blocks: 93.171.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687457027 (0x28f9c303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 24 09:14:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f86271a48a3d0eb173817ecac6cca207b31f3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bb:c9:61:ca:7f:0e:20:0d:3d:bd:fa:c6:cd:
58:88:30:09:3b:85:21:15:41:f5:80:21:a9:db:e8:
7a:af:e5:40:60:ae:6c:35:e6:ce:06:64:88:b2:31:
69:3f:a3:5b:8d:3c:86:67:1d:1d:71:f1:7c:88:42:
c4:20:34:6e:36:a7:1d:3e:82:d7:70:2b:55:9a:ed:
70:e6:35:98:58:8e:b8:5d:bb:79:27:85:ac:5a:13:
32:6c:8d:29:b9:ff:03:b7:c8:a8:c3:e8:f0:81:d8:
44:be:88:0a:33:8c:8c:ee:41:9c:4f:36:2f:17:5e:
e0:61:aa:33:3c:99:b0:a4:16:11:3f:0d:99:8a:93:
12:bd:1b:c5:fe:eb:5d:40:57:49:9b:10:da:06:1a:
4f:6f:fc:55:81:79:f2:a1:72:2e:36:c7:be:28:91:
43:f4:ac:2b:0b:29:45:df:93:32:e2:d6:21:d3:da:
3b:99:92:b4:4f:9e:88:aa:46:d9:3d:a0:06:48:9e:
08:28:a1:d7:95:f0:ad:5f:a5:9d:02:2c:b1:9c:df:
1a:88:42:59:1e:d4:e5:cb:c5:e7:7f:3a:1f:f4:af:
20:3e:36:f1:99:9c:5f:30:78:a5:ed:4c:f5:f8:1e:
80:69:41:23:24:77:ad:89:76:ab:29:c3:fe:b6:ab:
5c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:86:27:1A:48:A3:D0:EB:17:38:17:EC:AC:6C:CA:20:7B:31:F3:FC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/f4YnGkij0OsXOBfsrGzKIHsx8_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.155.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f1:19:62:b9:e9:34:fc:e6:c7:87:ca:8a:e8:78:71:ca:fc:
11:61:ae:b2:df:ed:02:f6:38:9d:f5:5d:f0:32:5c:f2:6f:1f:
22:40:0f:ec:c7:a6:19:e5:ab:a8:5c:11:e3:9d:2f:87:5c:75:
83:d0:39:6c:d3:b8:bb:9e:f8:5d:f9:7b:98:86:88:9b:1c:bc:
3c:04:fb:ce:a9:22:01:07:04:7f:02:23:24:61:ab:7c:4c:64:
6a:d8:c2:f2:69:49:f7:86:f1:07:f0:3c:d0:ea:0f:91:c4:ac:
8e:58:33:1b:de:d6:0e:6d:fa:5e:06:f1:44:a6:d9:b7:bc:f0:
f4:8a:6c:a9:05:a9:ee:e7:c8:e5:64:27:fa:29:57:6c:39:46:
c2:c8:f7:8d:68:b3:d0:cd:05:0b:1b:e9:16:0b:07:71:97:09:
9a:61:36:70:68:4b:ac:9e:45:2e:bf:a9:c2:9e:46:13:0a:01:
fb:f3:e7:88:bc:ba:f0:ef:cf:57:26:a9:bc:a7:51:0e:46:6c:
96:06:5a:78:98:12:b7:22:e9:40:21:30:b8:20:2b:fa:54:d9:
68:a2:c8:3c:6c:70:3a:dc:65:26:a2:3c:52:b2:f2:24:2f:55:
7d:35:3a:3f:4b:35:fd:bf:49:19:a3:93:c0:79:17:d1:54:42:
45:f2:40:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:47 2025 by rpki-client