Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fW2Q_B6KOFYZcKISXsg5T6OOY7c.roa
File: fW2Q_B6KOFYZcKISXsg5T6OOY7c.roa (raw, json)
Hash identifier: HNhi7cmDfRQjnyCHtdc3w3NGMDVbKuUgRAZ8435eEA4=
Subject key identifier: 7D:6D:90:FC:1E:8A:38:56:19:70:A2:12:5E:C8:39:4F:A3:8E:63:B7
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01859619A0D4E58B453C0D4A5372A846BC73
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fW2Q_B6KOFYZcKISXsg5T6OOY7c.roa
Signing time: Mon 09 Jan 2023 10:35:39 +0000
ROA not before: Mon 09 Jan 2023 10:35:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211687
IP address blocks: 92.38.35.0/24 maxlen: 24
93.170.11.0/24 maxlen: 24
93.170.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:19:a0:d4:e5:8b:45:3c:0d:4a:53:72:a8:46:bc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 9 10:35:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d6d90fc1e8a38561970a2125ec8394fa38e63b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:65:41:b2:56:fb:0c:18:8b:9d:7f:d3:e9:
d7:40:07:0c:69:24:c0:43:70:eb:ef:eb:97:cc:4c:
0f:f5:81:4d:06:94:83:4c:13:3a:43:26:3a:75:4a:
a3:c0:75:aa:d2:d0:ff:fc:5b:f4:ee:d6:f3:13:69:
19:e0:f3:a6:e1:c9:1e:67:9b:c3:6f:a3:91:c6:76:
98:56:7f:63:49:b6:56:ae:c7:00:49:cb:11:a1:fa:
b8:e3:a7:e7:dd:8f:c0:43:55:9d:a4:22:c1:9a:53:
32:8a:fb:2a:85:a1:65:92:bc:bc:7b:69:78:ef:89:
90:3e:29:34:d8:5e:ca:2b:4f:d9:a9:48:ea:aa:cf:
85:e2:f6:2e:01:f1:29:95:fc:bc:40:5c:f0:0e:8c:
59:ab:6e:aa:6f:a6:55:ed:a1:41:67:e3:76:c6:e5:
0b:ac:1c:ff:cb:7b:70:b9:b4:3b:79:50:93:ca:9d:
34:07:7b:75:28:2f:f2:0c:d8:6b:c6:86:62:e7:07:
b0:18:4d:a7:ed:d3:d9:ef:68:e0:70:7d:a9:eb:58:
b1:7c:ef:af:8f:f7:62:c1:a8:6b:8e:1f:40:74:1c:
55:91:a3:62:ff:b2:4c:5c:97:63:d9:02:dc:0d:0d:
09:32:9b:f5:f9:26:ea:d1:da:46:df:cd:34:10:47:
63:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:6D:90:FC:1E:8A:38:56:19:70:A2:12:5E:C8:39:4F:A3:8E:63:B7
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fW2Q_B6KOFYZcKISXsg5T6OOY7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.35.0/24
93.170.11.0/24
93.170.24.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e0:37:21:58:04:c9:21:46:ae:62:f1:7b:02:2c:08:ff:e1:
47:8f:44:e1:1d:03:56:26:f5:52:ce:b6:68:c5:f9:2e:c3:cb:
c5:18:a7:23:af:83:e5:7f:b4:31:c5:31:1e:3f:ac:6b:95:83:
ba:d7:a1:99:6d:c8:5e:97:02:38:47:2a:b0:72:df:8b:9a:65:
30:f5:68:1f:3c:49:1c:a9:c9:41:c8:7d:31:1c:dd:4b:93:fc:
bd:06:61:3c:af:eb:0a:fa:8c:6e:fa:d4:a7:f2:ef:f9:53:ba:
ac:8e:d6:62:f8:45:3c:3a:73:dc:80:1b:d1:6a:b6:f3:91:0a:
f2:45:44:20:40:76:09:8b:7e:33:de:a3:3c:2c:97:29:b8:41:
02:1d:e3:50:e2:6f:88:9d:fd:4a:40:f9:cc:eb:4f:c6:78:d9:
44:c8:80:25:f9:5e:24:70:ee:65:92:15:19:00:0a:eb:79:4d:
e2:6e:33:15:f4:9b:02:f1:7d:37:c0:be:58:56:39:5d:05:c7:
ee:57:55:41:0f:4a:0f:31:71:4c:52:f1:6a:d6:29:e7:ef:6a:
ca:0c:7d:3f:ab:f0:da:b1:ce:88:b8:93:1f:51:fc:a1:c8:cb:
91:b1:e6:80:ad:90:fa:c2:3e:49:46:c2:5f:ba:4b:2f:6a:eb:
3a:70:92:55
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYWWGaDU5YtFPA1KU3KoRrxzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTA5MTAzNTM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDZkOTBmYzFlOGEzODU2MTk3MGEyMTI1ZWM4Mzk0ZmEzOGU2M2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/JlQbJW+wwYi51/0+nXQAcMaSTA
Q3Dr7+uXzEwP9YFNBpSDTBM6QyY6dUqjwHWq0tD//Fv07tbzE2kZ4POm4ckeZ5vD
b6ORxnaYVn9jSbZWrscAScsRofq446fn3Y/AQ1WdpCLBmlMyivsqhaFlkry8e2l4
74mQPik02F7KK0/ZqUjqqs+F4vYuAfEplfy8QFzwDoxZq26qb6ZV7aFBZ+N2xuUL
rBz/y3twubQ7eVCTyp00B3t1KC/yDNhrxoZi5wewGE2n7dPZ72jgcH2p61ixfO+v
j/diwahrjh9AdBxVkaNi/7JMXJdj2QLcDQ0JMpv1+Sbq0dpG3800EEdjeQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFH1tkPweijhWGXCiEl7IOU+jjmO3MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvZlcyUV9CNktPRllaY0tJU1hzZzVUNk9PWTdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXCYjAwQA
XaoLAwQAXaoYMA0GCSqGSIb3DQEBCwUAA4IBAQCJ4DchWATJIUauYvF7AiwI/+FH
j0ThHQNWJvVSzrZoxfkuw8vFGKcjr4Plf7QxxTEeP6xrlYO616GZbchelwI4Ryqw
ct+LmmUw9WgfPEkcqclByH0xHN1Lk/y9BmE8r+sK+oxu+tSn8u/5U7qsjtZi+EU8
OnPcgBvRarbzkQryRUQgQHYJi34z3qM8LJcpuEECHeNQ4m+Inf1KQPnM60/GeNlE
yIAl+V4kcO5lkhUZAArreU3ibjMV9JsC8X03wL5YVjldBcfuV1VBD0oPMXFMUvFq
1inn72rKDH0/q/Dasc6IuJMfUfyhyMuRseaArZD6wj5JRsJfuksvaus6cJJV
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:02 2025 by rpki-client