Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g1cXfNaL0RTxLrDz4pmuNdYMsAE.roa
File: g1cXfNaL0RTxLrDz4pmuNdYMsAE.roa (raw, json)
Hash identifier: pplt8No6qIgflUgN+F+dmqXwpuVvLX57HqIe6T+4GTU=
Subject key identifier: 83:57:17:7C:D6:8B:D1:14:F1:2E:B0:F3:E2:99:AE:35:D6:0C:B0:01
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 276489C8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g1cXfNaL0RTxLrDz4pmuNdYMsAE.roa
Signing time: Sat 01 Jan 2022 16:07:54 +0000
ROA not before: Sat 01 Jan 2022 16:07:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25221
IP address blocks: 93.171.180.0/24 maxlen: 24
93.170.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660900296 (0x276489c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8357177cd68bd114f12eb0f3e299ae35d60cb001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:4b:43:3a:82:1c:d6:60:10:bd:f8:63:5d:
4f:b0:fb:01:66:6e:12:a3:d3:50:e7:42:55:b1:c4:
05:c8:c4:9a:72:40:68:60:e3:b6:61:08:4a:75:6c:
99:96:82:a9:54:10:97:3e:df:62:82:34:98:cf:43:
b8:cd:00:da:ad:d2:74:9e:0b:a2:3f:5d:77:2f:cf:
d2:7c:be:83:4b:ea:30:7f:7b:16:23:f0:a6:12:f1:
aa:fa:f7:f6:55:7a:cd:f9:aa:49:bf:ed:3e:e7:d5:
fa:34:73:9f:dc:02:bc:43:dc:ed:b9:ad:53:b3:42:
44:19:4b:e0:31:c3:de:2b:28:6b:81:f9:f7:ed:1d:
87:51:f3:7e:ee:83:3f:c7:51:89:de:b6:e8:e5:d4:
1d:02:3b:a3:0c:90:f8:e7:9f:1c:7e:07:ac:8f:4e:
ea:42:17:79:12:25:f2:0e:65:12:90:ec:d2:83:bc:
aa:18:13:0a:5b:3c:3b:8a:65:25:36:24:a1:c7:33:
98:b4:aa:2a:20:49:f5:33:cc:d4:43:d1:07:16:e7:
42:5a:dc:7b:cf:c3:7d:82:ef:a9:5e:ae:6f:2a:2a:
40:50:4c:93:8d:25:c6:54:e8:6d:2d:e5:48:2e:1c:
57:0f:f7:74:8b:06:ce:8a:c4:0b:a8:e6:d8:60:4c:
78:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:57:17:7C:D6:8B:D1:14:F1:2E:B0:F3:E2:99:AE:35:D6:0C:B0:01
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g1cXfNaL0RTxLrDz4pmuNdYMsAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.142.0/24
93.171.180.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ba:cf:71:f8:ce:74:11:48:e1:bd:c0:d5:d4:ab:3b:cc:05:
39:a9:7b:ea:53:bb:b3:16:fb:6f:be:ae:11:33:06:35:29:6a:
b7:68:6c:e7:8b:f4:71:86:14:a5:9d:6a:06:ed:52:68:29:83:
ea:c1:fb:ea:27:52:1d:a9:22:06:0c:8b:5d:ba:83:83:41:bc:
c4:e7:2c:0e:03:e8:d5:5b:ee:1f:3f:1e:2a:cd:da:d9:5c:02:
2f:6f:bf:e4:42:5d:37:e7:4a:86:fe:fe:e7:49:d3:08:bd:98:
2a:0b:50:30:93:c3:c8:95:01:55:88:2b:11:2b:b2:8a:0c:be:
8d:bc:5c:48:2b:fc:19:97:4e:a9:d8:b2:07:fb:38:ef:dd:ef:
85:4a:c0:83:c5:7b:b3:cd:ca:59:fc:1f:30:6f:0c:94:be:1d:
81:7f:24:d1:2e:e4:93:99:a7:63:42:3e:30:ff:c8:e7:24:0a:
72:09:57:2c:91:78:d7:ab:f8:06:5d:72:84:72:b1:43:09:d5:
30:e6:11:90:99:09:3e:80:26:15:3a:dc:32:81:24:06:4e:80:
bc:4a:bf:68:3b:f0:6f:b4:dc:87:9a:e6:13:c8:d7:46:19:86:
62:54:93:38:ad:c3:19:82:44:43:fe:b1:c6:ea:a3:74:b1:94:
42:b7:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:34 2025 by rpki-client