Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g3pPb4N5dG4N8igYLQCCfuAqueg.roa
File: g3pPb4N5dG4N8igYLQCCfuAqueg.roa (raw, json)
Hash identifier: uMD5bUw7Fpru1yYonw/lvrWR26zw/1eixC38vN/q7PY=
Subject key identifier: 83:7A:4F:6F:83:79:74:6E:0D:F2:28:18:2D:00:82:7E:E0:2A:B9:E8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018660498D4AE7EF064C1862AB3ABFC6DFBA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g3pPb4N5dG4N8igYLQCCfuAqueg.roa
Signing time: Fri 17 Feb 2023 16:51:18 +0000
ROA not before: Fri 17 Feb 2023 16:51:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40983
IP address blocks: 93.170.216.0/24 maxlen: 24
93.171.231.0/24 maxlen: 24
93.171.232.0/22 maxlen: 24
93.171.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:60:49:8d:4a:e7:ef:06:4c:18:62:ab:3a:bf:c6:df:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 17 16:51:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=837a4f6f8379746e0df228182d00827ee02ab9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:25:8f:f2:62:bb:08:56:15:94:91:5e:58:
49:37:dd:dd:be:2a:e3:eb:6f:44:97:70:66:0f:fd:
ca:8f:4d:43:1a:61:eb:bf:9a:a2:a7:f2:77:91:b0:
c2:2d:24:d6:97:66:4e:ae:6c:14:ed:a3:6a:cb:84:
12:ab:33:50:b8:2d:89:eb:c0:de:fd:a1:0c:c0:50:
a4:b0:9f:3b:5c:9e:6b:a3:6e:49:f0:9e:bb:e8:ec:
66:b4:ec:75:fb:fc:2f:a4:c6:a2:96:cc:86:ef:5d:
c8:5e:51:b0:8e:2a:31:90:90:0f:4b:73:fe:63:10:
f8:bf:3b:f3:2b:04:9d:80:16:d8:fd:a3:5b:75:ee:
ac:2b:e9:a4:7c:7a:db:70:59:c9:1e:3c:e9:1c:f1:
b5:db:46:e2:67:e4:39:ef:5a:60:7b:7d:d0:fc:93:
42:b5:38:92:35:4b:84:de:f9:fb:56:4f:a3:ef:99:
85:ab:d5:08:52:7b:f4:5c:dd:24:0a:d4:dc:c4:da:
16:46:87:64:c7:d9:6e:97:24:ca:4b:e6:08:cb:c4:
ed:02:3b:d1:b5:ba:5b:e9:58:22:62:d2:51:ba:97:
f8:3d:e9:44:52:f3:ea:f5:5f:df:d8:02:38:cf:a2:
1b:80:ee:0b:ca:c2:6a:e8:c2:2d:00:be:60:7c:49:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7A:4F:6F:83:79:74:6E:0D:F2:28:18:2D:00:82:7E:E0:2A:B9:E8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/g3pPb4N5dG4N8igYLQCCfuAqueg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.216.0/24
93.171.231.0-93.171.235.255
93.171.245.0/24
Signature Algorithm: sha256WithRSAEncryption
13:58:6f:ab:cc:d0:9f:b1:16:81:5b:d9:01:c3:1d:bf:e8:00:
6a:59:19:eb:39:f8:bb:da:cc:86:93:6b:fa:6e:2e:73:46:94:
89:55:41:64:71:b8:73:31:e9:61:f9:5a:f4:95:00:13:c8:c3:
02:f9:95:1f:af:d7:d2:81:45:ac:a4:9e:ed:84:95:9f:e0:e6:
51:fc:28:70:b6:02:5b:4a:34:ec:2c:ba:ad:cf:96:55:38:9d:
fa:73:ea:c4:f9:e1:88:04:55:95:4d:11:fb:68:2f:aa:f2:3d:
a4:17:ef:84:64:6c:83:85:be:0e:bd:9b:5c:ef:43:be:29:ab:
2b:95:5f:e1:b7:14:f3:08:35:3b:ca:13:9d:d7:84:9d:d8:ab:
34:03:b7:8a:52:2d:c8:ad:71:66:5e:70:17:1a:03:f6:73:12:
0d:6d:8c:0d:c2:d1:b4:be:ac:1f:33:e6:9a:04:bb:82:88:e1:
ec:52:ad:ef:4d:31:df:6d:da:d2:19:36:37:bf:92:fa:b6:cd:
12:44:20:f2:c3:1a:2a:e2:ac:e2:9b:39:ef:81:1b:66:0b:5f:
35:51:53:44:e0:f3:30:f2:3f:95:a4:43:21:4e:b1:4a:4c:94:
55:8b:29:ca:de:e2:15:01:2d:c0:e8:7d:e0:c3:39:34:dd:b5:
1a:48:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:29 2025 by rpki-client