Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gEYbv6muTELDwkhXR8GvwkYyyFw.roa
File: gEYbv6muTELDwkhXR8GvwkYyyFw.roa (raw, json)
Hash identifier: ESjHXk0YPLC7JnJliZEgxGmF9XKfIhTgqmvl2mqs3+4=
Subject key identifier: 80:46:1B:BF:A9:AE:4C:42:C3:C2:48:57:47:C1:AF:C2:46:32:C8:5C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27E93062
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gEYbv6muTELDwkhXR8GvwkYyyFw.roa
Signing time: Sat 01 Jan 2022 16:09:07 +0000
ROA not before: Sat 01 Jan 2022 16:09:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59888
IP address blocks: 93.170.15.0/24 maxlen: 24
146.158.74.0/24 maxlen: 24
146.158.74.0/23 maxlen: 23
146.158.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669593698 (0x27e93062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80461bbfa9ae4c42c3c2485747c1afc24632c85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:a8:31:90:7b:74:98:34:1b:0c:b4:6a:07:
f4:05:24:60:17:66:9e:be:d2:8e:ff:7e:4e:77:e5:
ff:8b:b0:db:1c:71:ab:29:9c:fa:8c:45:e1:c3:35:
aa:26:e5:b9:a0:14:77:5e:b6:c9:00:a5:2d:59:a8:
9b:7f:83:a0:d0:66:34:3d:32:8f:03:92:63:e3:4c:
f4:84:1a:70:19:79:db:aa:71:68:21:dd:f1:09:7d:
cd:34:8d:32:00:20:47:30:0d:36:70:8a:55:49:e0:
ae:bf:cd:4a:24:40:86:90:76:e5:61:5b:e4:83:ec:
00:b0:f6:8b:86:bf:d7:ef:78:8a:91:bc:3b:b0:6b:
5f:78:10:d4:20:1a:a5:3a:bc:ab:7e:01:38:a1:51:
a0:fb:eb:71:7a:13:9e:8f:79:4d:cb:34:0a:ad:3a:
34:e6:45:87:bb:54:76:20:a0:5e:fa:cf:25:d8:5b:
5d:f4:cd:f8:26:d0:3a:d4:12:19:16:4b:55:0d:8c:
25:53:77:6e:ea:6b:0c:e2:6c:d9:fd:93:d6:37:0e:
3a:db:d8:a5:ff:99:3f:85:cf:d2:d0:81:45:ff:ef:
63:ed:2e:8f:75:67:69:5f:c5:d7:d9:7a:1f:25:db:
56:a8:d3:ca:1b:44:8c:97:de:4d:0e:69:93:81:59:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:1B:BF:A9:AE:4C:42:C3:C2:48:57:47:C1:AF:C2:46:32:C8:5C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gEYbv6muTELDwkhXR8GvwkYyyFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.15.0/24
146.158.74.0/23
Signature Algorithm: sha256WithRSAEncryption
82:22:57:61:10:2e:39:dc:5e:5a:e2:a4:c5:bc:94:e2:93:ca:
3b:89:d1:45:7a:ea:42:0d:5f:69:a5:f4:7a:a6:06:0c:bd:0e:
42:37:1b:0f:95:fc:42:55:20:a2:ad:be:dc:86:53:06:d7:09:
53:28:8f:9e:45:6e:b2:d7:4a:63:a5:45:e7:6e:be:35:0e:bd:
de:53:d6:2a:d6:49:38:01:a1:0f:24:be:3e:23:77:5f:64:ab:
fd:a5:7b:46:ca:d6:ac:88:65:8a:a3:31:36:7e:dc:e4:a4:cd:
de:60:ae:56:9f:7c:25:a6:56:53:7d:9e:16:4c:dc:55:78:ab:
3f:81:51:55:cd:74:b9:78:5d:6a:72:27:da:80:b5:32:13:cf:
02:e1:00:84:d8:34:3d:5b:ef:9a:68:3f:c2:1b:2d:8c:76:08:
fb:7f:b3:e5:71:39:67:30:a5:ab:f7:0a:7a:0e:2d:67:10:95:
9c:a4:4c:f0:9e:9d:4f:e3:46:12:38:88:dd:ed:6f:27:22:0b:
41:7b:a6:e1:0e:a0:04:b2:86:14:8e:50:34:8b:ba:fe:8e:d3:
db:b6:70:c8:ad:a5:c0:10:53:24:f2:d0:df:12:23:b9:7c:0c:
43:d9:32:2e:59:8a:a3:bf:4e:ee:44:8a:75:75:88:fa:4e:42:
0b:23:f4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:25 2025 by rpki-client