Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gxCi_9NvWH5ap1XqyPQNVXzfMp8.roa
File: gxCi_9NvWH5ap1XqyPQNVXzfMp8.roa (raw, json)
Hash identifier: HL7wdrExj73j0SRJs7HSqgJ9TBTSSaQ/t8DQUjRZUP0=
Subject key identifier: 83:10:A2:FF:D3:6F:58:7E:5A:A7:55:EA:C8:F4:0D:55:7C:DF:32:9F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01888C4500E16FE9DF37BBBEE42396E41568
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gxCi_9NvWH5ap1XqyPQNVXzfMp8.roa
Signing time: Mon 05 Jun 2023 15:55:12 +0000
ROA not before: Mon 05 Jun 2023 15:55:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34718
IP address blocks: 93.171.232.0/22 maxlen: 24
93.170.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:45:00:e1:6f:e9:df:37:bb:be:e4:23:96:e4:15:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 5 15:55:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8310a2ffd36f587e5aa755eac8f40d557cdf329f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:27:ae:7b:8b:8c:29:e6:e4:e3:ec:0b:24:
b0:65:18:9c:ea:59:fc:0b:88:8b:76:6e:cc:5b:ae:
9b:0f:75:cc:96:54:c8:eb:e5:6c:04:e2:ee:8b:06:
9d:51:49:95:1d:a3:5d:a1:c1:d5:5a:09:ee:40:02:
28:2b:07:98:0f:f6:94:24:cb:1b:47:27:06:14:21:
ba:56:25:90:2a:1e:7f:24:c7:21:de:ab:fc:d5:fe:
79:9a:e9:f1:1c:07:8b:dd:fb:23:54:c9:22:75:38:
b3:25:7c:a5:23:e2:01:47:66:71:bf:39:21:fb:84:
ca:d4:85:23:38:0f:6c:d9:df:03:20:0b:f2:b6:14:
8b:f1:67:c5:2b:dd:4d:75:13:8a:f5:10:9e:19:64:
76:16:6c:52:f9:b8:bb:72:9b:53:17:df:f3:67:43:
d4:b8:38:a3:10:34:0b:5e:e0:0d:57:2e:94:64:bc:
e2:7d:89:57:63:10:b5:99:d2:c8:5a:85:74:a3:fb:
e6:75:20:fa:a7:8a:f6:ce:a5:c8:c9:07:43:3e:0b:
03:5f:b1:3d:8e:f7:2e:0a:2d:ff:f8:bb:51:e8:74:
88:20:b8:15:06:14:2e:6b:0c:1e:c5:49:cd:2c:4d:
b2:9e:7d:9a:8d:eb:2c:ce:90:50:b4:af:8b:94:5e:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:10:A2:FF:D3:6F:58:7E:5A:A7:55:EA:C8:F4:0D:55:7C:DF:32:9F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gxCi_9NvWH5ap1XqyPQNVXzfMp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.164.0/22
93.171.232.0/22
Signature Algorithm: sha256WithRSAEncryption
af:cc:b5:f0:09:bd:08:31:df:dd:0f:92:59:40:03:07:8f:92:
66:75:22:e7:b2:4c:c6:28:2c:8d:28:ae:72:cd:59:8a:d3:af:
e8:14:f4:9a:e7:df:bd:30:94:1d:0d:11:38:69:f7:61:30:4d:
49:74:52:2e:ac:94:1d:7b:fa:6c:55:88:4b:da:18:25:f5:75:
97:3e:7c:7f:79:d7:44:40:c8:08:16:2d:82:76:28:1e:50:29:
c3:49:59:f7:80:95:10:db:0b:db:69:0f:a6:9a:73:81:0a:18:
f0:0d:47:19:7f:7d:32:39:85:e9:18:45:d6:26:c3:74:fc:14:
ed:88:19:8b:af:ba:5a:39:39:ae:d6:9c:0d:9e:d6:fe:07:75:
41:f5:b6:e5:90:c7:cd:d2:8b:98:ce:b2:d7:1a:38:3c:0c:ef:
00:50:30:31:49:00:fc:5f:fc:08:c1:02:81:20:b0:0d:ea:c1:
8f:e8:0b:de:f5:31:f8:e9:e4:83:fd:ee:13:ea:90:d8:f8:f4:
88:ee:30:da:26:6d:72:aa:11:48:a1:94:1a:c5:8f:0b:3c:72:
3c:34:77:52:39:d2:fc:3d:8b:1e:10:cd:90:3a:d5:dc:ec:fe:
b4:d7:d1:97:3c:95:2b:ad:29:e6:06:f1:3b:41:5c:79:3d:9f:
c2:8c:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:40 2025 by rpki-client