Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jpQbsJhqJmvb62IR5J6sDFppm1Y.roa
File: jpQbsJhqJmvb62IR5J6sDFppm1Y.roa (raw, json)
Hash identifier: +JR2lbOxk4PCi+4NuZx2kzA7LQp7mTnUgNhzygcolFo=
Subject key identifier: 8E:94:1B:B0:98:6A:26:6B:DB:EB:62:11:E4:9E:AC:0C:5A:69:9B:56
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01857095A889B071B8D093840BE074E2742F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jpQbsJhqJmvb62IR5J6sDFppm1Y.roa
Signing time: Mon 02 Jan 2023 03:45:34 +0000
ROA not before: Mon 02 Jan 2023 03:45:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208870
IP address blocks: 93.171.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:a8:89:b0:71:b8:d0:93:84:0b:e0:74:e2:74:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e941bb0986a266bdbeb6211e49eac0c5a699b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:fc:d2:96:94:a3:b6:49:a4:52:bb:48:06:
0f:c0:17:1a:09:e4:77:29:d3:96:80:93:e9:86:40:
be:9a:8d:af:04:c1:7d:c8:79:3c:31:04:89:16:0c:
76:90:9f:f8:45:7d:7b:07:e0:aa:4d:f3:12:00:7f:
f2:ae:f8:5f:9d:3c:4e:55:0b:56:e6:e6:74:e8:9f:
74:b0:c6:89:ac:33:f3:15:71:4d:53:ee:c1:f5:dd:
a8:e2:a7:65:51:9a:e0:65:ed:bc:87:7b:ab:07:5d:
6f:7a:5c:36:8d:9d:e7:ad:de:d9:6c:49:c7:2a:27:
59:f6:d7:96:9a:d2:79:9e:2c:f4:de:51:d8:6b:ce:
f6:aa:5e:a5:17:ec:8e:dc:a8:97:82:c4:7a:6b:d6:
7c:72:09:1f:28:d4:f8:c1:6c:e2:19:a4:35:f5:79:
40:e3:06:44:8e:e3:b4:a3:4c:04:5d:81:64:48:9b:
63:9f:ee:9c:4e:b2:71:5f:f6:70:01:92:b5:12:0f:
65:f5:5c:c3:c2:79:3c:3b:20:08:4a:c1:1d:e0:f9:
49:b0:4d:59:39:91:8c:ff:ad:38:84:c1:dc:67:4d:
98:64:f9:e5:a8:71:63:29:a2:31:07:1c:0e:c7:53:
42:b5:9e:2f:0f:21:69:d1:d3:f2:95:a3:61:ae:68:
20:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:94:1B:B0:98:6A:26:6B:DB:EB:62:11:E4:9E:AC:0C:5A:69:9B:56
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jpQbsJhqJmvb62IR5J6sDFppm1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.238.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3c:ca:0e:af:9b:9e:2c:8d:f9:b0:0c:a0:3c:8b:56:41:d3:
c1:41:76:5d:58:b2:78:9b:77:ea:bb:a6:aa:64:be:43:de:21:
55:ac:89:aa:66:b2:fb:ed:99:9f:bd:38:4d:b6:df:8f:62:01:
ea:2c:f7:93:c8:da:57:29:18:6d:f2:5c:f9:71:f1:60:86:bb:
1b:cb:7f:78:5f:d5:92:c0:c1:e2:89:d7:49:7e:2c:3b:40:7f:
b3:8c:df:55:74:58:60:0d:ca:d3:bb:26:9b:93:32:84:4d:5f:
cf:a0:f7:ba:06:7d:59:e5:af:70:f2:a7:f1:ae:4a:bd:ca:0a:
f4:8b:4a:a0:91:dc:4f:86:e1:96:6c:82:84:fd:35:8f:53:24:
2b:c7:a0:9f:a6:da:f7:92:e0:c7:d6:c2:27:14:a3:b1:e8:57:
1a:fc:f4:c8:ea:3a:e1:27:42:49:1f:b9:36:a9:30:3c:05:41:
f5:ba:e6:10:ec:dd:83:c0:6c:1d:db:4b:2d:2f:64:1a:2f:17:
61:eb:d1:3d:d4:24:e4:c2:2b:55:8e:a2:a3:82:4f:bf:1c:60:
f5:5a:7a:95:7d:a5:f7:e0:df:0e:0f:0e:a5:58:75:71:7e:46:
58:42:b3:72:d3:54:77:91:e9:c9:53:89:03:e5:1f:71:f3:60:
00:46:85:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:35 2025 by rpki-client