Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jvzxi-YSL58zJhUEIlnuqbMPqtg.roa
File: jvzxi-YSL58zJhUEIlnuqbMPqtg.roa (raw, json)
Hash identifier: JxKaLqolbT9SgNp6d/RwfuELJu7sn4lukhKV9aq38bs=
Subject key identifier: 8E:FC:F1:8B:E6:12:2F:9F:33:26:15:04:22:59:EE:A9:B3:0F:AA:D8
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A11DD2A4CC00EA0C14F1DFA49F2FF
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jvzxi-YSL58zJhUEIlnuqbMPqtg.roa
Signing time: Tue 02 Jan 2024 12:33:23 +0000
ROA not before: Tue 02 Jan 2024 12:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52114
IP address blocks: 93.171.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:11:dd:2a:4c:c0:0e:a0:c1:4f:1d:fa:49:f2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8efcf18be6122f9f332615042259eea9b30faad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:8f:24:62:6d:96:4d:68:db:ea:c5:5e:3b:
46:49:94:d8:63:31:97:c4:1a:2a:7c:f1:be:a2:d4:
82:7f:5b:32:45:11:07:d5:96:62:14:cf:22:4f:81:
eb:cc:d6:6c:93:37:a6:db:10:b7:5c:9e:98:2c:55:
c6:55:c3:b9:c7:ae:f0:33:7b:53:95:0a:7e:d2:40:
7a:e0:4c:4b:02:56:98:16:4c:53:c1:83:51:0a:c5:
19:a4:61:24:3e:c7:da:f9:ac:27:51:fe:1b:3f:77:
ed:4b:08:9f:c2:23:53:02:c2:07:29:c5:e8:3e:a2:
96:c1:c3:41:7c:a6:05:ad:7c:f3:5e:bd:c2:81:4d:
93:b6:c5:7d:00:b7:8b:5a:95:52:b2:ae:61:3a:f6:
4d:ac:96:4b:9b:f4:11:0d:01:5c:89:7e:78:11:10:
50:6e:77:b7:6d:55:48:02:56:ea:13:ec:9f:d3:27:
f0:bb:83:00:ca:3a:b0:3e:d2:db:27:f9:77:6a:88:
58:81:ed:83:40:1b:d2:65:92:11:23:ef:4c:7e:ea:
49:30:1d:9d:11:bc:ce:50:99:33:e3:0f:ed:35:cd:
73:21:6b:92:26:e4:da:c1:8d:7c:2b:66:95:37:fa:
a4:2e:f7:3a:b8:84:66:8b:2e:5c:80:3d:b1:f0:c8:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FC:F1:8B:E6:12:2F:9F:33:26:15:04:22:59:EE:A9:B3:0F:AA:D8
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/jvzxi-YSL58zJhUEIlnuqbMPqtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.176.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ed:1f:56:e6:03:46:8a:4e:8b:7c:a4:39:47:92:c2:9d:9e:
36:e2:31:95:bd:6f:be:14:4b:eb:cf:6b:cf:36:a7:fc:dd:78:
37:7b:1e:a0:bb:1b:57:e9:6c:fc:e2:87:aa:fb:cb:24:13:62:
69:ae:ba:3e:d4:dd:ff:8a:79:ed:a0:ee:4f:5c:64:91:75:25:
f0:33:00:64:71:0d:b6:42:5d:a4:3e:ab:bc:38:40:6f:75:9b:
b5:9b:6a:f2:70:f8:39:d3:84:bd:35:4c:33:62:a7:b0:6a:1d:
bf:4a:ce:c8:7b:77:76:4d:fc:af:19:92:af:9e:33:5c:1e:e4:
50:3e:fd:c4:6e:d0:66:c9:81:52:9d:58:60:ce:4d:50:7f:fc:
6a:fe:26:dc:fc:3f:66:e7:ce:0c:f8:8b:28:54:85:93:f3:92:
a1:96:09:5c:e2:e6:ee:23:e1:53:67:c1:8d:8f:10:51:61:a8:
8e:c8:c0:1e:95:2c:58:1c:00:59:e6:20:26:6b:1b:a4:a5:33:
59:38:eb:d1:a8:e4:45:df:3f:e5:bd:32:ad:7c:93:5d:07:19:
2c:8e:88:2f:14:e9:3f:2a:62:42:90:81:fb:d7:c4:ff:e0:54:
b2:a9:44:2c:44:61:2f:05:be:66:5d:ab:10:8c:72:f9:13:47:
5d:79:db:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:12 2025 by rpki-client