Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kn10350Hymj2jx9cgBIVhFLE7T0.roa
File: kn10350Hymj2jx9cgBIVhFLE7T0.roa (raw, json)
Hash identifier: xIHX2VFkPIviT6UgV1J2q1Fb5GF6OTdVE76UBBWGH70=
Subject key identifier: 92:7D:74:DF:9D:07:CA:68:F6:8F:1F:5C:80:12:15:84:52:C4:ED:3D
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019425900DA54C723614D1FF56A39BD71526
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kn10350Hymj2jx9cgBIVhFLE7T0.roa
Signing time: Thu 02 Jan 2025 05:49:45 +0000
ROA not before: Thu 02 Jan 2025 05:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212392
IP address blocks: 93.171.248.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:0d:a5:4c:72:36:14:d1:ff:56:a3:9b:d7:15:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=927d74df9d07ca68f68f1f5c8012158452c4ed3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:2d:9a:26:8e:94:a4:ea:87:57:db:a7:a5:
28:84:f5:6e:ff:fd:9f:99:f2:8f:83:12:6b:95:91:
0d:b3:eb:ce:d5:e5:c0:59:f4:27:cc:1a:76:c3:a9:
d6:57:18:28:6a:c6:9b:cd:23:0c:3e:80:81:aa:24:
8c:94:75:8a:09:f8:6b:2c:2b:36:63:57:d5:94:56:
f8:2e:e6:7c:1e:c6:9c:64:27:b9:a2:75:ba:7d:5f:
cf:28:b1:48:f2:db:8c:cb:fc:81:93:84:1d:dc:f6:
83:a6:2a:f9:31:dc:c8:e0:f7:36:a5:74:e6:c8:65:
45:62:34:50:ee:06:57:5f:77:28:d7:47:b0:98:62:
54:76:7a:cf:74:8b:ac:9e:02:ff:e5:f8:4c:4c:b5:
33:a7:df:1e:7a:db:2c:a7:13:b8:0c:99:c9:e0:3b:
92:a3:57:a6:c2:77:4a:63:c5:f7:dc:56:f8:ea:fc:
7b:7a:49:c0:1d:88:0a:1e:9c:20:7f:a6:7c:15:3d:
7a:9a:3e:36:b5:47:17:e7:e6:9f:02:29:33:ee:95:
6e:70:af:bd:62:aa:a9:7d:c9:4d:ea:51:54:e3:60:
c3:8d:31:9a:53:43:6d:c9:3b:ec:0b:57:4a:bf:1b:
61:67:56:08:0f:e2:cc:1a:e2:9f:2e:84:23:ad:e1:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:7D:74:DF:9D:07:CA:68:F6:8F:1F:5C:80:12:15:84:52:C4:ED:3D
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/kn10350Hymj2jx9cgBIVhFLE7T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.248.0/23
Signature Algorithm: sha256WithRSAEncryption
68:63:5e:c3:4a:cd:94:49:55:eb:11:19:ea:4f:36:4e:0e:ad:
7e:7e:07:2a:80:4f:32:4d:a3:39:b2:1a:3a:55:ec:7c:b5:50:
8d:f4:e6:06:df:61:71:a6:79:53:90:01:bd:3b:84:fc:87:1c:
0f:f3:5b:ea:97:87:65:cc:bd:86:f6:53:38:95:1c:ee:c9:cd:
0b:b5:a7:03:27:49:f0:24:bb:88:0c:8a:3a:de:ee:c4:20:98:
81:54:b5:29:e0:2b:b9:76:1c:35:d2:52:33:1f:23:10:ea:32:
11:e5:a2:85:8d:08:bc:87:dd:a0:31:7c:6c:35:61:24:8a:ee:
c8:54:d3:77:6b:b9:4f:6b:65:91:46:cf:60:22:cf:e5:fa:15:
2c:c4:d4:e8:46:64:ed:9e:a9:7e:b6:bf:ee:cb:d8:ea:43:cb:
3d:df:4f:d8:88:b0:51:08:ce:1f:ff:f6:cc:2d:39:fe:d0:93:
88:bd:b9:9c:cc:bd:bf:38:9b:8d:9e:3f:71:df:b1:72:aa:22:
1c:e8:9d:23:52:4b:ce:21:de:2a:68:5a:f2:90:56:5d:89:ce:
2c:a6:1f:bf:f4:0a:a1:42:3e:e9:2b:12:8c:b0:2b:22:5b:47:
51:9a:74:70:57:20:b3:1b:d3:aa:40:f3:eb:4c:65:ce:ca:2a:
ad:95:b6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:05 2025 by rpki-client