Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lWBuTEno6HHQGQO9qPAd-oQGm_U.roa
File: lWBuTEno6HHQGQO9qPAd-oQGm_U.roa (raw, json)
Hash identifier: 9BatOR2n1Bk2pAA7oIiSd2DRotjEIkOX9qjIsFfzU7E=
Subject key identifier: 95:60:6E:4C:49:E8:E8:71:D0:19:03:BD:A8:F0:1D:FA:84:06:9B:F5
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27F05CC4
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lWBuTEno6HHQGQO9qPAd-oQGm_U.roa
Signing time: Sat 01 Jan 2022 16:09:11 +0000
ROA not before: Sat 01 Jan 2022 16:09:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60337
IP address blocks: 93.170.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670063812 (0x27f05cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=95606e4c49e8e871d01903bda8f01dfa84069bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:9f:59:ff:b4:75:45:86:dd:d8:01:d5:49:
df:f4:9d:13:27:34:54:45:94:6b:d6:d0:e6:ed:25:
cd:ca:aa:c6:8e:a9:ea:0b:3f:40:ff:e5:69:73:68:
f2:bd:2e:16:ee:12:1a:60:bf:1c:5d:b8:d2:38:c5:
7b:d2:35:e3:06:04:b8:a4:13:98:ed:cb:e9:2a:b7:
28:7a:7d:1a:b7:fe:78:58:f5:8c:73:f4:1c:1b:ee:
50:be:73:9c:a3:6f:46:5d:ad:54:6b:71:ba:1b:93:
e0:c2:c6:80:88:5f:95:cf:55:5a:f0:69:45:0d:f8:
63:6d:fe:74:12:8e:07:93:85:e0:3c:1b:9b:d0:55:
82:6a:e0:0c:ce:78:0e:f5:66:ac:cd:83:47:58:1a:
af:63:0e:e3:20:1c:dd:e1:dd:44:60:85:bc:b1:0b:
74:46:44:49:b1:0b:0e:d2:47:57:ec:c8:a3:1f:65:
67:24:e5:9f:e4:39:60:8b:1c:3a:72:81:29:c3:31:
90:57:c8:58:7e:0e:ed:f8:4f:50:69:ab:cb:2f:18:
17:ee:38:6f:ae:66:ae:23:c9:ad:51:f8:66:22:59:
a9:6a:e3:33:cc:7f:89:d5:51:e5:12:da:0e:27:ad:
79:15:f6:ee:fc:de:6c:48:17:b3:e7:82:f7:cb:e6:
a4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:60:6E:4C:49:E8:E8:71:D0:19:03:BD:A8:F0:1D:FA:84:06:9B:F5
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lWBuTEno6HHQGQO9qPAd-oQGm_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.252.0/24
Signature Algorithm: sha256WithRSAEncryption
88:55:ed:53:1d:ca:38:83:3d:5e:70:db:cf:b2:74:11:1e:d2:
a7:02:08:b0:29:a6:8c:fe:c3:b9:54:1a:0b:27:44:79:a2:74:
5d:01:4b:b1:6a:56:23:6d:d8:98:36:11:5d:4d:8e:b7:6c:80:
5f:72:29:7e:1a:45:7b:4e:51:7a:37:90:c4:6f:d4:ea:6f:99:
39:a4:3b:91:41:71:98:95:91:05:74:e0:d6:b9:b8:ae:9a:c5:
58:18:20:60:98:dc:5c:47:77:d5:b3:e5:73:46:5f:39:fa:54:
b9:36:02:f3:7e:e1:ad:36:07:fd:23:d2:ef:ec:ba:0d:ad:37:
4e:22:57:49:e9:23:16:c3:d0:ff:8d:ac:54:45:4c:27:ee:23:
3f:21:d7:18:47:41:1b:dd:15:6b:02:fc:33:6f:fa:f6:c1:7b:
1f:64:4e:f5:32:57:77:2a:7a:82:36:d5:5b:b3:2e:65:07:85:
b0:66:ac:0a:c7:eb:7d:3e:93:94:b2:c2:83:89:e0:38:c5:63:
8b:af:5a:19:44:3a:4d:c1:01:1c:3a:05:37:1b:1a:ee:ed:ac:
66:dd:ea:47:b4:1a:7b:28:7c:c6:81:60:49:46:78:3f:26:43:
36:dd:fb:d6:94:43:f8:56:50:a0:c7:ac:58:ff:71:27:4b:63:
c2:e3:e4:37
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEJ/BcxDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDkxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoOTU2MDZlNGM0OWU4
ZTg3MWQwMTkwM2JkYThmMDFkZmE4NDA2OWJmNTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKrdn1n/tHVFht3YAdVJ3/SdEyc0VEWUa9bQ5u0lzcqqxo6p
6gs/QP/laXNo8r0uFu4SGmC/HF240jjFe9I14wYEuKQTmO3L6Sq3KHp9Grf+eFj1
jHP0HBvuUL5znKNvRl2tVGtxuhuT4MLGgIhflc9VWvBpRQ34Y23+dBKOB5OF4Dwb
m9BVgmrgDM54DvVmrM2DR1gar2MO4yAc3eHdRGCFvLELdEZESbELDtJHV+zIox9l
ZyTln+Q5YIscOnKBKcMxkFfIWH4O7fhPUGmryy8YF+44b65mriPJrVH4ZiJZqWrj
M8x/idVR5RLaDieteRX27vzebEgXs+eC98vmpK0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSVYG5MSejocdAZA72o8B36hAab9TAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L2xXQnVURW5vNkhIUUdRTzlxUEFkLW9RR21fVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAF2q/DANBgkqhkiG9w0BAQsFAAOC
AQEAiFXtUx3KOIM9XnDbz7J0ER7SpwIIsCmmjP7DuVQaCydEeaJ0XQFLsWpWI23Y
mDYRXU2Ot2yAX3IpfhpFe05RejeQxG/U6m+ZOaQ7kUFxmJWRBXTg1rm4rprFWBgg
YJjcXEd31bPlc0ZfOfpUuTYC837hrTYH/SPS7+y6Da03TiJXSekjFsPQ/42sVEVM
J+4jPyHXGEdBG90VawL8M2/69sF7H2RO9TJXdyp6gjbVW7MuZQeFsGasCsfrfT6T
lLLCg4ngOMVji69aGUQ6TcEBHDoFNxsa7u2sZt3qR7Qaeyh8xoFgSUZ4PyZDNt37
1pRD+FZQoMesWP9xJ0tjwuPkNw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:29 2025 by rpki-client