Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/m5rtylpjyIi3a5w-QVO0qvGuanw.roa
File: m5rtylpjyIi3a5w-QVO0qvGuanw.roa (raw, json)
Hash identifier: +c/9Q8WqRvAjlxNYb3bdlTaTOv39NVzmlPXlhWXf404=
Subject key identifier: 9B:9A:ED:CA:5A:63:C8:88:B7:6B:9C:3E:41:53:B4:AA:F1:AE:6A:7C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018B7F780ECD9797B9CCDF6017F385C21527
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/m5rtylpjyIi3a5w-QVO0qvGuanw.roa
Signing time: Mon 30 Oct 2023 07:24:16 +0000
ROA not before: Mon 30 Oct 2023 07:24:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208876
IP address blocks: 93.170.253.0/24 maxlen: 24
93.171.4.0/24 maxlen: 24
95.46.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7f:78:0e:cd:97:97:b9:cc:df:60:17:f3:85:c2:15:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Oct 30 07:24:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b9aedca5a63c888b76b9c3e4153b4aaf1ae6a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:83:54:33:f0:ac:57:e3:30:e7:60:bf:7c:
f9:79:3a:dc:da:de:f1:9f:bf:c0:81:02:57:c3:1f:
c3:65:bc:df:d3:d4:28:6b:8b:b0:13:ab:9c:2a:06:
06:b5:0d:4a:71:e2:17:e3:41:74:fd:2a:17:49:65:
de:88:dc:9d:28:21:e3:c0:e9:b8:ea:7a:78:31:9f:
f5:f6:a2:b8:a4:81:db:18:89:7a:54:bd:90:4b:31:
32:d7:8b:41:37:62:e0:52:36:4a:63:75:00:e2:6d:
6a:0c:be:28:a5:a3:eb:06:c0:5d:ea:ab:60:64:8a:
ae:38:db:ff:6d:e9:0c:36:93:96:de:bc:b8:bc:a1:
5c:5e:5b:73:fb:5e:a4:81:98:c2:3e:7f:06:7b:91:
75:a9:4b:ed:7c:61:d3:5f:e5:27:f0:36:6b:54:06:
38:00:45:30:20:09:8a:fb:85:1a:1d:27:68:2b:17:
39:9c:2c:b5:56:80:97:91:00:6d:6d:68:bc:01:06:
27:86:02:31:11:63:c4:a3:df:ca:41:d6:1f:ec:9a:
f3:2f:7e:89:77:7b:e8:a0:96:95:8d:ef:3f:f3:15:
ac:f8:3c:81:c5:c8:2a:af:11:69:8b:bd:e5:cd:da:
2f:f1:9d:17:5e:eb:21:a6:e3:61:81:35:72:e0:fe:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9A:ED:CA:5A:63:C8:88:B7:6B:9C:3E:41:53:B4:AA:F1:AE:6A:7C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/m5rtylpjyIi3a5w-QVO0qvGuanw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.253.0/24
93.171.4.0/24
95.46.8.0/24
Signature Algorithm: sha256WithRSAEncryption
37:5c:35:fc:ff:25:5f:d8:46:bf:c1:ab:e3:49:9f:b7:81:84:
6f:67:6f:98:ab:c7:6b:f8:ec:fb:ad:75:31:5d:ce:2f:d8:ed:
ed:5f:19:50:13:b6:ad:ce:ee:eb:ac:25:03:f0:f2:37:7d:02:
df:c2:d3:8e:48:73:60:27:b5:e7:96:f6:ea:a5:a7:5e:59:4d:
ed:3b:36:7a:51:39:fb:dd:db:33:a6:6c:51:b6:33:f1:20:09:
41:d0:b6:5d:70:1a:26:23:b5:d2:c7:2e:af:54:e3:31:10:6b:
aa:04:9e:24:0b:97:54:27:86:d1:77:99:5f:bc:84:90:04:33:
af:10:f5:c0:80:e7:10:0d:0f:3f:2f:db:42:38:58:18:23:89:
9a:09:9c:52:ed:1b:2a:c1:da:be:92:dc:e8:e3:79:39:69:24:
c7:d5:04:77:bb:c2:e1:6a:2f:7d:57:d7:07:c8:9e:45:72:99:
04:93:bc:80:7d:00:07:73:f1:50:8f:1c:4b:11:ac:94:72:e2:
6d:76:b5:57:5e:51:6e:b7:18:38:78:97:7e:1f:ff:64:0c:52:
5e:4f:b4:a9:2d:76:60:5d:d5:18:1c:f7:99:40:48:10:ed:ce:
21:56:bd:c2:e4:b0:98:d7:f0:a6:1c:55:9f:b9:80:8a:b6:76:
2d:60:61:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:52 2025 by rpki-client