Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mOEf7J7ycnaU7gEerO6od_P3998.roa
File: mOEf7J7ycnaU7gEerO6od_P3998.roa (raw, json)
Hash identifier: fqbZWLgEJEYevPtKrFBiCPelMFeQvenQx0rH2/Xh+xg=
Subject key identifier: 98:E1:1F:EC:9E:F2:72:76:94:EE:01:1E:AC:EE:A8:77:F3:F7:F7:DF
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570953DC4E2599EB1C0D1B9DD7266B784
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mOEf7J7ycnaU7gEerO6od_P3998.roa
Signing time: Mon 02 Jan 2023 03:45:06 +0000
ROA not before: Mon 02 Jan 2023 03:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49184
IP address blocks: 93.170.3.0/24 maxlen: 24
93.171.96.0/24 maxlen: 24
93.171.96.0/23 maxlen: 23
93.171.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:3d:c4:e2:59:9e:b1:c0:d1:b9:dd:72:66:b7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98e11fec9ef2727694ee011eaceea877f3f7f7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:24:2b:55:c2:51:81:27:cf:bc:41:b0:4a:
12:9a:77:45:17:46:e2:14:8f:b7:79:6b:90:33:cb:
f9:43:ff:65:78:33:50:2c:cb:f4:44:b9:c5:96:f6:
be:64:09:fc:bf:5b:af:c4:47:80:d2:aa:9b:d8:9b:
b8:8d:81:88:4d:18:d5:d6:b8:d5:5c:f0:25:8e:83:
1b:6c:0f:fd:d6:23:32:16:b1:37:0f:d4:9e:fd:4f:
83:85:91:2d:b3:82:4e:56:18:90:d9:74:18:6f:40:
bb:cd:19:47:ac:20:8b:3a:18:9e:72:d5:a8:f8:9d:
e6:90:1a:95:40:8e:d1:e3:4e:b9:ea:a4:a1:9e:6c:
82:4c:59:55:b8:a2:42:9e:e2:6f:e7:33:94:67:88:
eb:e9:aa:26:19:23:38:52:c9:f2:de:a0:e1:11:90:
71:b4:a5:01:22:a8:70:c9:be:d2:da:a5:7a:66:86:
d1:ae:f6:a5:d2:dd:57:65:a6:15:a8:b8:83:6a:30:
57:31:8b:0f:aa:2a:6b:8d:da:a1:65:fd:c0:f1:8e:
57:62:c9:19:82:a0:1d:b3:75:9d:f7:4b:0c:5a:8a:
82:80:b5:84:58:c4:9f:48:64:0f:9f:98:4b:86:09:
52:57:af:8a:8f:8e:51:28:ff:30:2d:04:75:a6:b3:
ed:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E1:1F:EC:9E:F2:72:76:94:EE:01:1E:AC:EE:A8:77:F3:F7:F7:DF
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mOEf7J7ycnaU7gEerO6od_P3998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.3.0/24
93.171.96.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:38:87:6e:99:e5:eb:a7:ab:43:cd:eb:9d:14:d8:6e:11:e3:
25:65:53:7d:de:ac:72:58:8e:d1:f4:1f:e1:1d:92:1a:e7:5b:
a6:a4:d8:84:07:b9:31:9b:e9:88:00:1e:7c:03:83:97:3d:fc:
93:ed:15:96:7e:1d:51:9b:2c:9f:bf:dc:c6:1e:c6:16:29:ce:
1e:5a:0e:81:e2:4e:03:4d:b7:7d:c8:4e:87:1c:53:e1:c1:cc:
e5:e0:74:5b:18:94:26:8c:e1:04:00:11:8f:bd:02:f5:c4:7b:
67:a1:d6:9d:ef:1e:40:01:ff:35:1a:e0:9a:01:66:7b:05:9c:
02:a8:43:11:15:37:76:7f:b8:8a:e5:19:ad:e1:e5:75:d2:66:
19:78:b7:af:94:79:de:ab:86:90:21:04:f1:95:db:ac:2c:5a:
68:ec:53:a5:23:9f:0e:9a:e7:d1:bd:e3:af:db:c6:6e:f7:ea:
0d:10:40:67:26:34:95:10:e0:f8:0f:6a:18:cf:8b:2e:12:3c:
b6:5d:5b:d0:fe:ca:47:a6:fb:d7:35:e0:0e:64:52:09:0a:1a:
38:20:17:ee:db:13:34:78:43:57:d4:e0:28:25:20:08:5f:ad:
89:c3:ef:26:54:70:ce:34:4b:a4:76:02:f5:4f:83:85:fe:76:
0b:45:4d:25
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwlT3E4lmescDRud1yZreEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGUxMWZlYzllZjI3Mjc2OTRlZTAxMWVhY2VlYTg3N2YzZjdmN2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CMkK1XCUYEnz7xBsEoSmndFF0bi
FI+3eWuQM8v5Q/9leDNQLMv0RLnFlva+ZAn8v1uvxEeA0qqb2Ju4jYGITRjV1rjV
XPAljoMbbA/91iMyFrE3D9Se/U+DhZEts4JOVhiQ2XQYb0C7zRlHrCCLOhiectWo
+J3mkBqVQI7R40656qShnmyCTFlVuKJCnuJv5zOUZ4jr6aomGSM4Usny3qDhEZBx
tKUBIqhwyb7S2qV6ZobRrval0t1XZaYVqLiDajBXMYsPqiprjdqhZf3A8Y5XYskZ
gqAds3Wd90sMWoqCgLWEWMSfSGQPn5hLhglSV6+Kj45RKP8wLQR1prPtBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJjhH+ye8nJ2lO4BHqzuqHfz9/ffMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvbU9FZjdKN3ljbmFVN2dFZXJPNm9kX1AzOTk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXaoDAwQB
XatgMA0GCSqGSIb3DQEBCwUAA4IBAQAqOIdumeXrp6tDzeudFNhuEeMlZVN93qxy
WI7R9B/hHZIa51umpNiEB7kxm+mIAB58A4OXPfyT7RWWfh1Rmyyfv9zGHsYWKc4e
Wg6B4k4DTbd9yE6HHFPhwczl4HRbGJQmjOEEABGPvQL1xHtnodad7x5AAf81GuCa
AWZ7BZwCqEMRFTd2f7iK5Rmt4eV10mYZeLevlHneq4aQIQTxldusLFpo7FOlI58O
mufRveOv28Zu9+oNEEBnJjSVEOD4D2oYz4suEjy2XVvQ/spHpvvXNeAOZFIJCho4
IBfu2xM0eENX1OAoJSAIX62Jw+8mVHDONEukdgL1T4OF/nYLRU0l
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:33 2025 by rpki-client