Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mUOidtFTMiaMmdZKea8fbz9LxUs.roa
File: mUOidtFTMiaMmdZKea8fbz9LxUs.roa (raw, json)
Hash identifier: IWU1AwVUB1dF0t2xl1bzSZWvaQzy7Mx45mIXyrtVGL4=
Subject key identifier: 99:43:A2:76:D1:53:32:26:8C:99:D6:4A:79:AF:1F:6F:3F:4B:C5:4B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F8F0BB6B954C270AF6AA9DBF04291
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mUOidtFTMiaMmdZKea8fbz9LxUs.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25548
IP address blocks: 93.170.36.0/22 maxlen: 24
95.47.186.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8f:0b:b6:b9:54:c2:70:af:6a:a9:db:f0:42:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9943a276d15332268c99d64a79af1f6f3f4bc54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:94:f6:01:33:03:53:f1:02:58:75:be:97:05:
0e:5d:83:2f:aa:40:a1:1d:cd:41:83:d3:c5:42:20:
92:c4:a8:bd:c2:00:dd:d5:a9:b0:7a:47:8f:ac:ce:
e7:ad:5b:39:7f:c9:9a:c8:49:e4:fd:9f:7e:f7:5b:
8e:0d:6c:d3:5a:d9:5c:8b:65:d0:ab:97:bd:2a:82:
b0:76:c9:1e:69:98:44:c0:2d:a2:a4:f4:f4:08:ab:
70:25:77:26:9a:42:3f:4f:d0:51:51:45:ea:b9:be:
b9:d1:e1:e2:de:45:9f:66:6d:3e:2b:83:d9:28:c5:
a3:05:cd:c8:47:f3:cc:68:53:86:7f:bd:a6:2e:c7:
ee:00:ab:95:03:da:7e:25:1d:f4:8c:06:3c:f6:c4:
ea:2b:a5:e8:ef:00:61:78:5b:60:29:ef:9e:ea:ab:
e7:5e:1d:63:91:23:c6:67:40:64:70:58:c4:89:d7:
7b:44:9a:fc:61:46:19:72:59:02:33:18:a0:2e:0d:
9c:6b:45:cd:6a:f4:4b:82:2f:af:97:20:6d:e8:d7:
db:f6:e6:ac:a7:7d:6f:4b:6d:98:4d:52:27:39:3c:
7d:05:f2:a2:93:05:23:bc:66:88:7c:0a:c0:33:90:
33:45:fa:6e:9d:28:0b:34:19:d9:a8:96:de:2b:7b:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:43:A2:76:D1:53:32:26:8C:99:D6:4A:79:AF:1F:6F:3F:4B:C5:4B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mUOidtFTMiaMmdZKea8fbz9LxUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.36.0/22
95.47.186.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:63:da:84:d5:b0:4d:98:86:e1:6c:21:7b:1c:68:9e:2c:7f:
6e:56:a9:97:af:6a:8c:e8:53:5a:9a:79:c6:c2:1a:89:85:a4:
5a:4c:d2:92:df:f5:51:0c:7c:78:dc:29:80:10:62:35:40:b7:
33:86:0c:a1:c8:d3:c6:cd:d5:d0:b4:a4:6e:e6:38:a6:67:fe:
74:68:78:b2:e4:86:68:8e:ce:83:3b:a9:14:46:77:1f:66:74:
64:01:f6:50:28:0b:68:7a:97:33:99:0b:3e:93:53:1e:e1:17:
d4:1c:ac:c7:36:42:cf:32:06:5e:a0:d0:08:a8:47:62:4b:49:
91:14:32:a8:7b:0a:27:1f:15:8f:f4:69:8c:01:70:fa:b6:6b:
5b:11:f6:c7:3d:2e:fd:10:97:40:2b:16:98:c2:11:31:47:36:
d3:9d:c0:21:e0:bd:a1:fe:a2:e7:22:40:5f:da:b5:b0:f0:65:
68:d2:88:37:09:db:9a:fb:c8:89:d0:e6:e1:1a:c6:3c:cc:bd:
ec:46:0d:b4:1a:89:2a:13:e6:a2:72:ab:80:54:64:aa:a5:dd:
6c:22:79:9a:b4:58:89:55:59:7f:a6:a3:04:81:77:f7:d8:7c:
25:6e:d9:72:e4:32:8b:ce:0e:91:95:48:c9:8e:88:0c:0a:3a:
98:d9:7f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:29:38 2025 by rpki-client