Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/m_PKkMNeebd5VbicQ_JY_eOu6P4.roa
File: m_PKkMNeebd5VbicQ_JY_eOu6P4.roa (raw, json)
Hash identifier: G9KH9FO/zaGdD6cG40MjUmj6yiCd3x2gKvnnDbfeheE=
Subject key identifier: 9B:F3:CA:90:C3:5E:79:B7:79:55:B8:9C:43:F2:58:FD:E3:AE:E8:FE
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FFF4AEEFD051827518357C62123BD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/m_PKkMNeebd5VbicQ_JY_eOu6P4.roa
Signing time: Thu 02 Jan 2025 05:49:41 +0000
ROA not before: Thu 02 Jan 2025 05:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208876
IP address blocks: 93.171.4.0/24 maxlen: 24
95.46.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ff:4a:ee:fd:05:18:27:51:83:57:c6:21:23:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bf3ca90c35e79b77955b89c43f258fde3aee8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:45:72:08:cb:42:e1:5d:cb:d7:b6:d8:79:8f:
6e:bc:64:b3:b1:8d:d9:dd:b7:3f:ce:f5:50:dd:99:
02:17:51:19:64:f7:0c:21:c5:6a:24:7d:7a:23:3a:
ae:d8:8c:70:06:4d:b7:59:2e:d6:1b:8c:4b:f1:34:
9b:3d:2f:1f:79:db:06:ad:98:fe:fb:99:35:e8:fe:
fc:9c:98:fd:16:5c:7a:88:29:a1:df:1f:1c:1d:e7:
09:a3:7e:63:b8:a9:1f:4b:e2:d1:7b:38:b5:16:8e:
26:b2:5b:9d:4e:26:57:33:20:30:a3:2f:be:a7:73:
c0:57:81:4c:8a:b9:8f:8b:5f:3c:fa:42:12:89:48:
a8:14:ea:0d:02:0f:1f:66:f0:ae:54:9a:ea:04:3c:
5c:8c:ac:cf:fe:bb:79:55:88:72:16:8f:2b:4e:d0:
60:ce:21:74:16:28:32:2f:a8:5f:69:39:e8:84:37:
d5:05:ee:db:c7:73:37:1a:85:85:76:09:dc:0a:ab:
f0:f8:40:16:3e:ac:3d:8d:97:74:9d:da:c0:9f:95:
8b:78:7f:9e:1f:04:1e:03:f3:34:4d:5c:98:dc:73:
61:b4:de:91:f9:93:6f:c0:4d:1e:79:88:15:2d:0c:
e6:5e:05:f6:ea:97:45:93:4d:1b:3b:54:2d:a0:dd:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F3:CA:90:C3:5E:79:B7:79:55:B8:9C:43:F2:58:FD:E3:AE:E8:FE
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/m_PKkMNeebd5VbicQ_JY_eOu6P4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.4.0/24
95.46.8.0/24
Signature Algorithm: sha256WithRSAEncryption
84:43:7e:5a:d9:a4:a6:c4:fd:a1:1c:16:6c:38:21:1b:42:5c:
73:b9:56:39:a9:d5:68:7d:3c:8f:ce:cd:e9:e0:47:50:c4:fb:
3f:d4:02:69:4d:c1:82:68:21:3e:f3:3e:25:65:65:8a:64:22:
5c:5c:a5:1a:b4:80:93:dc:0a:b9:9e:44:d8:05:6b:d1:ce:0b:
e1:91:bf:e5:9c:e5:85:9f:de:20:fb:31:25:90:ac:fa:81:d3:
bc:f2:6c:68:37:31:e1:61:51:ee:71:36:ae:b4:51:61:ad:7e:
ab:c6:94:74:5d:f2:f3:30:fb:1c:fa:97:9b:50:db:43:40:33:
d4:4e:8c:34:eb:d9:e4:a7:7b:e0:a5:38:35:d4:66:8d:d3:09:
67:b5:56:17:53:90:f9:4e:a3:56:51:01:e0:73:e2:09:99:97:
0f:e6:4f:7a:e6:3f:c1:a0:85:c2:69:1e:8e:5e:fe:6f:a8:a7:
ea:7d:77:b6:d3:5c:2c:d0:0a:c4:15:13:a5:69:56:36:71:fd:
b0:5f:d7:2d:98:ca:75:03:1f:0f:60:50:d7:9f:61:e2:f1:20:
2a:36:54:06:80:a1:43:59:c2:8a:d2:84:65:e8:6b:c3:79:dc:
de:bd:37:fd:61:89:e7:88:59:ff:ca:1e:3d:c4:86:68:85:63:
75:36:e2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:23:34 2025 by rpki-client