Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mf9ThgM00OOiLwyqeiyilSj9th8.roa
File: mf9ThgM00OOiLwyqeiyilSj9th8.roa (raw, json)
Hash identifier: aT8Jp79h2yRpuPnM56euAQ3DE23QjBybj9sBiawytco=
Subject key identifier: 99:FF:53:86:03:34:D0:E3:A2:2F:0C:AA:7A:2C:A2:95:28:FD:B6:1F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570955C8B58A8A0201B26D4AB6BDEFC43
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mf9ThgM00OOiLwyqeiyilSj9th8.roa
Signing time: Mon 02 Jan 2023 03:45:14 +0000
ROA not before: Mon 02 Jan 2023 03:45:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57562
IP address blocks: 93.171.166.0/24 maxlen: 24
93.171.166.0/23 maxlen: 24
93.171.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:5c:8b:58:a8:a0:20:1b:26:d4:ab:6b:de:fc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99ff53860334d0e3a22f0caa7a2ca29528fdb61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a3:90:fc:e1:d9:fd:8a:e4:25:ed:1a:0d:bf:
31:e2:64:e4:cd:f6:c6:08:f6:e0:b6:7d:44:da:96:
79:6e:e8:d9:63:da:9e:9f:65:ff:ab:da:d6:07:62:
41:cd:c7:51:f7:aa:a2:18:31:68:86:f5:0a:e5:59:
7e:08:cc:3f:0e:0f:d6:db:c3:8c:ca:9e:6d:af:a0:
c8:d8:9d:bd:c0:46:74:9c:c1:5b:c6:04:69:07:cb:
bb:c1:7b:96:7b:9b:e4:18:a5:fc:a3:8d:5a:eb:e4:
04:bc:d7:ff:82:d0:e9:3b:48:16:ef:8f:c5:c8:70:
68:cb:b9:8c:5a:c7:24:a9:ef:06:ca:5e:a1:30:f1:
94:3a:b5:9d:8e:35:90:6a:7f:d5:4f:cc:64:8c:dc:
2d:df:2d:b0:d4:b0:2c:b9:76:aa:09:75:25:95:63:
5c:a5:02:a2:b2:70:9b:c1:c7:99:d5:6c:1f:49:62:
25:4f:11:3a:0c:48:5e:24:5d:8d:ee:22:b9:91:ac:
30:52:1e:bc:5b:45:f6:f8:bc:6e:ec:72:69:8f:b3:
44:91:9d:fc:3f:50:81:70:5a:d9:e1:1e:be:ca:df:
99:e2:03:61:24:66:70:a2:45:f3:38:32:2a:05:70:
ae:f0:09:49:1b:23:f0:fe:93:fc:a5:42:48:b5:25:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FF:53:86:03:34:D0:E3:A2:2F:0C:AA:7A:2C:A2:95:28:FD:B6:1F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mf9ThgM00OOiLwyqeiyilSj9th8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.166.0/23
Signature Algorithm: sha256WithRSAEncryption
07:39:fa:95:77:14:e8:45:d6:5e:b6:e9:8a:80:e4:2a:17:43:
5c:9f:dc:56:6e:b3:ab:72:f6:dc:92:96:dc:f6:1d:f4:da:f9:
06:8d:02:85:80:bc:9d:72:fc:30:91:dc:8b:6f:d9:7f:c4:f6:
a4:7b:a6:2e:db:e3:cd:eb:d8:2f:bf:f3:8e:2c:d1:15:3e:3f:
27:4b:47:75:6c:8d:ff:92:43:a3:54:63:9b:86:1b:12:c5:68:
ac:fa:67:06:fd:ad:86:5d:74:21:60:32:09:f8:10:45:26:92:
5c:8d:4e:40:a5:86:73:9e:4b:b3:f4:64:1b:e5:df:3e:d0:8f:
a0:80:3d:c4:b0:86:fe:51:f9:78:29:2e:b6:6b:ec:ae:e5:00:
d8:b8:d8:99:83:2c:e3:d3:95:70:e7:d7:c1:bf:77:72:b9:2e:
5b:47:f0:3b:54:57:e3:1b:a9:42:38:1d:5e:5c:f4:c3:a1:a2:
d3:5c:71:7b:94:28:28:15:58:5e:18:b7:0e:d8:4d:4e:4f:53:
d2:c3:19:03:f3:2b:88:42:77:3b:6f:3d:c7:82:55:bf:38:a5:
87:2d:20:0b:02:e7:9d:a6:ae:f7:21:8a:1d:93:fd:26:83:c9:
18:55:bf:9e:b5:67:4d:12:b7:c0:c2:8b:fb:73:99:4d:ae:39:
ec:d8:4e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:07 2025 by rpki-client