Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mmJWIFKMc0DLQ1yV8kzY4qyx1PA.roa
File: mmJWIFKMc0DLQ1yV8kzY4qyx1PA.roa (raw, json)
Hash identifier: Neb8hIjC/+cZOsjINZAeBhbAlzZvk686+bolaNedHb4=
Subject key identifier: 9A:62:56:20:52:8C:73:40:CB:43:5C:95:F2:4C:D8:E2:AC:B1:D4:F0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 285CC814
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mmJWIFKMc0DLQ1yV8kzY4qyx1PA.roa
Signing time: Sat 01 Jan 2022 16:10:19 +0000
ROA not before: Sat 01 Jan 2022 16:10:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212006
IP address blocks: 93.170.101.0/24 maxlen: 24
95.47.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 677169172 (0x285cc814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:10:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9a625620528c7340cb435c95f24cd8e2acb1d4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:25:bf:38:34:ac:7b:ca:3a:5c:9e:8b:5b:
ef:d7:db:46:45:a4:eb:29:0b:91:a0:f8:ff:03:2b:
12:26:34:79:e2:b8:bc:07:75:53:14:c4:a7:74:ee:
f7:8b:8a:58:b8:02:96:9c:11:a1:fb:e2:52:9c:bf:
ab:be:9b:7d:03:76:97:63:ea:56:ea:c0:c3:36:c5:
8c:b8:12:94:1d:5e:17:c4:1e:75:91:1a:88:97:5e:
1d:77:d9:71:ee:c8:e6:b0:50:b6:84:d6:6d:35:6e:
54:1c:85:8b:6e:a6:7b:38:18:81:cf:09:64:40:a8:
bc:96:4e:a5:ff:0a:b4:4b:86:3c:d7:ec:8b:74:f4:
bf:b6:33:46:89:4a:9c:73:9f:95:1e:3e:c9:32:3b:
9c:42:cb:f5:ac:f5:f6:ce:da:e0:f0:05:9c:33:e3:
ab:5a:a5:6b:00:a5:f1:8a:1b:2a:20:86:c4:06:da:
75:89:f1:5e:e3:da:6d:a8:3c:6c:87:5b:5b:43:9b:
db:27:a9:6c:7b:f3:c7:0f:93:7b:14:7d:b4:1b:e4:
e5:a6:7e:99:3c:84:28:61:6c:3f:87:c6:c0:60:5f:
24:08:d9:93:8b:5c:dd:4c:4a:f8:f5:1c:5a:c3:b6:
76:14:2e:fc:f9:29:4d:55:cf:ba:de:92:04:44:06:
c5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:62:56:20:52:8C:73:40:CB:43:5C:95:F2:4C:D8:E2:AC:B1:D4:F0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mmJWIFKMc0DLQ1yV8kzY4qyx1PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.101.0/24
95.47.233.0/24
Signature Algorithm: sha256WithRSAEncryption
40:10:78:ae:f8:87:1e:df:d5:25:32:05:e0:ad:ed:2f:c3:83:
73:da:31:87:a0:9f:13:2e:74:a1:a3:df:ab:5d:ee:9f:ca:ba:
ab:c9:53:de:bf:99:bf:8b:39:e2:e0:65:58:bc:3e:24:84:76:
92:5b:a9:72:f3:83:f9:9c:6d:36:5e:4e:76:b2:4d:87:c1:c7:
78:0f:b8:b7:08:d9:c0:d5:eb:eb:e7:a3:0e:b5:5d:28:36:1e:
a6:47:f6:83:74:bc:6f:32:80:05:b7:8a:be:cf:67:ac:bf:fd:
1b:99:43:dd:f3:2c:05:81:d3:7c:41:32:f4:f7:4b:e1:83:a5:
f7:bf:df:ad:08:32:73:9b:b9:08:3b:12:03:b7:2f:99:ca:77:
93:8c:01:79:62:6c:19:a4:ec:9c:a2:2e:35:12:d7:3a:e8:c9:
c1:09:ac:63:57:2b:48:0b:02:a8:03:0f:f4:7e:d8:fd:13:27:
c9:62:c1:c7:e8:a3:f0:d4:3a:df:62:da:d7:92:66:4d:1d:55:
57:df:5d:61:4d:0b:4c:af:e2:04:e0:e5:de:6d:a4:bf:52:d9:
d7:9a:c1:90:4d:27:d1:c2:c5:7b:42:6a:1b:f0:35:67:8f:29:
c0:02:44:af:78:b8:d2:01:86:08:3e:c8:c1:c1:1b:4e:cb:3c:
a9:12:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:24:57 2025 by rpki-client