Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nQ9TeXii6fiTwqhWyCVmOijVCyw.roa
File: nQ9TeXii6fiTwqhWyCVmOijVCyw.roa (raw, json)
Hash identifier: jjaFmrC52g4Sg35sYkdSJh/nVphv7TmJcInmhDFo5YU=
Subject key identifier: 9D:0F:53:79:78:A2:E9:F8:93:C2:A8:56:C8:25:66:3A:28:D5:0B:2C
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD63497A2622D37E8C5A42CB4B513
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nQ9TeXii6fiTwqhWyCVmOijVCyw.roa
Signing time: Thu 02 Jan 2025 05:49:30 +0000
ROA not before: Thu 02 Jan 2025 05:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61123
IP address blocks: 93.171.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d6:34:97:a2:62:2d:37:e8:c5:a4:2c:b4:b5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d0f537978a2e9f893c2a856c825663a28d50b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:d0:36:98:d2:70:32:6a:3e:e6:f7:e1:28:
7d:93:29:48:62:b7:1e:f2:98:2c:1a:b0:48:f8:cf:
3c:71:c0:73:59:bf:7b:8e:ad:26:59:59:80:6d:ca:
cf:72:bd:54:40:28:37:57:4c:1c:09:48:29:33:35:
03:39:98:25:aa:ab:a2:a8:48:d1:33:5d:46:8d:38:
d8:ac:55:ce:0a:5f:51:e8:33:76:6e:47:88:32:e7:
5a:c5:25:66:b2:da:2e:15:97:fe:38:bd:62:19:5b:
72:f9:93:81:09:3e:c1:af:23:fd:70:1f:10:af:eb:
13:dd:a0:66:29:5b:7f:ee:5a:48:59:20:95:ee:e4:
e8:63:10:3f:17:57:11:53:ed:44:08:06:e2:64:e0:
8b:e6:bc:03:4e:eb:9b:b8:a5:4e:1f:8a:8d:0d:d4:
dd:74:6f:42:9a:6f:b0:3b:79:31:72:09:01:c7:80:
d7:f0:ed:3b:b8:88:03:4f:06:b2:7d:c0:e2:34:fe:
ab:71:66:b3:b2:43:3a:2a:6d:f0:fc:29:27:6f:bd:
9b:ce:d9:d0:7a:b7:2b:08:90:43:e0:f3:bd:62:f3:
66:58:59:09:80:a0:9b:e2:55:e3:19:87:48:6e:48:
5f:fd:0d:79:e4:40:aa:b6:86:20:c0:70:fa:bf:31:
6d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0F:53:79:78:A2:E9:F8:93:C2:A8:56:C8:25:66:3A:28:D5:0B:2C
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nQ9TeXii6fiTwqhWyCVmOijVCyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.219.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:88:81:0b:8c:b6:53:7e:9a:d2:9d:45:dc:da:2e:cd:6c:26:
1a:f5:e2:b9:69:99:1b:e2:c7:c3:ea:e2:ce:0d:8d:7d:fd:ab:
58:ea:f8:96:c2:34:a0:db:bd:a1:ab:c4:c0:3f:cb:35:49:22:
95:cd:c0:dd:12:7e:2d:12:25:83:99:01:be:2d:57:e8:ce:dc:
f9:8b:07:07:85:f6:5f:69:3a:c2:9a:f4:3c:2f:92:fe:bf:92:
67:11:8c:f8:58:49:96:78:a3:3d:ee:51:90:7b:e2:17:bc:78:
3e:8b:aa:ec:d0:f9:20:36:dc:c6:da:c7:e4:db:39:63:8b:39:
5f:2f:d8:73:49:61:c4:a1:99:d4:90:01:56:9b:3b:f8:54:2c:
aa:4b:5c:8f:b9:a6:e1:da:50:f5:72:87:bf:97:ac:9a:d7:70:
44:3f:2f:e7:25:82:60:2d:f0:3b:c6:b3:79:33:78:55:3c:25:
53:66:d7:d8:ed:c3:fa:44:01:79:cc:93:d4:cb:fc:03:82:b9:
15:d3:fe:2f:b9:19:06:56:16:d2:02:59:4d:98:d5:98:c4:0c:
52:d8:42:27:72:e7:46:a6:9c:97:98:d6:d6:da:b8:70:80:c6:
4c:c3:54:07:a6:f7:98:79:8e:70:2a:2e:e9:6d:d0:15:28:fa:
c8:46:a5:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj9Y0l6JiLTfoxaQstLUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZDBmNTM3OTc4YTJlOWY4OTNjMmE4NTZjODI1NjYzYTI4ZDUwYjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3XQNpjScDJqPub34Sh9kylIYrce
8pgsGrBI+M88ccBzWb97jq0mWVmAbcrPcr1UQCg3V0wcCUgpMzUDOZglqquiqEjR
M11GjTjYrFXOCl9R6DN2bkeIMudaxSVmstouFZf+OL1iGVty+ZOBCT7BryP9cB8Q
r+sT3aBmKVt/7lpIWSCV7uToYxA/F1cRU+1ECAbiZOCL5rwDTuubuKVOH4qNDdTd
dG9Cmm+wO3kxcgkBx4DX8O07uIgDTwayfcDiNP6rcWazskM6Km3w/Cknb72bztnQ
ercrCJBD4PO9YvNmWFkJgKCb4lXjGYdIbkhf/Q155ECqtoYgwHD6vzFtXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ0PU3l4oun4k8KoVsglZjoo1QssMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvblE5VGVYaWk2ZmlUd3FoV3lDVm1PaWpWQ3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXavbMA0G
CSqGSIb3DQEBCwUAA4IBAQALiIELjLZTfprSnUXc2i7NbCYa9eK5aZkb4sfD6uLO
DY19/atY6viWwjSg272hq8TAP8s1SSKVzcDdEn4tEiWDmQG+LVfoztz5iwcHhfZf
aTrCmvQ8L5L+v5JnEYz4WEmWeKM97lGQe+IXvHg+i6rs0PkgNtzG2sfk2zljizlf
L9hzSWHEoZnUkAFWmzv4VCyqS1yPuabh2lD1coe/l6ya13BEPy/nJYJgLfA7xrN5
M3hVPCVTZtfY7cP6RAF5zJPUy/wDgrkV0/4vuRkGVhbSAllNmNWYxAxS2EIncudG
ppyXmNbW2rhwgMZMw1QHpveYeY5wKi7pbdAVKPrIRqUV
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:53:34 2025 by rpki-client