Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nVhNaUQwcvqaWg4oc9sv-Z_OaMY.roa
File: nVhNaUQwcvqaWg4oc9sv-Z_OaMY.roa (raw, json)
Hash identifier: j0to5daiRa78ytp+hf5lwJkWuo6z0bWeDiCFJwGRfOo=
Subject key identifier: 9D:58:4D:69:44:30:72:FA:9A:5A:0E:28:73:DB:2F:F9:9F:CE:68:C6
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB6A1134DC0DD6027BC7C80157907
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nVhNaUQwcvqaWg4oc9sv-Z_OaMY.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50245
IP address blocks: 92.38.38.0/24 maxlen: 24
93.171.200.0/22 maxlen: 24
95.47.138.0/24 maxlen: 24
2a02:128:7::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b6:a1:13:4d:c0:dd:60:27:bc:7c:80:15:79:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d584d69443072fa9a5a0e2873db2ff99fce68c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3b:d7:fa:72:d4:bc:0d:b8:1c:0f:8f:0d:85:
c9:81:b7:13:ba:fd:4b:fc:32:44:02:ca:ed:1b:16:
c5:1b:10:30:cf:69:74:04:95:41:4d:cb:95:45:df:
fc:f0:7f:1d:22:4e:74:af:4a:d4:96:a0:c2:3e:0f:
0f:8e:c6:52:8f:73:35:0d:d7:f6:63:25:a0:4f:5e:
be:92:90:e6:d9:90:af:ce:df:41:13:71:c1:90:77:
31:50:db:57:53:53:d6:9b:3b:f1:5e:43:65:b1:53:
d5:fb:22:fd:82:30:3b:e7:e1:ae:96:2c:01:61:aa:
1f:75:98:6f:19:46:6b:31:20:57:21:9e:a4:59:27:
96:16:19:06:a7:fa:b6:0d:a8:85:15:d5:11:b0:f4:
1e:85:aa:62:b1:7b:5c:4b:54:28:f1:4e:79:37:85:
79:dd:c0:94:d3:5f:58:43:a5:f4:64:03:aa:45:ea:
40:82:d3:73:73:a5:a1:5a:ea:1a:fd:b2:1e:89:3f:
5e:11:0c:62:6e:6b:92:53:f5:9c:05:1d:05:93:1b:
c3:d7:21:e4:82:ec:38:53:6d:fd:0f:5d:8e:bc:9d:
3b:c5:f3:56:fe:36:cc:74:4c:37:d7:c0:c8:ba:e5:
bd:84:20:62:61:0c:73:a5:c0:5f:a6:4c:ea:4a:68:
03:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:58:4D:69:44:30:72:FA:9A:5A:0E:28:73:DB:2F:F9:9F:CE:68:C6
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/nVhNaUQwcvqaWg4oc9sv-Z_OaMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.38.0/24
93.171.200.0/22
95.47.138.0/24
IPv6:
2a02:128:7::/48
Signature Algorithm: sha256WithRSAEncryption
25:d4:11:06:ae:1a:27:8f:84:91:cb:1c:7b:50:26:d9:39:c8:
5e:dc:33:a7:8b:de:6a:a2:7d:9c:78:de:8d:f7:48:78:48:d5:
b6:43:32:8a:1d:12:db:96:69:f7:6e:b4:d1:20:fb:be:b1:5e:
3f:2e:f9:b9:66:e9:e2:6b:ef:78:f6:f6:ce:8b:ab:d4:d7:40:
99:f7:7f:94:91:ff:28:84:d3:08:06:97:6e:e1:58:09:90:e7:
84:a8:86:89:63:64:2b:35:33:d4:66:22:5a:d2:71:96:25:18:
0b:69:97:2f:18:34:6e:58:bc:3a:81:be:19:4c:08:79:de:c4:
ba:cd:72:3f:c3:d6:59:4d:5d:bb:73:43:ce:51:21:83:2d:8e:
01:a5:57:60:5c:41:35:a5:d8:2f:99:68:80:09:08:8a:b4:77:
1a:f2:34:31:a7:60:c4:ea:a2:90:c3:0b:41:3e:4c:a1:45:f2:
1e:54:d7:51:76:78:99:9a:2c:cd:15:f5:fc:9d:53:54:b2:1b:
ba:59:7b:89:40:c2:59:55:84:e9:6c:16:fa:f2:c0:1f:ef:b6:
55:ce:86:1b:81:11:7a:81:c9:fd:be:17:c3:4b:bc:cb:81:11:
77:a1:8c:f5:18:90:aa:0e:89:31:15:97:d6:aa:15:b9:3f:20:
f4:ee:a4:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:42 2025 by rpki-client