Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oDLMedfpfusq_I973i1Lz5LzY9w.roa
File: oDLMedfpfusq_I973i1Lz5LzY9w.roa (raw, json)
Hash identifier: CGrAaBN4/2JymWV9cvo2TJE0YpGbauWnRQT4ostx4dA=
Subject key identifier: A0:32:CC:79:D7:E9:7E:EB:2A:FC:8F:7B:DE:2D:4B:CF:92:F3:63:DC
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FAEE1600C66774B57731818B66F55
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oDLMedfpfusq_I973i1Lz5LzY9w.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48323
IP address blocks: 93.170.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ae:e1:60:0c:66:77:4b:57:73:18:18:b6:6f:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a032cc79d7e97eeb2afc8f7bde2d4bcf92f363dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:86:c5:f0:87:16:bd:ed:26:39:53:4e:91:
b0:b2:42:2c:c7:1d:d1:4e:58:5e:ae:23:c2:a2:92:
25:1b:4d:d2:f1:06:7c:93:e1:da:27:88:26:d6:8f:
80:98:ad:7d:22:7b:a1:c5:8a:e2:38:ef:36:b8:2b:
6c:3e:96:c7:d4:5b:5e:31:a3:e7:e6:e1:8f:75:65:
7e:eb:57:2b:76:c2:1c:07:13:dd:82:98:39:65:f0:
b6:cf:49:9b:e4:54:3c:d9:2d:17:4f:31:4f:c2:db:
06:39:f9:7d:0c:bd:e4:03:2f:22:d2:f1:01:19:51:
9e:fd:e3:92:e7:7a:d5:7c:bd:e9:c6:17:89:c2:74:
be:a9:2d:83:4e:98:fa:c1:ef:1b:4f:6e:36:91:52:
4d:71:9c:ae:a8:03:71:2a:f9:4c:93:03:2c:62:19:
0b:5e:f0:f8:7b:bb:4c:e4:f7:df:d1:4d:9a:d1:e8:
c4:ee:20:cc:ca:f6:75:09:35:45:88:4b:02:fd:83:
59:90:3c:e0:31:35:74:3f:86:92:74:c4:6a:10:46:
5e:a6:b2:24:eb:dc:5d:c6:41:b3:a9:7d:6e:01:b1:
8c:b5:95:e1:33:bf:03:1f:3f:f4:c1:bb:27:77:29:
a1:fa:c0:78:42:d2:bd:41:b7:e2:ef:c4:8f:5e:33:
1f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:32:CC:79:D7:E9:7E:EB:2A:FC:8F:7B:DE:2D:4B:CF:92:F3:63:DC
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oDLMedfpfusq_I973i1Lz5LzY9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.128.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:e8:ba:b6:49:a4:11:c7:67:be:1f:0e:dd:1c:e9:87:82:93:
2f:2d:58:74:c6:96:9a:21:64:60:90:52:14:39:fb:59:13:68:
0d:5c:3d:1d:7f:2f:cc:93:b8:74:63:f7:b8:5f:3a:ed:df:2f:
2d:49:63:fe:23:88:53:8b:b2:73:39:ae:ef:14:0e:c4:1c:9f:
fa:c4:05:21:3a:11:24:8c:a1:6f:b0:d8:4f:9a:cf:e4:64:9c:
87:f3:ca:b4:af:68:2b:31:ec:35:67:dc:58:d2:24:4b:34:56:
dc:4f:7f:ca:4b:f2:bc:ff:e7:8f:81:64:5b:9c:b8:cc:eb:45:
3b:24:69:81:e2:5d:58:22:5c:c5:bd:0f:b8:b4:3c:c2:87:9b:
b1:77:9f:67:9c:7e:b8:b4:a0:02:f4:02:a8:8e:91:f6:cf:b6:
12:55:42:bb:d5:76:b4:87:35:87:43:03:93:bb:c0:3a:11:e4:
3c:d4:fc:53:9f:ef:6a:3a:89:da:bd:05:b4:2f:a5:35:b8:12:
ca:5e:d1:ab:d6:d0:bd:f3:3b:a1:60:a2:52:a8:c9:5d:a5:8e:
6d:d1:e6:f8:4b:4f:a9:18:62:ce:36:0c:32:c5:b1:29:f5:be:
cd:8d:cf:e2:1d:59:2a:7c:ee:63:af:f6:3b:fd:7f:3b:a7:2a:
16:49:c2:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj67hYAxmd0tXcxgYtm9VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDMyY2M3OWQ3ZTk3ZWViMmFmYzhmN2JkZTJkNGJjZjkyZjM2M2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWiGxfCHFr3tJjlTTpGwskIsxx3R
TlheriPCopIlG03S8QZ8k+HaJ4gm1o+AmK19InuhxYriOO82uCtsPpbH1FteMaPn
5uGPdWV+61crdsIcBxPdgpg5ZfC2z0mb5FQ82S0XTzFPwtsGOfl9DL3kAy8i0vEB
GVGe/eOS53rVfL3pxheJwnS+qS2DTpj6we8bT242kVJNcZyuqANxKvlMkwMsYhkL
XvD4e7tM5Pff0U2a0ejE7iDMyvZ1CTVFiEsC/YNZkDzgMTV0P4aSdMRqEEZeprIk
69xdxkGzqX1uAbGMtZXhM78DHz/0wbsndymh+sB4QtK9Qbfi78SPXjMfnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKAyzHnX6X7rKvyPe94tS8+S82PcMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvb0RMTWVkZnBmdXNxX0k5NzNpMUx6NUx6WTl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXaqAMA0G
CSqGSIb3DQEBCwUAA4IBAQCr6Lq2SaQRx2e+Hw7dHOmHgpMvLVh0xpaaIWRgkFIU
OftZE2gNXD0dfy/Mk7h0Y/e4Xzrt3y8tSWP+I4hTi7JzOa7vFA7EHJ/6xAUhOhEk
jKFvsNhPms/kZJyH88q0r2grMew1Z9xY0iRLNFbcT3/KS/K8/+ePgWRbnLjM60U7
JGmB4l1YIlzFvQ+4tDzCh5uxd59nnH64tKAC9AKojpH2z7YSVUK71Xa0hzWHQwOT
u8A6EeQ81PxTn+9qOonavQW0L6U1uBLKXtGr1tC98zuhYKJSqMldpY5t0eb4S0+p
GGLONgwyxbEp9b7Njc/iHVkqfO5jr/Y7/X87pyoWScLi
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:10 2025 by rpki-client