Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oEiYX7nDesa9m1T7JN1KX47_rpQ.roa
File: oEiYX7nDesa9m1T7JN1KX47_rpQ.roa (raw, json)
Hash identifier: nZ5G6XWp9tQ6s5IPSgpQghPFYjKtRH+sKZYE0OtZr2w=
Subject key identifier: A0:48:98:5F:B9:C3:7A:C6:BD:9B:54:FB:24:DD:4A:5F:8E:FF:AE:94
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27ACE873
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oEiYX7nDesa9m1T7JN1KX47_rpQ.roa
Signing time: Sat 01 Jan 2022 16:08:35 +0000
ROA not before: Sat 01 Jan 2022 16:08:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49502
IP address blocks: 93.171.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665643123 (0x27ace873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a048985fb9c37ac6bd9b54fb24dd4a5f8effae94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3b:96:9d:96:60:74:23:b8:3f:34:de:0c:4b:
96:86:29:57:6e:5c:20:69:46:e1:34:e9:c4:c7:ae:
81:9c:c0:b1:eb:75:26:ee:cf:a5:c4:f9:98:eb:5d:
3f:42:77:bd:20:58:24:7e:90:4d:5d:e4:53:2d:a6:
8d:eb:06:65:70:96:a3:57:f7:22:c9:0b:45:7e:5c:
15:27:72:a1:65:99:52:b2:ee:c2:02:5c:80:15:7e:
a6:fe:cc:6c:b1:34:de:d0:0b:34:9c:58:6d:7b:fe:
da:84:66:01:00:b6:3c:91:d3:22:f9:23:74:d5:aa:
b3:ba:30:70:60:af:3f:a8:cc:62:05:66:52:ea:ae:
ae:7b:d6:0b:78:77:40:b5:64:82:85:2b:c3:2b:7f:
f6:17:4e:16:65:aa:f6:b9:38:b5:01:76:44:bb:f8:
4d:e1:42:03:06:eb:39:ee:37:47:56:c5:0e:e7:13:
1a:df:83:fc:d1:59:8e:84:f8:5b:85:3a:7b:b2:ec:
1e:87:69:79:af:a9:dc:bc:1a:47:cd:8b:03:76:97:
23:64:51:05:2f:91:ad:49:77:04:13:47:85:50:84:
3b:07:06:ae:57:0b:37:a1:27:3e:a5:ba:3c:9b:9c:
2e:de:3f:e5:c5:f0:4c:6d:df:6c:10:42:e8:78:fa:
2c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:48:98:5F:B9:C3:7A:C6:BD:9B:54:FB:24:DD:4A:5F:8E:FF:AE:94
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oEiYX7nDesa9m1T7JN1KX47_rpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.208.0/24
Signature Algorithm: sha256WithRSAEncryption
82:f4:b4:e7:8f:85:c6:90:06:0e:11:ad:88:9a:ec:2d:15:b2:
14:dd:af:4c:02:ef:ca:a8:76:dc:60:df:5a:8d:7e:04:af:ab:
6b:4e:ab:e9:27:a3:18:f0:1c:09:95:a0:29:9f:0d:ec:6f:4c:
2f:75:86:72:e9:ed:68:0a:3a:84:39:76:b9:1b:4b:4f:2d:84:
cd:49:30:84:69:22:ca:80:cd:b9:d3:d0:83:56:6e:45:92:7f:
fe:9b:b0:e7:dc:0d:d0:88:af:90:64:1f:03:c3:36:9c:09:41:
45:5a:0a:30:93:ed:20:75:2d:b3:4c:80:7f:c9:86:79:17:c0:
0b:8b:bb:3f:51:5d:9c:02:06:58:d0:f7:5c:26:bd:98:cc:ce:
f2:8a:3d:13:28:34:36:7d:31:6b:54:60:81:fa:05:c9:d5:d1:
79:7e:b7:9e:ab:c4:c9:46:ae:bd:d7:42:1e:fd:29:22:83:49:
96:3d:50:e5:47:7d:26:78:73:f6:a3:6f:6b:01:2f:9d:da:47:
a2:3e:26:e8:fd:00:3f:29:bf:f5:9c:a5:ed:84:f4:0f:95:16:
22:a4:c4:48:b0:33:13:2a:df:17:3f:6c:06:18:8a:36:b5:17:
96:b2:52:8b:cd:4e:f6:20:0d:5d:74:b3:05:d1:c7:79:3b:00:
49:f0:6f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:46 2025 by rpki-client