Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oOjanIPYSDAS2GBdKoYtEuNJ_ZI.roa
File: oOjanIPYSDAS2GBdKoYtEuNJ_ZI.roa (raw, json)
Hash identifier: UyJpePLdAZqA11tzCiEf3f6RmhA+BJZ0Mmv4BSwK9xU=
Subject key identifier: A0:E8:DA:9C:83:D8:48:30:12:D8:60:5D:2A:86:2D:12:E3:49:FD:92
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 277F42D6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oOjanIPYSDAS2GBdKoYtEuNJ_ZI.roa
Signing time: Sat 01 Jan 2022 16:08:11 +0000
ROA not before: Sat 01 Jan 2022 16:08:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42350
IP address blocks: 93.170.89.0/24 maxlen: 24
146.120.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 662651606 (0x277f42d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:08:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0e8da9c83d8483012d8605d2a862d12e349fd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ab:b0:f4:71:4e:9e:35:41:61:6e:bd:56:eb:
d4:a5:3b:79:dd:b2:7f:70:34:fd:1c:93:70:5d:cb:
c5:c6:71:a9:42:19:ce:22:12:0b:ec:41:b2:4b:88:
fe:a7:0c:3b:dc:ff:d8:ba:d2:5c:ef:91:f1:fd:f1:
06:32:91:50:9a:0e:ae:b6:ae:de:7e:62:91:18:f7:
c4:05:2b:5b:bc:80:4f:cb:ce:07:f7:18:4e:a4:7e:
47:1f:74:3a:23:f7:e1:a2:1b:d2:f3:f9:44:00:86:
87:e6:c3:2a:ab:d9:5e:27:7c:c4:8f:b8:7c:94:5b:
c7:65:43:86:d6:e3:7f:ee:fe:30:d9:be:1b:ce:e5:
d8:50:50:6a:91:05:2a:ed:16:75:21:8d:ce:e4:67:
bc:06:98:0e:d4:ea:0c:21:a0:52:6d:d2:a3:78:e2:
8d:71:57:8d:77:86:47:42:d4:1a:25:ce:a3:00:82:
83:73:1d:c3:3f:73:6f:2a:5e:63:c8:d4:37:21:f9:
90:95:02:da:fa:8a:a9:92:bf:fb:e4:f0:be:b7:d1:
9c:3c:6b:8c:86:d9:1d:22:d7:88:ad:50:d2:b5:17:
c1:9e:84:6b:a3:7f:4e:bc:11:6a:94:9d:c9:53:58:
31:d9:cc:ca:1c:21:73:0a:c8:a9:b7:14:01:92:c0:
f9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E8:DA:9C:83:D8:48:30:12:D8:60:5D:2A:86:2D:12:E3:49:FD:92
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/oOjanIPYSDAS2GBdKoYtEuNJ_ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.89.0/24
146.120.220.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ca:17:59:d5:bc:b4:28:4c:ea:19:67:f3:87:b2:ad:24:83:
b0:08:6b:91:2d:fd:6b:95:35:ac:19:89:b3:0f:f9:92:4f:85:
e1:2d:2b:4a:dc:89:b6:b6:40:b1:d9:ac:3c:8f:d3:88:d4:4a:
84:03:b4:82:de:26:11:30:85:2c:8a:bb:ea:81:77:da:00:30:
6d:05:6e:c5:39:f1:7f:2a:e7:c4:25:5d:c2:1b:71:c1:45:f0:
e9:b5:21:68:bc:12:d1:73:d3:0d:a1:42:0e:06:ad:49:9b:70:
40:11:06:fc:68:ab:4b:7e:cb:ad:c5:6d:60:5b:6b:a5:49:e0:
aa:08:0d:7e:33:46:35:8e:55:70:4d:44:ff:16:ed:90:f1:65:
ee:03:c4:23:46:71:20:b3:ea:44:0b:f9:7d:f9:73:21:ed:ea:
db:06:b0:ec:5c:7d:89:ae:56:b4:bb:35:93:4d:16:0f:b8:81:
7e:3e:40:fc:3c:01:ab:1c:cc:1e:0f:6c:59:ec:8e:d3:66:e9:
ef:83:fc:ed:0e:25:72:b9:02:6b:76:65:1d:1f:0c:ad:a8:6b:
f5:6a:25:74:90:82:f2:4a:d0:9f:1a:34:15:1b:ad:17:34:47:
53:a3:cd:ad:b8:56:da:73:2a:f3:d6:e4:56:e9:11:2d:09:72:
a7:20:28:56
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEJ39C1jANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3
NDkxMjJjMzU0MzhhNGViMjYyMzNmZGM2ZTRiYjFkZjJkYWFlZjQyMB4XDTIyMDEw
MTE2MDgxMVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTBlOGRhOWM4M2Q4
NDgzMDEyZDg2MDVkMmE4NjJkMTJlMzQ5ZmQ5MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMirsPRxTp41QWFuvVbr1KU7ed2yf3A0/RyTcF3LxcZxqUIZ
ziISC+xBskuI/qcMO9z/2LrSXO+R8f3xBjKRUJoOrrau3n5ikRj3xAUrW7yAT8vO
B/cYTqR+Rx90OiP34aIb0vP5RACGh+bDKqvZXid8xI+4fJRbx2VDhtbjf+7+MNm+
G87l2FBQapEFKu0WdSGNzuRnvAaYDtTqDCGgUm3So3jijXFXjXeGR0LUGiXOowCC
g3Mdwz9zbypeY8jUNyH5kJUC2vqKqZK/++TwvrfRnDxrjIbZHSLXiK1Q0rUXwZ6E
a6N/TrwRapSdyVNYMdnMyhwhcwrIqbcUAZLA+XMCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSg6Nqcg9hIMBLYYF0qhi0S40n9kjAfBgNVHSMEGDAWgBR0kSLDVDik6yYj
P9xuS7HfLarvQjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2RKRWl3MVE0cE9zbUl6X2Nia3V4M3kycTcwSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTgvMThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8x
L29PamFuSVBZU0RBUzJHQmRLb1l0RXVOSl9aSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTgv
MThhOTFjLTBlNzctNDVjOS04Y2M0LTA2MmM2OTMzYWJlZC8xL2RKRWl3MVE0cE9z
bUl6X2Nia3V4M3kycTcwSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAF2qWQMEAJJ43DANBgkqhkiG9w0B
AQsFAAOCAQEAeMoXWdW8tChM6hln84eyrSSDsAhrkS39a5U1rBmJsw/5kk+F4S0r
StyJtrZAsdmsPI/TiNRKhAO0gt4mETCFLIq76oF32gAwbQVuxTnxfyrnxCVdwhtx
wUXw6bUhaLwS0XPTDaFCDgatSZtwQBEG/GirS37LrcVtYFtrpUngqggNfjNGNY5V
cE1E/xbtkPFl7gPEI0ZxILPqRAv5fflzIe3q2waw7Fx9ia5WtLs1k00WD7iBfj5A
/DwBqxzMHg9sWeyO02bp74P87Q4lcrkCa3ZlHR8Mrahr9WoldJCC8krQnxo0FRut
FzRHU6PNrbhW2nMq89bkVukRLQlypyAoVg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:56 2025 by rpki-client