Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ohCFPWHaDAY62d4pq-7qf35jjTE.roa
File: ohCFPWHaDAY62d4pq-7qf35jjTE.roa (raw, json)
Hash identifier: YYKP+U4FIbIeOtH0ay78HFa2/1mDku97yNr2NPhT2Ao=
Subject key identifier: A2:10:85:3D:61:DA:0C:06:3A:D9:DE:29:AB:EE:EA:7F:7E:63:8D:31
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FA43138282A53E2A076E10C19854B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ohCFPWHaDAY62d4pq-7qf35jjTE.roa
Signing time: Thu 02 Jan 2025 05:49:18 +0000
ROA not before: Thu 02 Jan 2025 05:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44359
IP address blocks: 93.171.76.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a4:31:38:28:2a:53:e2:a0:76:e1:0c:19:85:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a210853d61da0c063ad9de29abeeea7f7e638d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6c:79:44:b4:7a:99:77:8d:8f:5f:5b:53:31:
e4:8a:a9:ba:7c:80:ba:4f:ad:6f:c4:90:5e:cf:e1:
d9:b5:b9:f1:b3:f7:45:26:17:0d:ac:bd:e8:8c:90:
e5:9f:2b:d2:e3:95:ac:08:06:51:55:54:dc:bd:5f:
1b:00:fb:41:b3:03:7d:00:6e:63:c8:db:10:79:f7:
83:78:de:e7:53:44:36:25:9e:01:56:d9:72:c1:a7:
35:37:7d:a9:d9:2e:ed:eb:9a:ee:ee:ed:5e:ca:cb:
29:fd:9e:f9:20:76:06:c3:f3:24:c1:b2:44:ef:81:
80:aa:9d:99:7b:b5:94:43:f0:39:05:8e:d4:d4:ac:
e8:f5:f5:2f:51:c2:b4:83:5a:44:1a:06:32:67:77:
08:0c:c4:26:ab:62:09:6b:18:ee:6b:63:c0:e5:40:
b7:87:db:79:34:25:26:2e:93:55:03:3c:3b:68:34:
3a:41:2e:e6:f7:0d:95:64:55:0a:95:40:46:12:8b:
8c:aa:77:18:4b:17:8d:6f:3a:0c:72:aa:cd:85:57:
13:62:c5:b8:f7:9f:4c:31:29:18:45:a7:1a:d0:50:
04:3c:7f:f4:da:86:98:f5:93:70:ca:be:c1:bd:77:
cf:31:b3:d5:34:90:9f:9e:a4:7f:a6:78:85:26:ad:
28:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:10:85:3D:61:DA:0C:06:3A:D9:DE:29:AB:EE:EA:7F:7E:63:8D:31
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ohCFPWHaDAY62d4pq-7qf35jjTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.76.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:8f:31:92:16:64:e9:5d:dc:dc:38:f6:df:29:17:33:fe:a1:
3d:3b:05:37:3e:cc:42:93:b4:3c:e8:53:8e:12:9d:dd:24:81:
80:f5:d1:7d:db:e2:e3:2a:90:42:6b:d9:f9:1b:91:d3:18:55:
c6:d9:7a:59:b5:83:12:54:a3:31:d6:1a:4f:5e:08:75:e6:71:
18:6e:69:1c:68:a8:47:e6:af:60:78:d5:06:38:dc:e0:21:b9:
f8:83:c0:00:48:6d:92:c4:31:e0:b3:f5:f0:d1:d2:2e:fb:54:
81:31:c9:5d:55:85:0b:60:d6:c6:a6:60:e0:89:2a:6c:a7:a2:
1f:af:fd:68:3b:18:a6:c4:52:38:48:c5:8b:a8:8a:a2:cd:c6:
49:44:35:4f:6b:3a:0a:15:af:87:4c:b2:7f:fa:88:02:a0:8e:
98:36:b9:dc:72:60:77:f1:6d:af:fd:e7:df:26:49:1e:ce:f0:
e3:cf:7b:01:6f:7a:dd:c5:e1:5e:62:e8:60:40:b9:ad:11:3d:
1c:b2:6d:46:88:70:d0:52:7a:27:6f:8d:fe:57:0f:7a:f1:67:
a8:ec:78:b6:42:2d:5a:ef:2c:60:f4:52:aa:e1:e3:cc:de:d0:
bd:04:8b:27:0d:58:31:f8:8a:92:34:be:42:0c:a4:f8:39:d5:
c2:4e:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:48:50 2025 by rpki-client