Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ouiP6HvatOFZsWWGYi7tCXhuIDA.roa
File: ouiP6HvatOFZsWWGYi7tCXhuIDA.roa (raw, json)
Hash identifier: 3Um+LK3TRBgi4AsuQIQ7R6p+SAUIf60BLcpDj4alcFc=
Subject key identifier: A2:E8:8F:E8:7B:DA:B4:E1:59:B1:65:86:62:2E:ED:09:78:6E:20:30
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01942590106E38C1CFF2D34FD6268A6B2F42
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ouiP6HvatOFZsWWGYi7tCXhuIDA.roa
Signing time: Thu 02 Jan 2025 05:49:45 +0000
ROA not before: Thu 02 Jan 2025 05:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213029
IP address blocks: 93.170.6.0/24 maxlen: 24
95.47.124.0/23 maxlen: 24
95.47.127.0/24 maxlen: 24
95.47.238.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:10:6e:38:c1:cf:f2:d3:4f:d6:26:8a:6b:2f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a2e88fe87bdab4e159b16586622eed09786e2030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8a:f9:7a:fb:65:7b:dc:ea:b2:3d:83:d2:17:
a8:b8:5a:e0:69:08:78:89:bc:d5:76:38:87:dd:b3:
13:c2:74:75:59:4c:21:e6:1f:8f:96:29:8b:19:4d:
f9:4c:3f:a3:a3:ae:c3:8e:dd:d9:fc:53:66:98:7c:
43:d2:98:1f:d2:b6:af:5e:0c:50:52:31:a7:ab:29:
93:6d:dd:83:b1:c7:18:b4:a5:49:5c:d1:c5:d1:e7:
44:79:d9:0d:c0:88:27:96:0a:df:14:78:6e:ef:39:
62:27:99:23:88:96:d5:c8:6c:dd:dd:5f:6d:40:25:
1c:2e:a9:4d:db:d5:7d:6b:fc:32:32:9b:41:8c:c9:
7b:31:69:41:6c:37:28:d6:c3:4a:b9:8a:c1:a4:8d:
ac:63:ae:a3:a3:c4:eb:33:50:4e:d1:34:5e:56:89:
34:9d:66:8d:f6:ab:84:fc:3b:e7:b6:20:d5:23:5d:
87:77:fd:7c:49:d0:31:54:e3:d0:28:d8:b0:77:c2:
5c:6e:4d:1a:1f:4a:3f:28:4c:de:90:0c:6f:58:e6:
b6:b2:42:29:91:2b:6a:a1:66:4c:60:ac:c9:be:f9:
55:ff:b6:57:a1:d0:44:ac:db:d5:7c:66:24:9b:8f:
ef:a2:3a:9b:9e:6b:1c:26:c7:40:17:4a:1d:3f:01:
7d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E8:8F:E8:7B:DA:B4:E1:59:B1:65:86:62:2E:ED:09:78:6E:20:30
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ouiP6HvatOFZsWWGYi7tCXhuIDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.6.0/24
95.47.124.0/23
95.47.127.0/24
95.47.238.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:57:af:68:7f:d3:06:44:2c:d9:db:74:d0:1c:51:16:f6:f4:
92:b0:9e:82:d7:87:20:e6:0b:56:e3:d4:e1:42:f0:da:27:1d:
f3:b1:22:87:73:61:c0:5d:26:07:fb:fe:76:66:a1:75:56:61:
a4:57:c6:1b:06:d4:84:db:26:af:d4:fc:5d:de:d1:f6:0d:d6:
28:c4:74:4f:8f:96:fa:e8:8c:3b:a9:dc:61:01:6a:c8:97:d1:
d3:17:c3:d3:44:22:b0:bd:35:b8:a2:07:72:0e:65:8a:7d:b5:
cc:cd:15:89:62:14:0b:95:44:9a:e3:32:67:d3:08:43:c3:ed:
5d:d9:50:42:37:ef:75:5b:43:9d:9d:5e:c2:80:f7:14:f0:97:
e9:19:38:4d:ed:59:fc:10:c5:b8:90:57:6e:14:e2:04:0e:e8:
e7:c3:d3:62:e2:c5:f7:ff:5d:ef:97:f1:98:48:b6:8f:e8:b0:
c4:2b:e1:37:36:92:e9:4a:3f:46:d4:7b:59:8a:2b:c3:64:9f:
0d:94:e7:8e:9c:56:98:94:39:17:9a:04:ba:9f:82:4f:98:84:
8f:e3:51:80:ae:e9:b7:31:f0:48:12:5d:6f:a7:92:2c:c3:b1:
84:b0:55:5a:a8:65:37:92:ae:fd:9f:f8:d9:f3:2e:47:1b:80:
16:f0:6f:86
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQlkBBuOMHP8tNP1iaKay9CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmU4OGZlODdiZGFiNGUxNTliMTY1ODY2MjJlZWQwOTc4NmUyMDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4r5evtle9zqsj2D0heouFrgaQh4
ibzVdjiH3bMTwnR1WUwh5h+PlimLGU35TD+jo67Djt3Z/FNmmHxD0pgf0ravXgxQ
UjGnqymTbd2DsccYtKVJXNHF0edEedkNwIgnlgrfFHhu7zliJ5kjiJbVyGzd3V9t
QCUcLqlN29V9a/wyMptBjMl7MWlBbDco1sNKuYrBpI2sY66jo8TrM1BO0TReVok0
nWaN9quE/DvntiDVI12Hd/18SdAxVOPQKNiwd8Jcbk0aH0o/KEzekAxvWOa2skIp
kStqoWZMYKzJvvlV/7ZXodBErNvVfGYkm4/vojqbnmscJsdAF0odPwF9DQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKLoj+h72rThWbFlhmIu7Ql4biAwMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvb3VpUDZIdmF0T0Zac1dXR1lpN3RDWGh1SURBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXaoGAwQB
Xy98AwQAXy9/AwQBXy/uMA0GCSqGSIb3DQEBCwUAA4IBAQBMV69of9MGRCzZ23TQ
HFEW9vSSsJ6C14cg5gtW49ThQvDaJx3zsSKHc2HAXSYH+/52ZqF1VmGkV8YbBtSE
2yav1Pxd3tH2DdYoxHRPj5b66Iw7qdxhAWrIl9HTF8PTRCKwvTW4ogdyDmWKfbXM
zRWJYhQLlUSa4zJn0whDw+1d2VBCN+91W0OdnV7CgPcU8JfpGThN7Vn8EMW4kFdu
FOIEDujnw9Ni4sX3/13vl/GYSLaP6LDEK+E3NpLpSj9G1HtZiivDZJ8NlOeOnFaY
lDkXmgS6n4JPmISP41GArum3MfBIEl1vp5Isw7GEsFVaqGU3kq79n/jZ8y5HG4AW
8G+G
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:58 2025 by rpki-client