Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pzMyBxF9eD6k-dGEvTM8DPb9_m8.roa
File: pzMyBxF9eD6k-dGEvTM8DPb9_m8.roa (raw, json)
Hash identifier: kO5+OcmeM2GivqT4Y9Fur0HGZjLj2P1lJWirbbBMW8c=
Subject key identifier: A7:33:32:07:11:7D:78:3E:A4:F9:D1:84:BD:33:3C:0C:F6:FD:FE:6F
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27632DDA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pzMyBxF9eD6k-dGEvTM8DPb9_m8.roa
Signing time: Sat 01 Jan 2022 16:07:54 +0000
ROA not before: Sat 01 Jan 2022 16:07:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25015
IP address blocks: 93.170.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660811226 (0x27632dda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:07:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a7333207117d783ea4f9d184bd333c0cf6fdfe6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:39:54:22:bf:8b:64:02:41:34:f0:3d:95:
f2:eb:5f:eb:85:98:c7:9a:7b:81:89:f2:44:97:a3:
13:a1:dc:e5:8f:9f:2a:ef:16:51:15:b2:85:fa:26:
fe:c7:ba:c3:63:2b:2a:79:93:00:6a:9a:0e:6b:04:
35:07:d0:03:b9:f2:3e:cf:72:b8:ac:6c:35:db:48:
3c:e1:8a:70:ac:1e:05:ec:2b:89:a9:a9:9f:29:92:
31:3d:c6:ad:1c:e0:44:33:bd:d7:6d:6d:8b:96:10:
7f:bc:6d:77:07:94:98:3b:b7:65:e5:0b:8b:fb:5f:
a8:e3:94:a0:b9:c4:b3:bb:ff:31:f8:38:fc:7d:d9:
81:c6:7d:c3:61:17:d1:1a:8c:d4:9f:cf:c2:21:78:
11:05:81:b8:e7:34:d1:fa:f0:85:8c:6e:cd:05:e6:
17:54:9c:c3:10:82:43:11:f0:20:33:ca:d7:7f:03:
97:5d:19:fc:5a:c7:59:a3:a4:ef:c4:0a:6a:45:76:
75:7c:0c:19:92:15:75:a6:2f:8a:f4:6e:c8:76:25:
45:29:1e:55:70:8d:a7:1f:d7:8e:87:0e:ac:ba:51:
66:b4:77:bd:27:bd:03:30:80:c1:a1:97:f9:5d:ae:
48:7e:4c:57:b1:17:e0:e9:2b:a4:8a:7f:51:ad:7c:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:32:07:11:7D:78:3E:A4:F9:D1:84:BD:33:3C:0C:F6:FD:FE:6F
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/pzMyBxF9eD6k-dGEvTM8DPb9_m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f0:bb:37:fa:3e:10:1e:8e:d0:75:3b:af:de:59:56:15:97:
3a:0c:40:8a:ec:43:38:45:9d:ab:c9:4e:37:b3:a6:e5:b4:46:
d5:96:88:c7:31:b0:c1:18:5e:de:92:bd:5f:eb:23:e1:47:09:
06:10:2d:fd:bc:4d:0f:a2:1d:43:4a:49:dc:82:1e:82:8e:f6:
28:de:6a:00:65:58:ed:12:dc:24:59:6b:b7:d2:3b:e0:8f:b4:
cf:21:ef:a6:8f:e6:d8:8f:fb:6c:12:f5:22:1e:6e:e2:13:34:
72:eb:73:57:da:45:ad:b3:82:aa:ea:80:62:9b:4c:84:6c:61:
7d:f5:99:a6:dc:60:53:77:bf:f0:68:c2:41:94:dc:8d:f7:74:
b4:f3:fa:da:26:03:42:e0:ad:0f:58:ed:7a:ad:eb:22:3c:cf:
a9:0b:a3:95:b3:54:55:4f:f5:dd:3c:03:36:b3:9e:bd:37:bc:
a6:59:d3:fd:af:d6:62:e5:e2:42:13:77:fb:97:ba:80:7a:62:
fb:6c:53:2a:d1:8e:ed:f3:dc:59:6e:8e:5d:46:ff:8f:68:09:
8e:ea:8a:81:bb:75:bf:35:64:e0:d4:af:21:2f:1d:36:d7:12:
2b:d4:d3:df:05:41:7b:c9:5c:1f:1f:72:d3:84:97:4f:89:53:
8f:57:09:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:39 2025 by rpki-client