Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/q00CGltXEuVRTZm1Z1E662VtJt0.roa
File: q00CGltXEuVRTZm1Z1E662VtJt0.roa (raw, json)
Hash identifier: AQ1y7qb+PIrdNgml9fVwx+uPctXhuJ0au2kp7ESRd1E=
Subject key identifier: AB:4D:02:1A:5B:57:12:E5:51:4D:99:B5:67:51:3A:EB:65:6D:26:DD
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 27E7B300
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/q00CGltXEuVRTZm1Z1E662VtJt0.roa
Signing time: Sat 01 Jan 2022 16:09:06 +0000
ROA not before: Sat 01 Jan 2022 16:09:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59826
IP address blocks: 93.171.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 669496064 (0x27e7b300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 1 16:09:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab4d021a5b5712e5514d99b567513aeb656d26dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:cc:87:8a:31:7d:96:c7:c0:2c:aa:62:04:
3c:00:c0:0a:7f:bb:c1:c5:31:65:41:14:83:df:c5:
9d:43:61:21:af:c8:c0:83:c7:8b:5a:d8:bb:9c:1a:
3b:fa:00:f5:df:7f:75:46:53:a3:4a:3f:b4:53:a2:
a6:6c:b7:9c:94:0a:db:ab:da:ab:88:2d:c3:9e:ba:
f6:09:aa:3e:b6:1c:80:d2:f7:2b:e2:f0:86:db:dd:
32:8b:d2:2b:51:49:4d:7b:c1:88:23:9e:6a:27:57:
09:a5:86:72:38:38:88:8a:b1:2b:56:0b:da:83:ab:
ce:f7:ee:dc:f2:14:cd:d9:58:a5:39:ec:1f:f7:e1:
4f:a5:17:b7:f8:de:91:24:4e:e4:f6:93:91:92:f5:
14:4f:d9:10:de:8d:f9:9c:f5:91:7b:6b:7f:ab:75:
e1:e4:c9:85:d8:61:5f:66:52:1d:f9:9a:d2:83:fe:
04:23:92:78:7d:c9:67:cc:2a:6d:27:99:2b:ab:4a:
05:0a:f5:ea:af:4b:2d:9f:1a:b6:2c:6c:56:35:0c:
bd:3b:5c:17:20:2f:4d:ba:16:69:bc:c7:bf:2a:69:
0c:fc:b5:57:a6:d6:70:c3:ff:85:ab:ce:78:92:31:
00:d2:d8:d3:88:22:db:d2:13:86:97:2f:84:1b:ef:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4D:02:1A:5B:57:12:E5:51:4D:99:B5:67:51:3A:EB:65:6D:26:DD
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/q00CGltXEuVRTZm1Z1E662VtJt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.172.0/24
Signature Algorithm: sha256WithRSAEncryption
24:10:29:bd:bd:8e:a3:1d:d4:a5:c8:52:22:cb:5e:c2:37:9c:
df:3e:d9:53:45:00:80:1c:f6:3c:b9:21:fb:cf:b5:0a:8e:f6:
3b:8b:19:35:3e:98:03:49:f8:82:a6:4a:b4:58:fa:04:78:35:
f2:cd:80:8e:e4:7f:39:64:2e:1e:7d:a6:fd:03:0d:54:f9:a2:
af:ab:34:f5:7b:2f:a9:3a:e7:0d:ac:24:3f:ea:e2:71:53:bd:
a8:30:b5:41:c2:1c:da:b3:29:a7:91:ae:8a:dd:d8:f2:20:2e:
ee:88:b0:2e:5c:0c:dd:4a:05:77:85:54:be:c3:62:ee:2f:4d:
68:ba:2a:90:54:29:07:70:f0:a3:45:08:9b:2f:98:9d:1d:c2:
ad:eb:e1:bf:1c:e5:a9:6e:a9:fe:b7:b3:70:b8:c6:fa:e4:32:
41:53:ae:19:f8:14:b3:60:eb:60:11:2c:87:6c:82:11:ee:f0:
cd:d1:59:61:b1:70:4e:c7:42:85:a7:13:f0:e3:bb:85:8b:e9:
bb:ff:87:74:8c:e9:35:b1:d0:7a:1d:2b:37:54:ae:d7:4f:10:
96:a9:c9:9e:cb:25:54:67:60:2e:c7:e3:65:26:b0:59:21:d3:
be:34:2b:5e:1a:1e:57:c3:47:e7:7b:97:10:6e:c6:12:1e:38:
4b:7b:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:45 2025 by rpki-client