Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qm0003bOl9Q7MxUQ28SB6jFsj2M.roa
File: qm0003bOl9Q7MxUQ28SB6jFsj2M.roa (raw, json)
Hash identifier: qxKcfGox7H224br4O394rg8G/WGvqfe1nBvA+OJ8k30=
Subject key identifier: AA:6D:34:D3:76:CE:97:D4:3B:33:15:10:DB:C4:81:EA:31:6C:8F:63
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018C3F2456D031C15B2CE609F14A5D8159DB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qm0003bOl9Q7MxUQ28SB6jFsj2M.roa
Signing time: Wed 06 Dec 2023 12:39:55 +0000
ROA not before: Wed 06 Dec 2023 12:39:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49098
IP address blocks: 93.171.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3f:24:56:d0:31:c1:5b:2c:e6:09:f1:4a:5d:81:59:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Dec 6 12:39:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa6d34d376ce97d43b331510dbc481ea316c8f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cb:2c:45:24:c0:ee:6b:bc:fa:b9:fd:31:6a:
f5:9e:be:22:11:40:62:7d:d9:cc:2f:89:94:6b:f1:
3f:90:7a:a2:30:b4:4b:12:f8:32:55:66:20:c3:30:
e3:a7:27:d1:4c:41:a6:dd:24:4e:70:51:a4:33:4c:
68:82:63:00:c4:d0:09:85:a4:3a:58:36:3e:a9:5d:
39:3a:c3:61:15:34:4c:59:66:5e:cb:a6:80:46:27:
d5:80:f4:38:bb:71:a6:35:56:cb:21:80:2c:17:fd:
d6:a9:7d:1a:13:ae:2f:ab:9c:69:f8:df:d0:2b:a3:
fb:fd:4e:e8:57:db:f6:94:39:0f:ee:f9:a9:92:09:
04:8f:5b:31:81:85:f1:90:22:6a:cc:53:d2:5c:7d:
d5:26:48:f0:c9:2b:ff:8e:43:ba:8e:0c:4f:4d:e7:
2a:9a:2a:2d:28:c5:65:99:a0:bf:1e:3f:4c:78:4b:
0c:c3:5b:a6:62:1f:08:ef:1c:11:08:ed:e0:59:d9:
ad:30:02:83:3f:bc:16:8f:3e:9f:4f:34:72:a4:2a:
0d:75:94:06:d3:bb:e4:52:34:57:9d:d4:e9:d4:1f:
b1:ce:40:d3:bb:65:c7:c9:fe:92:33:c9:7c:a7:a8:
53:79:97:1a:cc:b8:d7:92:dd:c4:f7:1d:ef:42:5b:
3d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6D:34:D3:76:CE:97:D4:3B:33:15:10:DB:C4:81:EA:31:6C:8F:63
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/qm0003bOl9Q7MxUQ28SB6jFsj2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.168.0/24
Signature Algorithm: sha256WithRSAEncryption
29:b5:e8:8f:8a:40:1c:fb:28:c8:6d:b1:d5:94:3f:3a:fd:0c:
d3:c6:a0:d3:e2:1a:4b:59:c2:6a:b4:32:03:36:7b:d0:91:3e:
6d:3f:cf:35:3d:bd:3c:66:f0:46:b1:76:64:c7:6f:ea:d3:60:
6f:0f:49:e0:bf:c3:6d:6d:f0:1f:9b:ce:17:9f:a5:51:c4:fb:
c3:aa:3a:87:1e:49:ae:33:d3:c7:0c:b6:7f:96:e4:6e:c0:c8:
1a:9c:0b:4b:e3:83:a8:62:8a:db:33:e4:51:bc:df:86:ef:7c:
59:36:8a:63:df:63:32:ed:62:35:93:25:2d:fa:e8:7b:99:f6:
b4:b6:f9:a0:bd:f5:ad:9f:41:14:14:fd:b2:a6:4f:8c:cc:ab:
05:d0:35:2d:c5:97:42:13:d6:ec:f6:fc:d9:1c:31:94:1d:27:
5b:84:5d:dc:48:8e:6c:92:1f:4e:4f:2e:a2:c3:cf:fc:b4:76:
a8:6e:5b:03:80:26:63:da:df:35:9f:fe:c7:b8:d2:cf:9d:cf:
7a:25:e7:0a:c0:04:27:9d:d1:09:59:10:10:b6:00:91:14:a1:
43:74:6b:b5:c1:c9:a2:cd:51:cf:75:01:dd:b9:fa:44:82:8b:
f5:56:06:31:9b:d3:ab:b1:01:4d:1f:99:2b:43:7f:b8:8f:2a:
e9:ac:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:00 2025 by rpki-client