Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rPDErxZkwhhKONjg20u0MWXNzNo.roa
File: rPDErxZkwhhKONjg20u0MWXNzNo.roa (raw, json)
Hash identifier: dYFUJNApZyqF4V2CQFYFbosdA2sHXWc4GZGwAC77F7o=
Subject key identifier: AC:F0:C4:AF:16:64:C2:18:4A:38:D8:E0:DB:4B:B4:31:65:CD:CC:DA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FFBD23038AA23CC12EE9C788A77D0
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rPDErxZkwhhKONjg20u0MWXNzNo.roa
Signing time: Thu 02 Jan 2025 05:49:40 +0000
ROA not before: Thu 02 Jan 2025 05:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208038
IP address blocks: 93.170.122.0/24 maxlen: 24
2a02:128:20::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:fb:d2:30:38:aa:23:cc:12:ee:9c:78:8a:77:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acf0c4af1664c2184a38d8e0db4bb43165cdccda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:31:56:0a:85:cb:85:d4:70:7a:ae:e1:4c:
39:d6:ff:60:5d:37:2b:1e:5f:a7:05:9f:a2:72:83:
ef:5f:2d:6a:d3:47:9c:60:19:44:d3:c2:b8:a2:15:
88:be:0f:d9:7c:b4:3d:ee:ae:bb:ed:80:75:93:bc:
87:63:61:90:f1:4b:7d:28:43:47:9b:93:dd:73:41:
26:46:07:85:50:24:14:2b:a1:0b:13:c1:41:a1:ae:
df:81:5a:cb:f6:43:cd:1b:6e:2e:48:bf:e0:bc:83:
a4:cc:a2:ed:6d:4d:02:39:50:d8:10:63:69:69:55:
c8:02:69:67:cf:c6:94:d7:4c:eb:69:2c:41:f8:b8:
51:a9:b4:c0:ca:2f:7d:73:84:0c:0e:ed:fa:26:3e:
e7:fb:57:77:ff:86:2e:dd:da:01:15:9c:9f:f4:a0:
8d:96:e2:b5:d5:1d:f0:c0:f3:8f:0f:21:db:eb:fd:
12:8f:67:4d:d3:87:c8:47:88:23:51:e6:62:93:27:
ed:cc:6b:4b:16:80:d5:c5:19:45:39:b5:5c:96:f3:
18:17:53:2b:dc:d3:56:c3:f8:b7:e1:06:40:f6:40:
a3:f9:86:c1:8f:81:9a:4a:4b:83:c3:7b:48:42:85:
8f:9f:39:c7:c6:d9:bf:22:50:55:42:d1:c0:26:2f:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:C4:AF:16:64:C2:18:4A:38:D8:E0:DB:4B:B4:31:65:CD:CC:DA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rPDErxZkwhhKONjg20u0MWXNzNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.122.0/24
IPv6:
2a02:128:20::/48
Signature Algorithm: sha256WithRSAEncryption
af:6b:1d:0c:cd:c3:35:b3:12:be:d9:ed:c0:1c:1e:5a:6b:37:
45:94:be:87:4c:af:56:46:39:76:b7:52:fe:e3:42:2d:33:f9:
70:1e:f8:43:b9:bd:d6:c5:f1:d8:ea:1f:8c:fa:9c:3f:6b:6f:
ba:44:98:fe:05:54:b7:97:3a:5d:49:4b:ce:46:63:d0:19:cf:
70:7c:d4:ef:9e:33:6b:0b:99:dd:c3:84:a2:14:78:b3:d6:06:
d9:4c:25:13:7c:64:02:4c:cf:e5:52:ad:11:97:ed:e0:bd:47:
70:66:0a:ba:a5:31:22:d6:87:5d:86:f4:63:da:fb:a1:4e:5d:
37:c2:9a:43:a5:76:b9:90:6e:f2:91:73:00:fa:11:b6:bc:92:
71:f0:30:3f:6c:0b:77:a8:c8:a2:53:17:b0:f7:ac:fd:38:9e:
a9:80:5c:66:57:a1:58:f8:a9:48:90:c5:69:ae:f5:87:64:41:
cd:3b:9f:0d:fa:6f:3c:2e:40:f2:7d:01:f4:ad:ba:b1:67:03:
43:bc:b2:d2:24:87:2c:18:dd:cd:97:4d:2f:54:68:18:22:2d:
3f:8f:49:04:26:3a:f0:fb:9a:2b:f6:f1:13:66:7e:9b:25:90:
ce:d7:64:c6:65:81:88:25:a4:dc:eb:c5:19:4f:ac:6f:f3:62:
22:b1:51:88
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQlj/vSMDiqI8wS7px4infQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2YwYzRhZjE2NjRjMjE4NGEzOGQ4ZTBkYjRiYjQzMTY1Y2RjY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7UxVgqFy4XUcHqu4Uw51v9gXTcr
Hl+nBZ+icoPvXy1q00ecYBlE08K4ohWIvg/ZfLQ97q677YB1k7yHY2GQ8Ut9KENH
m5Pdc0EmRgeFUCQUK6ELE8FBoa7fgVrL9kPNG24uSL/gvIOkzKLtbU0COVDYEGNp
aVXIAmlnz8aU10zraSxB+LhRqbTAyi99c4QMDu36Jj7n+1d3/4Yu3doBFZyf9KCN
luK11R3wwPOPDyHb6/0Sj2dN04fIR4gjUeZikyftzGtLFoDVxRlFObVclvMYF1Mr
3NNWw/i34QZA9kCj+YbBj4GaSkuDw3tIQoWPnznHxtm/IlBVQtHAJi+l/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKzwxK8WZMIYSjjY4NtLtDFlzczaMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvclBERXJ4Wmt3aGhLT05qZzIwdTBNV1hOek5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXap6MA8E
AgACMAkDBwAqAgEoACAwDQYJKoZIhvcNAQELBQADggEBAK9rHQzNwzWzEr7Z7cAc
HlprN0WUvodMr1ZGOXa3Uv7jQi0z+XAe+EO5vdbF8djqH4z6nD9rb7pEmP4FVLeX
Ol1JS85GY9AZz3B81O+eM2sLmd3DhKIUeLPWBtlMJRN8ZAJMz+VSrRGX7eC9R3Bm
CrqlMSLWh12G9GPa+6FOXTfCmkOldrmQbvKRcwD6Eba8knHwMD9sC3eoyKJTF7D3
rP04nqmAXGZXoVj4qUiQxWmu9YdkQc07nw36bzwuQPJ9AfSturFnA0O8stIkhywY
3c2XTS9UaBgiLT+PSQQmOvD7miv28RNmfpslkM7XZMZlgYglpNzrxRlPrG/zYiKx
UYg=
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:16 2025 by rpki-client