Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rQ4a7x5fYyDGOhyvUwI9xn-jElU.roa
File: rQ4a7x5fYyDGOhyvUwI9xn-jElU.roa (raw, json)
Hash identifier: l5SlHOswGMnzTeCnX7A1kAPKHy15MwSi5I9JvdyNJdI=
Subject key identifier: AD:0E:1A:EF:1E:5F:63:20:C6:3A:1C:AF:53:02:3D:C6:7F:A3:12:55
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709515D17361874B7F0A202E9654F8D2
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rQ4a7x5fYyDGOhyvUwI9xn-jElU.roa
Signing time: Mon 02 Jan 2023 03:44:56 +0000
ROA not before: Mon 02 Jan 2023 03:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41102
IP address blocks: 93.170.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:15:d1:73:61:87:4b:7f:0a:20:2e:96:54:f8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad0e1aef1e5f6320c63a1caf53023dc67fa31255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:09:b7:62:85:0a:41:c7:bb:ab:8b:f0:03:
64:9b:8f:6e:49:f9:c9:cd:e4:ef:15:2f:11:1c:11:
5f:34:58:ae:36:33:bb:90:ec:89:63:4a:40:44:3c:
a4:10:9d:67:e7:d2:ee:29:a0:22:96:92:ef:85:34:
59:16:b5:eb:b9:a4:df:8f:c3:9c:19:07:23:b5:45:
0b:70:a2:a4:a7:58:4b:66:f2:3c:e8:10:08:f1:36:
d5:13:b3:13:c9:58:db:fd:c2:6e:1a:25:30:73:03:
a1:2c:e3:20:5b:47:e1:68:a0:a5:43:f6:3d:7f:25:
ed:2b:29:15:3b:5f:eb:f7:71:b4:e9:87:d8:10:0d:
06:d0:d2:4f:6e:85:05:90:6e:fd:9c:49:cf:4e:a1:
36:fa:e0:a0:39:d0:f5:fe:60:63:37:9b:a6:23:01:
0f:6a:22:a8:ee:2e:f7:c7:6f:aa:10:b8:c9:aa:7c:
4f:b9:e0:4b:de:b2:4e:a6:b6:f7:1b:45:4b:50:94:
cd:72:3c:c3:ec:9e:67:ce:c2:83:21:06:57:22:cd:
3a:d0:81:49:27:26:c4:85:c3:b8:4c:43:ea:c8:eb:
46:c8:d7:c6:71:30:1d:5c:fb:e8:75:1f:b0:24:26:
37:c7:40:46:e0:1f:ab:3a:bf:28:77:dc:40:9b:17:
ed:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0E:1A:EF:1E:5F:63:20:C6:3A:1C:AF:53:02:3D:C6:7F:A3:12:55
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/rQ4a7x5fYyDGOhyvUwI9xn-jElU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.218.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:96:c7:b3:30:f0:c8:d0:ee:12:18:43:f6:01:6c:f6:9b:67:
db:d0:3c:5b:f4:03:b8:22:8a:d3:04:00:74:49:6d:60:b0:4c:
29:d6:ac:b5:71:2d:44:06:87:23:2f:d6:5a:ba:44:f3:89:20:
01:8e:6a:c8:fb:bc:65:94:02:e1:4e:13:c1:34:6a:61:e6:f7:
6d:d3:2d:7e:5a:bc:34:c7:07:69:ae:66:4f:e4:28:0f:1e:aa:
e9:62:c2:a4:02:8e:ca:80:e5:40:10:51:d6:1f:1c:bf:91:5d:
44:02:c6:cf:d5:8c:62:fd:02:78:da:dc:b1:eb:fb:0e:cc:24:
2e:ec:81:65:1a:33:ce:78:c5:51:dd:48:70:2e:b3:3d:c4:eb:
45:28:cc:83:5f:f9:62:eb:9d:69:35:6f:42:34:7c:36:f9:06:
e9:79:d8:b0:81:c8:79:16:a0:bd:a6:c5:2f:a4:63:62:36:9a:
c5:22:04:f3:6f:45:b9:36:d2:74:5f:7a:ee:49:03:d6:d5:34:
8f:b1:cd:85:f8:08:19:fd:aa:fe:02:bc:dd:f8:bd:f7:39:39:
21:38:b3:a2:af:d7:45:c4:82:0c:f3:c2:7a:43:2c:d5:61:11:
2d:b4:27:e0:42:b0:2d:24:4c:f0:4d:e7:ce:f3:d4:00:41:30:
65:a7:f8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:46:37 2025 by rpki-client