Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sdBo179hr0Dh8AHDJNbaOc4x4Dk.roa
File: sdBo179hr0Dh8AHDJNbaOc4x4Dk.roa (raw, json)
Hash identifier: luld/BEhV8mxbXqBP1FjT95wksBGhm1rcpQkk5yTN8E=
Subject key identifier: B1:D0:68:D7:BF:61:AF:40:E1:F0:01:C3:24:D6:DA:39:CE:31:E0:39
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019151B32280426EF6D3CFFE1ADBF2205C2C
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sdBo179hr0Dh8AHDJNbaOc4x4Dk.roa
Signing time: Wed 14 Aug 2024 16:22:59 +0000
ROA not before: Wed 14 Aug 2024 16:22:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52114
IP address blocks: 93.170.253.0/24 maxlen: 24
93.171.176.0/24 maxlen: 24
146.120.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:b3:22:80:42:6e:f6:d3:cf:fe:1a:db:f2:20:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 14 16:22:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1d068d7bf61af40e1f001c324d6da39ce31e039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a6:5c:4c:cd:72:5d:53:01:79:0b:87:33:a5:
7b:a7:63:a5:2e:d6:f2:ed:c1:89:cf:5b:28:ed:04:
9c:4c:a7:71:92:6c:f2:66:b3:61:39:d0:50:bf:cc:
d5:76:dd:df:c6:91:f3:03:89:e4:ec:be:a8:46:62:
66:be:4a:63:8a:be:52:24:36:47:65:4b:78:2e:da:
34:56:38:49:00:17:95:06:9c:79:69:32:77:c1:a0:
4f:05:60:43:cd:2c:8f:13:b1:32:ca:1c:a1:31:d2:
66:9e:7b:dc:77:92:e3:d5:d9:8e:89:cf:dd:26:de:
4d:1c:c0:88:28:48:46:9c:6e:39:13:33:48:88:04:
64:10:ad:cd:8f:99:f3:f0:fd:fe:fe:e8:05:59:36:
ef:62:49:bf:82:86:e5:eb:29:a0:9b:9c:2c:22:dc:
fd:cb:20:03:37:bd:45:f6:38:1f:4d:d0:78:7c:c7:
04:e3:93:a2:2e:46:43:50:25:f1:6b:23:52:f9:03:
a6:dd:9d:ef:b3:76:c4:b9:49:d4:75:c0:05:cd:aa:
f3:e7:64:08:c8:6b:b5:db:f9:60:f3:dd:8e:ab:9a:
ed:17:d2:ff:c7:48:17:28:7d:c6:ef:70:0c:78:23:
23:07:8b:3b:af:8a:5d:0d:59:15:2d:b7:7f:45:77:
2c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D0:68:D7:BF:61:AF:40:E1:F0:01:C3:24:D6:DA:39:CE:31:E0:39
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/sdBo179hr0Dh8AHDJNbaOc4x4Dk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.253.0/24
93.171.176.0/24
146.120.171.0/24
Signature Algorithm: sha256WithRSAEncryption
81:87:a5:81:4a:7b:cc:0f:72:60:51:8b:2e:94:fa:d0:75:d6:
92:f5:99:e2:e3:d8:54:48:91:53:7a:2e:47:8b:2e:bc:3d:9f:
e6:65:08:f8:a1:b0:9d:8c:0f:75:47:5d:30:d5:f3:82:3c:32:
00:33:3f:7e:b9:26:9c:fd:c7:05:c7:08:42:68:c9:8b:cc:89:
ca:57:10:37:ea:fd:f8:28:e0:87:9e:08:13:d0:ba:7b:60:7f:
65:66:93:52:29:3f:39:2d:8a:bf:1f:e7:b1:5a:d5:a6:62:5d:
5e:74:3c:d4:68:4d:0b:c0:87:7e:b5:2b:25:b0:61:38:a9:1e:
f4:9c:82:e1:4e:dd:37:9b:94:3b:d9:a4:41:c2:32:7c:71:63:
55:c9:94:77:dd:37:49:86:26:e8:ee:da:5d:75:42:12:0d:52:
a6:26:c6:e5:08:7a:6d:53:50:b6:bd:a6:15:ef:74:31:8f:db:
3b:8b:f1:d6:74:42:75:00:dc:bf:d0:61:c8:95:f3:44:08:62:
41:c4:34:62:60:1d:dc:6a:db:3d:50:8c:14:fa:41:64:0c:cb:
80:8f:78:e5:c9:c5:b1:dd:a8:1f:0a:6c:4d:4d:32:4e:26:e9:
ba:14:e9:73:f1:06:a6:b2:3d:8b:f5:a8:a2:dd:2d:14:7c:72:
a0:aa:d6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:45 2025 by rpki-client