Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t3XZ82S6RMmA_JrXa0SMU79wlxo.roa
File: t3XZ82S6RMmA_JrXa0SMU79wlxo.roa (raw, json)
Hash identifier: BR2qppu/E33nUkEB261aoVwCTKBPy3ZWEw0goqdgy5Y=
Subject key identifier: B7:75:D9:F3:64:BA:44:C9:80:FC:9A:D7:6B:44:8C:53:BF:70:97:1A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194F1DE8AC5202A259E73F017B3EE650B50
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t3XZ82S6RMmA_JrXa0SMU79wlxo.roa
Signing time: Mon 10 Feb 2025 21:58:01 +0000
ROA not before: Mon 10 Feb 2025 21:58:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208946
IP address blocks: 93.171.158.0/23 maxlen: 24
95.47.108.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f1:de:8a:c5:20:2a:25:9e:73:f0:17:b3:ee:65:0b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Feb 10 21:58:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b775d9f364ba44c980fc9ad76b448c53bf70971a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:4e:06:c9:39:f5:b6:f9:f3:84:98:e2:ea:
00:f9:93:b4:e1:91:74:22:79:d1:fb:ee:59:81:2a:
52:47:2f:1e:2f:b3:aa:8d:c8:16:18:d0:a2:64:fd:
f3:a2:d3:ea:e3:81:aa:53:22:fb:1c:74:41:61:75:
7a:a1:3b:b5:23:f8:25:0d:c8:dc:f7:21:5b:dd:55:
41:f9:40:fc:2c:17:96:78:3b:e7:7d:49:91:c2:cd:
67:73:bd:67:7d:e1:ed:74:9e:81:7f:a2:c1:1c:a2:
ee:96:d4:1a:0b:0f:b7:ed:3a:7d:c9:c8:07:1d:67:
94:88:e6:8c:05:33:28:04:66:a9:7d:48:c3:ee:97:
bd:34:bc:09:2a:2a:a6:2c:e8:90:15:00:db:1a:97:
97:b0:8d:7b:b4:69:58:91:d6:e1:53:13:9d:7e:fb:
38:d8:12:a6:bf:36:c9:34:fa:f0:54:78:60:8f:17:
5f:74:ac:ca:fc:d7:9b:70:87:80:3f:4c:ab:e7:b1:
ea:15:f0:ff:a9:b7:a9:67:0c:6d:00:63:95:fd:a6:
c6:25:47:2e:73:19:a5:13:64:07:2f:a7:a5:02:98:
b2:f8:eb:ec:cd:f2:13:fc:da:a0:70:08:25:b7:65:
c7:34:e1:c7:eb:25:6b:bd:49:48:b7:74:c9:f3:1c:
42:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:75:D9:F3:64:BA:44:C9:80:FC:9A:D7:6B:44:8C:53:BF:70:97:1A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t3XZ82S6RMmA_JrXa0SMU79wlxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.158.0/23
95.47.108.0/23
Signature Algorithm: sha256WithRSAEncryption
23:3b:dc:42:ba:85:cb:74:4d:18:4e:9b:9a:cc:be:bd:d3:77:
09:0f:38:6e:af:84:1a:17:88:fe:54:ae:cb:0b:b1:bf:b5:00:
59:5a:98:79:a5:b2:88:43:98:10:3c:27:a1:58:09:84:7d:b7:
99:3e:9f:6f:a3:ca:62:af:f7:a1:f1:62:5e:e8:4b:80:46:bb:
59:47:b7:94:86:fa:df:0a:62:4b:13:e6:e3:a0:44:f8:38:f0:
1a:be:72:0f:74:d0:5d:51:8d:49:93:0f:e0:d2:16:5d:8d:1e:
a4:24:88:74:57:31:5e:51:0b:94:e2:a8:c9:85:eb:13:df:2e:
95:41:52:94:7e:cb:28:18:c6:bb:1c:c0:3d:c8:bf:0d:d7:b8:
ed:e0:59:b8:88:c5:ee:6b:ba:b1:28:0e:6b:76:c0:f0:64:c3:
8f:92:e8:ea:30:9a:f7:cc:73:a7:75:e3:ed:24:3f:c8:e2:33:
77:af:13:b7:31:ba:43:cd:cf:5c:3a:09:1d:50:23:d1:ac:86:
5b:1f:3c:6a:9b:b7:28:92:cc:d7:89:c9:a2:7e:a7:68:86:cb:
14:2e:c2:70:c5:70:9e:04:ea:08:6d:5f:c3:29:77:f0:84:a6:
b8:9d:a3:7b:60:c6:9c:d6:75:66:d9:be:b1:d8:8f:47:c0:ed:
34:ab:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:38:58 2025 by rpki-client