Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t409E4_E7BhsFpGp7lkpbg2SiIE.roa
File: t409E4_E7BhsFpGp7lkpbg2SiIE.roa (raw, json)
Hash identifier: HwPotf71IXF8qxmqM4+e+KWRmw7lcXSWQ6gQYPGd5sM=
Subject key identifier: B7:8D:3D:13:8F:C4:EC:18:6C:16:91:A9:EE:59:29:6E:0D:92:88:81
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0181D9DDDB14791BDF8251B919834B490079
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t409E4_E7BhsFpGp7lkpbg2SiIE.roa
Signing time: Thu 07 Jul 2022 18:13:24 +0000
ROA not before: Thu 07 Jul 2022 18:13:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201069
IP address blocks: 93.170.187.0/24 maxlen: 24
93.170.96.0/24 maxlen: 24
95.47.119.0/24 maxlen: 24
93.170.27.0/24 maxlen: 24
93.171.218.0/24 maxlen: 24
95.47.63.0/24 maxlen: 24
93.171.13.0/24 maxlen: 24
2a02:128:14::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d9:dd:db:14:79:1b:df:82:51:b9:19:83:4b:49:00:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jul 7 18:13:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b78d3d138fc4ec186c1691a9ee59296e0d928881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:88:82:05:f1:f7:d1:5b:38:65:57:e6:5a:aa:
ba:a8:24:ac:81:0f:7a:1f:05:02:4a:d7:16:1d:44:
30:e1:c3:2e:a3:f3:c4:46:db:01:8c:ab:0c:78:7e:
4c:07:22:63:72:01:fa:7e:9f:a5:15:8c:8f:fe:27:
ee:89:97:27:a0:9b:4a:cf:f5:8b:63:05:dd:b8:c3:
59:83:71:9e:96:3a:0f:ee:3a:f8:99:6f:c1:d5:ee:
11:45:00:bc:ef:eb:9d:6f:c5:80:e9:2e:90:34:b8:
2d:8b:bf:60:1b:9a:e8:38:15:c0:ec:90:0b:50:d3:
ea:99:70:95:0e:42:69:38:f9:8c:0f:a4:63:0d:0f:
d9:7b:be:5c:6c:35:b5:27:16:56:b8:cc:64:ec:c1:
cf:5b:30:9e:1f:8f:99:47:9b:db:d7:87:83:c5:dd:
54:56:ea:6e:3a:6b:2e:42:c3:d3:65:59:b9:61:95:
6c:cd:fc:b4:38:55:59:2c:d5:a9:47:6c:ee:0a:22:
66:e6:f6:d6:e1:1b:56:90:f6:01:6f:f0:23:d6:63:
77:d4:5e:83:6e:4e:8f:f2:29:46:47:e3:9e:ee:28:
98:8e:f3:3d:29:34:d7:0f:9b:81:7b:05:a2:e6:fd:
22:ad:32:b1:fe:59:8e:29:07:49:0e:33:1f:9e:1e:
7a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8D:3D:13:8F:C4:EC:18:6C:16:91:A9:EE:59:29:6E:0D:92:88:81
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/t409E4_E7BhsFpGp7lkpbg2SiIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.27.0/24
93.170.96.0/24
93.170.187.0/24
93.171.13.0/24
93.171.218.0/24
95.47.63.0/24
95.47.119.0/24
IPv6:
2a02:128:14::/48
Signature Algorithm: sha256WithRSAEncryption
66:d9:e0:f7:39:ac:46:73:c6:a3:69:a8:db:02:97:94:66:86:
b5:91:b4:61:6e:c2:d2:ea:76:09:ba:ba:0f:a9:05:4a:54:59:
12:5e:86:1a:03:73:5a:ec:de:4e:d0:85:2e:b2:24:4e:b5:d2:
42:06:15:55:10:d2:04:cb:3e:21:63:1d:65:fe:a3:0c:78:39:
45:06:a0:fa:35:b1:16:9e:1e:98:9f:b3:8c:b7:5e:9b:ff:4f:
ff:ec:be:46:9b:1d:1a:e7:9c:b6:b7:f8:eb:39:ae:9b:e2:d6:
73:9f:64:4f:6d:a6:c8:4b:9a:b5:38:35:ce:86:e6:a5:f0:27:
29:d0:1d:a8:38:30:ea:de:86:7f:78:35:79:5c:3f:62:6a:e3:
bf:44:fd:39:74:48:ed:73:bb:9b:4d:6e:db:62:15:b2:1b:d3:
91:d6:e2:2d:3b:e0:c9:c4:c4:91:eb:73:cf:f9:7a:5d:74:c3:
84:a1:e8:b7:65:9d:9c:c0:ec:96:a5:de:f5:e4:ba:64:94:3d:
50:06:2b:ab:76:a9:cc:d2:8e:61:1c:50:b9:7b:e5:09:d5:24:
1a:aa:5f:d3:eb:1e:19:84:79:bb:88:e8:99:36:e6:6d:43:f8:
d6:14:45:a2:73:cc:6b:22:72:7e:34:4e:6e:ff:b0:82:e0:3e:
52:3a:45:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:24 2025 by rpki-client